Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier: H8I2cpGaRo/RcsvnPimg4dj4j2+8kbgtQ+VJmsaeVfc=
Subject key identifier: 1F:08:42:E6:D7:F1:56:F9:16:68:E2:D5:BD:36:CD:EC:40:49:A2:98
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 019E1F112AB188207BEC73D512A3DEFE6A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number: 12C2
Signing time: Wed 13 May 2026 02:01:19 +0000
Manifest this update: Wed 13 May 2026 02:01:19 +0000
Manifest next update: Thu 14 May 2026 02:01:19 +0000
Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: Vg9JKbCWuo48uuZsV6tU7OjPVoYKQXWojLULYhF7wQs=)
2: VpcTd6xXlgFFUSrpk4clP1LplCk.roa (hash: z6Z+0vG8Hh50YDE7aHF3RrHxwQleH1k0N54rCd2esz8=)
3: uGnD4olvWwb-IxQgtMlpkYc5Ygc.roa (hash: 3grRGp9lhYOmkty3bAIcup/fw2wObERf8v9hgQgL3a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:2a:b1:88:20:7b:ec:73:d5:12:a3:de:fe:6a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: May 13 02:01:19 2026 GMT
Not After : May 14 02:01:19 2026 GMT
Subject: CN=1f0842e6d7f156f91668e2d5bd36cdec4049a298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:9d:70:60:52:05:d1:bf:6d:52:9d:e2:b7:
65:d9:fa:ab:79:e3:c8:0c:8a:aa:57:27:97:75:eb:
1e:2c:64:dd:44:51:ba:d5:6c:b3:08:c5:60:d3:71:
a5:1a:45:63:d7:e9:ef:2d:b0:db:2e:cd:f3:59:ac:
b7:ec:4c:dd:5b:68:2e:51:11:e6:93:86:48:fd:51:
32:f1:64:da:2a:31:c9:6d:1a:2c:f4:78:e8:69:cc:
43:3f:8c:cc:46:48:eb:df:18:6d:65:86:40:a8:1d:
fb:15:7c:56:a3:43:96:9a:21:95:70:94:bc:09:0d:
a1:7c:a7:95:c2:59:be:26:9b:3c:15:cb:e8:58:a0:
59:0d:fe:25:ff:b8:c6:7f:8a:8c:a0:f6:eb:97:bc:
f1:ac:aa:53:1a:ce:97:c1:bb:a9:dc:bd:e8:19:d9:
fd:98:c8:4b:49:54:11:8f:27:87:de:b6:eb:82:b3:
ec:42:f4:d6:a7:9c:79:0c:bb:d3:28:90:26:28:91:
e5:1e:58:d7:1f:f0:ab:a1:4c:7a:ab:3f:f0:46:16:
16:34:ac:6b:2b:9b:41:6e:89:0d:4b:23:d3:0f:e9:
0c:00:89:25:ab:5c:b4:72:10:0e:3c:79:98:b9:81:
9a:a0:42:4a:d0:5d:6d:56:6e:78:15:9d:34:32:ce:
6d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:08:42:E6:D7:F1:56:F9:16:68:E2:D5:BD:36:CD:EC:40:49:A2:98
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d4:4a:07:ee:c8:86:ca:6c:c3:65:b0:19:78:9c:b9:a3:96:
bc:21:27:d4:b1:db:33:22:8f:93:a2:3f:01:89:35:ad:8e:17:
43:ec:7b:cb:72:26:7e:32:11:7f:ab:8a:24:af:38:0b:19:b2:
28:b6:c2:a1:a6:67:9b:96:43:aa:7c:4b:78:e8:13:11:15:4a:
96:c5:f9:a7:95:c0:4a:2d:f3:cf:9f:8b:0f:87:a3:6a:4e:b0:
e0:78:2a:ec:7e:d0:12:71:70:e4:8d:99:fa:c2:14:a3:9a:c9:
37:11:71:08:e7:d7:ca:47:d3:0b:93:6a:84:72:76:f5:4d:e1:
7e:4f:13:2e:b2:5e:c3:8e:74:86:f3:f9:b3:32:c1:bd:03:b3:
62:6d:b6:b0:31:1f:4e:12:2c:1d:9f:8a:f5:50:07:35:b2:21:
fc:7a:c5:8b:60:bf:dc:eb:85:83:1a:f0:7f:b8:37:6e:d4:70:
47:38:62:23:a0:4e:a4:b8:0c:07:a8:98:2e:6d:57:93:3a:2a:
cd:93:5c:bb:07:19:ec:6f:15:98:e3:78:8a:83:cd:38:77:41:
2f:fd:c0:57:a0:7a:59:67:f5:1d:2b:67:e1:c1:18:1b:2a:8f:
e7:e5:34:ad:3e:65:7e:9c:52:88:fa:00:65:80:2a:d4:02:13:
dc:ed:20:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:13:36 2026 by rpki-client