Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
File: 156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json)
Hash identifier: CKFTOwuLjarPkCSBa5svp4La2b4IJGjTGAZIsiKdUtM=
Subject key identifier: 1D:91:9C:DC:06:53:2B:C0:11:75:C2:F1:15:60:04:93:A4:B7:1B:C3
Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Certificate serial: 019D38D330C0C59487B19FB69032BACA0923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
Manifest number: 0F37
Signing time: Sun 29 Mar 2026 09:00:57 +0000
Manifest this update: Sun 29 Mar 2026 09:00:57 +0000
Manifest next update: Mon 30 Mar 2026 09:00:57 +0000
Files and hashes: 1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: /sPf3/hYLOFvp653p1+XrQ9DpAIBmKt6wTfD47GJJTo=)
2: FL8p74tWI7ntw6R2xksbD1PAPss.roa (hash: gYU94roAVzlnVYJ/I8E+mMblo4Z/HWZwqnYhXEb29/s=)
3: bz8OgK9KGk7s_9Rbo1BfVZKPRMc.roa (hash: QMlz5xU6ZIS5u6QE8mCAeeanjx7pStZbTuS8Yuj6acw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:30:c0:c5:94:87:b1:9f:b6:90:32:ba:ca:09:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Validity
Not Before: Mar 29 09:00:57 2026 GMT
Not After : Mar 30 09:00:57 2026 GMT
Subject: CN=1d919cdc06532bc01175c2f115600493a4b71bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:df:1c:b0:a6:fa:ae:1f:d9:d8:62:6d:5d:
f5:2d:7c:71:53:59:dc:b6:d4:09:a9:9e:02:0a:94:
42:2a:d9:ad:12:dc:bd:a8:13:a9:72:a4:b9:5f:3e:
36:58:f5:59:52:18:d9:8e:af:46:ec:b5:62:26:44:
8b:50:1f:db:90:fc:48:f5:7b:8f:34:23:7d:12:2e:
16:39:14:42:8f:61:61:3c:b8:49:b4:26:43:8f:93:
46:82:f6:8d:7a:49:a6:82:d0:d9:7d:ab:b0:20:6c:
bc:28:aa:44:7a:67:c5:a6:11:ef:65:2e:f6:17:44:
f5:37:96:8d:e2:a1:54:11:24:ea:ce:02:22:37:df:
ff:d1:94:e9:8b:d7:6f:5f:3c:19:35:1b:0d:9b:dd:
c7:05:9b:08:c8:85:c7:10:13:14:3a:84:0e:74:54:
20:8a:c4:21:49:a1:54:29:06:86:3c:0d:09:9d:b4:
87:77:4a:7f:5e:50:af:41:b8:dd:5a:d3:f1:32:95:
d6:f8:f8:82:48:71:b3:c2:70:88:10:9d:72:0b:1a:
65:fb:19:0f:c2:31:30:69:96:f3:19:58:91:34:0c:
8d:eb:03:11:b7:e2:54:ce:20:fe:4b:96:b8:43:0c:
d7:ff:4c:a8:e8:01:1e:0f:cf:74:98:3b:fc:47:5e:
1e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:91:9C:DC:06:53:2B:C0:11:75:C2:F1:15:60:04:93:A4:B7:1B:C3
X509v3 Authority Key Identifier:
keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:08:a6:67:23:a7:e2:e4:29:73:87:c0:ed:13:34:a9:f1:22:
a5:03:48:d1:3c:82:66:0d:ce:61:8f:83:3a:92:4e:e2:cb:9c:
5e:f2:ad:01:51:12:80:8d:ef:38:16:6f:99:77:fa:ac:17:43:
3c:7d:2d:0b:8d:3b:b8:ca:8c:27:f9:c1:3a:eb:e3:af:ec:44:
76:dd:ec:ee:da:38:ca:6a:60:39:3a:74:00:54:ea:62:f4:fb:
ab:2b:45:fb:81:18:0a:9c:be:de:25:0b:70:b0:24:e8:0f:40:
a9:3b:71:85:fe:28:55:54:59:48:67:94:87:46:66:b1:5d:5e:
c8:88:d4:7e:2f:89:44:51:89:0d:69:fc:23:80:ef:23:67:72:
92:52:e8:53:ab:57:ed:fc:c6:e4:66:45:23:1e:22:92:2d:75:
99:5f:1d:08:1a:dd:e5:55:f4:fa:5c:00:03:12:5c:5d:9e:a2:
fd:73:d3:6c:54:b0:38:72:68:01:ed:18:ea:92:00:f7:91:2c:
c3:e0:5e:52:6f:c9:42:19:b1:2d:f7:14:43:5f:b7:56:fd:dc:
50:c4:fc:f7:44:e9:93:e4:22:9b:28:21:b2:28:d0:d6:07:87:
65:3d:fa:e6:68:67:41:78:d7:78:ba:f5:0d:82:72:f7:ac:8a:
25:59:ee:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:54 2026 by rpki-client