Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
File: B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft (raw, json)
Hash identifier: +ks5s8vKUb7gn13nnyCXQda8jKk1cM07B2mI+hZA7vA=
Subject key identifier: 08:83:3F:BB:F1:DA:E9:3F:D3:20:95:14:FB:99:D4:BB:EA:0F:F8:D8
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Certificate issuer: /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial: 019DB1D838C0E5C8A2CF28109FCBDE8105F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
Manifest number: 153E
Signing time: Tue 21 Apr 2026 21:00:30 +0000
Manifest this update: Tue 21 Apr 2026 21:00:30 +0000
Manifest next update: Wed 22 Apr 2026 21:00:30 +0000
Files and hashes: 1: B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl (hash: q7gZbrNbrDBvaTTI8CHZ7BURS8ejLVpyLC1YxUyQT5I=)
2: UCT9k6BaPPeSMXxJ43Eo6nZzYW0.roa (hash: H/J8BuCj54OjW0xk7YjG+ivFyPL962N+uW8FPOndTZI=)
3: ryiFWbpMuqXbHhTaiUR9Bmksn3I.roa (hash: 4enRDEIE99ZnVUOrH1uVQZLMyVdi+VhTW5RGUgkPXEs=)
4: szJDTDjk11lPCTowxUuTkr1LOjA.roa (hash: tZ3E5yp9ifwL77hdiUkOobqFo6CYXkARUapRpbadEZc=)
5: tVIvfnxeNd5Q4fCCoef2VPaercM.roa (hash: UsZ5qTmb76xuEbD3sjS7Uzqq6fgKmtSM905Jk8/9DNA=)
6: wRtbNPKwzn29lLHL-XgfTc7v1-E.roa (hash: HKr7T3FnocuYvThL/hQV2CDARcO253MaFTxSFktB4b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:d8:38:c0:e5:c8:a2:cf:28:10:9f:cb:de:81:05:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
Validity
Not Before: Apr 21 21:00:30 2026 GMT
Not After : Apr 22 21:00:30 2026 GMT
Subject: CN=08833fbbf1dae93fd3209514fb99d4bbea0ff8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:72:94:51:e9:e9:11:80:a1:fe:82:02:a0:
25:ed:5a:3b:af:6c:d2:94:ee:1f:d9:3e:c9:3c:9f:
56:23:77:21:74:3f:19:bb:43:f9:ee:af:00:e5:75:
13:0a:fc:30:32:9d:08:2e:4b:e5:11:6f:bb:3b:e5:
c6:20:fb:ce:80:5e:7d:31:fa:25:a6:89:51:59:dd:
14:73:53:60:e3:c9:31:f2:f3:c6:59:f8:6e:2c:9d:
4b:7e:dd:aa:14:72:3b:37:7b:9e:be:2e:8d:26:b9:
d9:d1:6c:85:39:a6:fb:1c:d5:cf:33:f8:b8:36:36:
63:58:cb:eb:ec:70:1f:dd:a6:c4:2f:1b:a8:b1:46:
fe:28:42:e5:62:26:4a:92:70:17:ff:21:75:2b:54:
94:63:16:9f:a4:8f:75:1f:ce:50:a3:f1:22:41:3f:
57:63:a9:6f:04:c2:38:43:00:46:ff:7d:cb:97:97:
10:07:f8:dc:a7:e6:fd:94:91:47:b8:24:11:b4:95:
a8:64:45:ae:5a:df:26:cb:56:99:50:71:59:2c:66:
33:57:9a:05:f1:66:4e:9a:33:bd:73:15:f0:58:c6:
11:5b:90:46:e3:ea:d1:f0:fe:ad:42:13:c1:7b:ff:
47:ed:65:d8:61:5c:5e:d9:a7:16:10:db:ae:90:4b:
6c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:83:3F:BB:F1:DA:E9:3F:D3:20:95:14:FB:99:D4:BB:EA:0F:F8:D8
X509v3 Authority Key Identifier:
keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a7:d0:87:98:ee:9a:31:3e:1b:b9:77:6d:2e:31:54:1b:20:
7c:3d:5d:92:31:27:f3:83:40:74:a3:22:33:20:2e:c5:f6:ee:
aa:46:83:3c:05:94:3d:a7:9a:7b:71:a1:c9:1e:7b:5b:82:54:
7c:aa:20:d7:79:3a:eb:16:85:87:fd:34:4d:22:94:c8:f3:41:
b3:7c:30:9b:7e:9c:0e:2b:51:53:87:98:1e:7b:3a:75:64:a0:
5b:ba:18:7d:f7:d7:a9:31:86:e5:8d:35:35:bf:12:05:43:3a:
7e:34:0d:ea:8a:31:dc:b1:ae:ed:67:1c:78:5c:f9:a5:2a:32:
59:13:9c:da:b5:37:ac:f2:6f:ef:1a:c6:cb:55:48:1a:4d:c0:
9b:bd:ba:b8:39:f2:57:11:2c:f8:cd:25:1e:00:ff:50:8a:69:
00:24:ff:98:11:3e:62:97:70:5e:5f:0b:94:fc:c9:3c:65:45:
fd:af:0f:18:66:1b:f1:66:e5:97:82:d2:20:a8:20:2b:71:be:
bc:a4:3a:0e:d1:0d:c3:ab:b2:34:4e:53:55:7f:18:e2:7f:12:
24:38:aa:6d:97:91:af:48:5e:b1:ef:6c:61:03:01:3b:5a:a1:
50:4c:a0:de:42:01:25:a2:85:dc:5b:6e:67:cb:06:37:9b:cd:
83:f4:c8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:08:29 2026 by rpki-client