Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier: 65icBZLBGb7lurBIbzPi0B0RVN+lRfpN9EHQRuH6KnU=
Subject key identifier: 66:3B:F6:25:ED:F6:58:AC:9C:81:F3:07:25:66:75:66:94:98:9B:D7
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 019F91DA9739D86C34E248845D952D5D9260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number: 1382
Signing time: Fri 24 Jul 2026 02:00:49 +0000
Manifest this update: Fri 24 Jul 2026 02:00:49 +0000
Manifest next update: Sat 25 Jul 2026 02:00:49 +0000
Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: /umOHwOk+TjCzxEKSsCRkyiyrWN+Lvfrn59jiiQaoBw=)
2: VpcTd6xXlgFFUSrpk4clP1LplCk.roa (hash: z6Z+0vG8Hh50YDE7aHF3RrHxwQleH1k0N54rCd2esz8=)
3: uGnD4olvWwb-IxQgtMlpkYc5Ygc.roa (hash: 3grRGp9lhYOmkty3bAIcup/fw2wObERf8v9hgQgL3a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:97:39:d8:6c:34:e2:48:84:5d:95:2d:5d:92:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Jul 24 02:00:49 2026 GMT
Not After : Jul 25 02:00:49 2026 GMT
Subject: CN=663bf625edf658ac9c81f3072566756694989bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:4a:ab:de:ba:09:04:52:6c:2f:89:50:b4:
a4:e8:8e:3c:f3:42:c4:1b:09:7d:8f:19:13:09:fa:
01:34:4c:cd:e7:a3:bd:f9:60:c8:84:63:c4:c7:98:
91:42:17:f0:5a:67:37:49:1f:60:e2:37:7b:a9:88:
14:06:56:d0:41:03:c0:d7:76:8c:1d:4f:c9:3d:9d:
ee:96:e4:1f:4a:26:72:ae:d5:c8:9a:1c:71:4c:d3:
22:e5:c7:64:72:7d:81:d9:a6:55:75:b9:ef:e3:96:
d4:e3:d0:5d:b1:e5:82:4f:5a:7b:55:d4:28:62:4f:
0d:47:ea:59:94:f7:cb:d8:ab:2d:8b:ab:9d:3e:65:
b8:e2:26:ac:09:c9:87:27:1c:07:0b:ce:8e:7c:ba:
9a:35:e6:3b:15:3e:ce:2d:20:34:aa:9d:b1:04:23:
40:02:f3:e3:f4:98:8a:6e:eb:97:38:d6:50:60:65:
89:ef:cd:ef:07:38:2b:aa:0a:f9:f1:77:a3:f7:30:
5c:22:03:93:42:c2:7f:95:0e:52:44:3f:2d:f7:2e:
6d:dc:53:66:2c:a9:eb:f2:1b:26:ee:5f:6b:a6:e5:
8c:83:fa:77:bd:9c:2b:7d:77:09:88:e3:62:d8:47:
c6:1c:e2:8b:da:f8:1e:6c:22:90:46:37:40:e5:5d:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3B:F6:25:ED:F6:58:AC:9C:81:F3:07:25:66:75:66:94:98:9B:D7
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9e:97:af:65:6a:2b:29:9a:54:9d:5b:66:7d:58:b5:d6:c5:
b5:b8:00:47:4f:74:50:14:a3:92:71:10:0f:6a:37:a6:b3:19:
f7:d8:d5:6b:cc:a4:11:b1:a5:c5:7b:77:46:ac:ae:40:95:78:
51:55:94:83:78:c4:08:4d:9c:25:6a:d1:b4:be:c9:3b:b7:e5:
3d:99:2d:bc:d1:db:18:67:26:fa:a6:e5:af:17:c8:31:c0:d3:
77:cd:54:8f:65:c9:11:1b:4d:c4:64:fe:ad:9a:1f:24:c3:c5:
b7:ab:e0:39:67:ce:26:a3:6a:20:37:f9:c9:70:f8:26:46:82:
92:c4:b0:19:9a:01:15:e5:1f:c8:66:ff:61:06:31:9a:7c:4f:
bd:ed:02:19:8a:f4:d8:37:d3:cb:27:08:d8:a3:2d:9f:8e:e3:
44:fb:47:f6:ae:f8:d3:13:34:eb:a3:f1:73:ea:13:02:c6:f6:
0f:5f:67:65:ee:93:f7:63:20:52:1d:27:0e:4c:ee:92:f9:f0:
6d:1c:aa:9c:11:10:23:f3:71:2f:86:fe:d3:28:8f:a1:58:a1:
8a:db:ac:78:ad:fd:3e:2b:4b:c2:12:33:29:7a:25:10:b8:cd:
4b:57:62:05:87:5c:c9:2c:a3:6a:ff:95:a1:83:cf:10:66:60:
53:8a:66:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:03:26 2026 by rpki-client