Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: ImouNDoWEvbvTPFo3lBwOrWYr0PY70JHkcO7KYcbl84=
Subject key identifier: 76:EC:E7:4E:9C:E0:A5:EA:FB:F4:1E:F1:F1:78:D2:E7:9E:1F:F2:78
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 019D39E56E066A928F436132AF7F504F67FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 14:00:30 +0000
Manifest this update: Sun 29 Mar 2026 14:00:30 +0000
Manifest next update: Mon 30 Mar 2026 14:00:30 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: qiOwJYXdd8u6k32ue6MB13ourKMHPbrgHa3EYVocubk=)
2: 9dcMnZF_hjQhvJcga50J4Lgw0oc.roa (hash: 6V2ZAOY1uWD3nVg5qScVh7xpT8E4AfFf2ucJTTSLBok=)
3: UZPOWsV_FJe0LaItYy8ujva8wUU.roa (hash: uIto6VX+5CDXd7vtEA+gBkH2FtA4Z4f+sQvfJ6SzABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:6e:06:6a:92:8f:43:61:32:af:7f:50:4f:67:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Mar 29 14:00:30 2026 GMT
Not After : Mar 30 14:00:30 2026 GMT
Subject: CN=76ece74e9ce0a5eafbf41ef1f178d2e79e1ff278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e2:4e:80:70:35:f4:8f:4e:65:3b:da:a1:f0:
6e:76:be:b4:11:48:a7:83:e7:44:ea:16:cb:fc:ad:
df:80:95:30:4c:2f:89:74:60:61:d8:94:50:b3:38:
cd:4c:8b:d4:c3:ba:88:53:0e:ee:08:2f:f3:4f:67:
88:00:db:43:bd:b8:f3:f0:bc:e6:78:25:2f:03:36:
df:d5:69:f2:58:e9:00:91:08:69:69:61:c7:6b:c1:
f9:ab:65:e6:9b:69:03:59:39:14:fc:5a:0b:a8:5b:
cf:30:2b:07:b9:02:40:3b:59:61:6b:34:2e:e6:73:
15:a8:40:9b:0f:75:9b:73:67:6a:be:ef:12:a7:49:
14:59:1d:9c:95:bc:0b:fe:dd:07:9c:e2:8c:39:a9:
8a:2b:b7:0a:3a:ee:07:60:2b:ab:23:51:e7:16:af:
4b:2b:d5:21:94:b4:d3:df:f7:d5:b6:27:b1:ce:b1:
71:38:09:22:a0:1c:8b:cf:d3:f6:91:c5:bc:bb:bd:
4e:ef:71:21:ed:26:68:50:ae:dd:67:f0:70:a7:53:
38:56:e5:7d:f3:cf:db:0a:c7:5c:c3:39:dd:39:80:
89:ba:69:58:65:68:a8:b0:2d:b0:fa:34:61:f7:91:
09:ed:e1:53:c3:98:1e:5f:46:ec:6e:fa:b2:e6:ab:
af:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EC:E7:4E:9C:E0:A5:EA:FB:F4:1E:F1:F1:78:D2:E7:9E:1F:F2:78
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:96:aa:fe:53:72:b6:30:13:76:52:c9:4d:49:cb:84:20:09:
c4:23:41:e5:c6:24:e9:cf:a5:7a:9d:f9:2f:3c:5a:a1:f6:ac:
74:6d:19:ae:5a:fb:93:3c:9b:bc:78:da:8b:de:16:db:61:7d:
bd:ac:53:59:08:7b:65:e1:af:2b:c5:79:d6:48:98:ec:34:c6:
98:5f:07:c6:3e:31:a2:a9:16:34:ea:6a:9f:8e:29:82:4f:2c:
a3:64:bd:6a:60:71:cd:1d:fd:13:cc:d1:cf:d9:1a:10:e1:0c:
e8:77:4c:40:ea:43:f8:6b:13:81:39:07:bd:c5:74:47:6a:bd:
5c:6c:8a:80:8c:4c:57:d0:61:a5:c9:87:fa:85:01:b1:a6:74:
5f:02:bb:33:e1:4f:36:4b:b4:67:65:34:73:2d:c4:81:18:fe:
61:68:34:45:96:ac:b2:69:fb:b0:5f:9b:53:45:b1:a8:6a:9c:
a6:49:1a:ba:b9:45:0c:2c:6d:88:30:01:0b:26:05:0d:eb:fe:
88:37:79:31:6e:84:da:28:03:eb:8d:44:ee:f5:f1:35:2c:9e:
81:64:a4:c7:e8:8d:48:e2:f6:f7:0b:e0:a9:e2:54:97:9a:68:
d3:8e:b4:70:67:05:6f:4b:58:9c:60:33:eb:a3:52:56:b6:52:
67:62:ca:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:55 2026 by rpki-client