Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
File: 156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json)
Hash identifier: 5aAqT6GFnavKeKdYreiWMya/vtEdT1YUqL5L3Hr3OBQ=
Subject key identifier: 30:AD:94:6B:29:33:0C:03:EF:AB:53:9A:38:38:9F:C7:F1:2A:BE:C4
Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Certificate serial: 01A0017007C9BD96A25A08D4227DA835FF35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
Manifest number: 10A8
Signing time: Fri 14 Aug 2026 18:01:54 +0000
Manifest this update: Fri 14 Aug 2026 18:01:54 +0000
Manifest next update: Sat 15 Aug 2026 18:01:54 +0000
Files and hashes: 1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: 9PxvHbTIhR59D4wYhQSrc+aZe6iqX6vU61rEHhKrYYw=)
2: FL8p74tWI7ntw6R2xksbD1PAPss.roa (hash: gYU94roAVzlnVYJ/I8E+mMblo4Z/HWZwqnYhXEb29/s=)
3: bz8OgK9KGk7s_9Rbo1BfVZKPRMc.roa (hash: QMlz5xU6ZIS5u6QE8mCAeeanjx7pStZbTuS8Yuj6acw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:07:c9:bd:96:a2:5a:08:d4:22:7d:a8:35:ff:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Validity
Not Before: Aug 14 18:01:54 2026 GMT
Not After : Aug 15 18:01:54 2026 GMT
Subject: CN=30ad946b29330c03efab539a38389fc7f12abec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:1c:ce:1d:5c:19:4a:30:90:d7:53:c1:2a:
21:15:e6:53:58:49:0b:b0:1d:ad:1d:f9:cc:33:59:
54:a4:c8:a1:3a:88:63:f1:79:90:98:4b:36:0f:78:
31:df:0e:49:03:c0:cb:2e:7f:98:39:05:de:87:41:
5f:06:5f:f2:1c:58:ef:94:c9:b3:95:ae:02:24:64:
0d:47:83:53:12:f0:a5:4d:49:e7:7f:58:99:98:40:
d5:7a:f7:02:50:77:c2:30:11:ce:19:47:e9:a4:16:
ef:8b:04:85:03:b1:79:10:b0:88:06:8f:45:62:bf:
68:c5:3b:3f:57:b1:0f:87:b3:bb:89:23:ef:5c:92:
40:53:23:3c:83:b6:5a:1f:f3:08:23:b4:18:4b:40:
8f:74:9b:9f:33:99:16:c3:92:1e:69:37:da:6c:3a:
dd:74:e3:13:04:90:10:00:cb:1f:0e:41:11:c4:4b:
a4:21:46:20:1c:7e:c3:6d:7b:1e:e0:60:a1:da:2d:
f9:66:d3:51:06:45:3f:b7:94:80:10:e4:04:44:08:
6c:4d:f0:75:dc:56:c2:17:65:db:85:99:a3:37:63:
8b:f0:83:0b:f5:24:79:e9:f9:58:4f:34:ae:93:bf:
41:1f:a3:b7:00:d0:78:5b:ff:62:d0:1f:f8:73:92:
76:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AD:94:6B:29:33:0C:03:EF:AB:53:9A:38:38:9F:C7:F1:2A:BE:C4
X509v3 Authority Key Identifier:
keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4a:ea:23:ea:13:dc:3b:a4:7c:50:84:7b:3c:4d:c0:18:40:
d2:ec:16:a9:0a:c8:4b:6c:98:89:0e:d1:74:aa:41:31:c8:cc:
52:7e:6d:9b:74:fb:4b:28:e2:f9:c1:d2:f5:51:b1:53:68:69:
5d:3f:00:83:0b:87:68:6c:85:80:6a:16:40:47:c7:1b:bc:61:
dd:a2:2c:61:58:e5:82:ea:23:e4:18:3f:ba:19:51:2b:ff:64:
37:bf:7a:7c:c7:04:a9:87:bc:c3:3e:06:6b:34:bc:7a:ba:b7:
57:87:54:33:b7:34:70:1d:d4:46:d1:0d:db:c4:9a:79:f9:23:
6e:3c:71:50:6d:4c:f5:37:57:30:77:9d:0b:f0:4e:dc:f2:1b:
df:a4:95:98:27:62:15:2c:2d:fe:76:04:83:2a:16:e3:81:c9:
22:58:3c:18:9c:55:ec:15:bb:cc:26:17:17:58:60:9e:28:27:
63:49:a4:9f:80:d8:a3:65:55:8d:07:80:8b:3e:90:53:40:12:
a7:42:6e:2f:dc:56:02:e8:d7:95:b5:75:17:e3:87:18:fa:ab:
07:cd:5e:09:65:3a:4c:ff:b9:8c:4b:8e:56:e5:d8:14:c5:b9:
26:97:bb:03:7c:6b:33:36:d3:e8:bc:34:36:af:31:7e:d4:bb:
97:e1:63:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:30:25 2026 by rpki-client