Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
File: 156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json)
Hash identifier: LkLYmuqmFb93GeBp3Z94Y5LKQcYj+NJhDz7tDhScyn0=
Subject key identifier: F3:CE:60:13:45:D3:69:F0:A7:37:23:2C:48:29:49:F8:7C:A0:1B:64
Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Certificate serial: 019E3005518406B9976E44BF280144F51878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
Manifest number: 0FB7
Signing time: Sat 16 May 2026 09:01:55 +0000
Manifest this update: Sat 16 May 2026 09:01:55 +0000
Manifest next update: Sun 17 May 2026 09:01:55 +0000
Files and hashes: 1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: G1NF07HND79QhzUoEPVxOyWflMz+4r7sl8sCaOGFPhU=)
2: FL8p74tWI7ntw6R2xksbD1PAPss.roa (hash: gYU94roAVzlnVYJ/I8E+mMblo4Z/HWZwqnYhXEb29/s=)
3: bz8OgK9KGk7s_9Rbo1BfVZKPRMc.roa (hash: QMlz5xU6ZIS5u6QE8mCAeeanjx7pStZbTuS8Yuj6acw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:51:84:06:b9:97:6e:44:bf:28:01:44:f5:18:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Validity
Not Before: May 16 09:01:55 2026 GMT
Not After : May 17 09:01:55 2026 GMT
Subject: CN=f3ce601345d369f0a737232c482949f87ca01b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:6a:b4:b9:fe:56:3a:f7:8e:5f:01:99:48:
bb:92:12:7a:da:16:12:2e:4c:8c:50:a3:d2:91:ae:
a2:fa:5f:b4:3c:e6:b2:07:80:91:de:0a:c0:86:03:
ba:a9:d2:6a:29:28:14:56:23:f1:cd:07:a9:8d:08:
eb:8a:69:77:38:15:f0:23:8a:57:70:c6:ef:68:d9:
2d:62:42:48:9c:7d:4a:a4:7b:61:44:de:d6:d3:97:
55:de:66:15:d4:a5:07:9a:ab:2b:d2:21:38:07:be:
e7:4e:a9:96:26:2a:f0:05:22:04:93:37:ea:0b:66:
11:5f:73:a6:7a:df:6c:1a:e7:c9:17:d5:a6:48:21:
1f:90:7a:d6:68:f2:f7:36:d1:53:d8:d3:8f:4f:f5:
a7:ea:55:6a:a9:bb:85:9e:cf:97:fa:a7:b4:51:f3:
c5:9b:12:87:9e:aa:f5:fd:00:93:c7:81:b9:e8:b9:
63:62:5b:80:92:0f:e4:58:0c:af:0d:70:c1:90:49:
4a:d3:f3:34:e3:9a:21:d4:db:2c:98:ce:a4:7c:43:
d7:0a:c4:1e:c7:9c:44:bd:4e:6f:e3:c5:c5:a9:f5:
64:23:7b:8e:09:74:7f:f0:d5:4a:31:15:c3:d2:0c:
4f:d7:d5:b7:21:6c:d5:c2:4c:50:19:13:86:eb:da:
a5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CE:60:13:45:D3:69:F0:A7:37:23:2C:48:29:49:F8:7C:A0:1B:64
X509v3 Authority Key Identifier:
keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ee:00:81:d9:30:15:af:8c:7e:d2:b1:07:da:18:c9:31:b1:
3b:0d:e2:27:8e:28:14:74:d1:fa:57:d7:d5:f0:7e:77:53:fb:
d0:f4:f4:dd:86:66:40:d2:c6:03:29:f3:96:7d:c5:73:17:04:
c9:c2:81:a9:e7:27:1b:04:4a:0c:dc:27:a4:a0:d1:51:2b:a4:
4c:74:79:9c:a3:2e:0a:e1:f2:1c:af:35:db:e2:62:4a:e0:de:
cf:f4:14:62:ed:72:e5:63:a8:34:b6:dc:fd:e4:42:12:04:fb:
9d:eb:06:e1:4d:c6:82:9e:a1:56:2c:3d:b0:f4:01:03:9a:ed:
07:3c:7d:64:fb:c6:40:43:71:ef:f9:ae:9f:f5:76:b8:8e:19:
91:98:10:67:02:58:21:6e:c9:a1:2e:1c:3c:ac:fd:fd:a9:ce:
07:dd:6e:b8:95:59:e6:c6:8f:40:5c:58:46:28:61:88:65:52:
e7:7d:d3:db:d6:b6:c2:da:b8:b8:c4:2c:dc:ec:f3:59:78:99:
62:a3:8f:1c:4f:6f:ee:be:c9:6c:54:88:79:f4:a0:e7:e6:5c:
54:72:f9:94:75:3c:a7:71:ac:8f:2d:95:7a:af:a5:e4:91:e8:
2b:72:29:72:52:8c:ee:bd:c1:46:53:5f:a3:f2:a0:d4:14:b6:
cb:0e:0d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:18 2026 by rpki-client