Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: xiTCOGMwcRC8RjCqOkdzyfCuhEHCzKTGWOy9NEbGO8g=
Subject key identifier: 0C:3C:EC:5D:67:75:65:85:79:05:7F:A6:52:10:AF:09:7D:95:B7:2B
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 01A0CB597CFFAC14050C922269DE6C3216E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 1A6F
Signing time: Tue 22 Sep 2026 23:00:34 +0000
Manifest this update: Tue 22 Sep 2026 23:00:34 +0000
Manifest next update: Wed 23 Sep 2026 23:00:34 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: BC+Gji5A5AXtzjHZoQW4g7UPJddXMxwo86BJfz26j/g=)
2: 9dcMnZF_hjQhvJcga50J4Lgw0oc.roa (hash: 6V2ZAOY1uWD3nVg5qScVh7xpT8E4AfFf2ucJTTSLBok=)
3: UZPOWsV_FJe0LaItYy8ujva8wUU.roa (hash: uIto6VX+5CDXd7vtEA+gBkH2FtA4Z4f+sQvfJ6SzABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:7c:ff:ac:14:05:0c:92:22:69:de:6c:32:16:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Sep 22 23:00:34 2026 GMT
Not After : Sep 23 23:00:34 2026 GMT
Subject: CN=0c3cec5d6775658579057fa65210af097d95b72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:21:35:26:48:d7:71:38:81:05:e5:76:e6:ee:
82:12:6b:51:d4:f7:19:9b:bd:ff:e0:c5:a6:87:21:
62:88:f2:11:3a:83:dd:0d:36:ae:9f:ee:08:30:32:
a0:01:99:e4:f1:23:da:09:27:53:df:3e:aa:11:c5:
13:15:c4:21:14:c8:57:30:54:ab:9a:73:d5:c4:d4:
ab:14:1a:03:34:b5:9c:ce:bf:1c:3b:d9:b8:12:ee:
df:65:7f:25:fa:f3:da:58:00:fb:1f:2d:70:2e:b2:
c7:42:a5:c9:a6:8c:72:c4:45:8b:c0:67:5d:01:9f:
cc:c5:3f:a0:03:98:6e:e6:80:6f:56:08:86:d1:25:
52:b7:4e:eb:25:ed:8b:03:0a:1b:3c:64:73:f9:db:
89:67:21:a4:71:00:67:d6:bb:ce:47:6d:41:7f:65:
16:69:3c:61:52:5b:32:f2:91:bf:15:2b:33:17:c5:
aa:20:54:5c:23:89:47:22:80:5e:08:e5:51:fc:72:
5b:3f:35:b6:db:de:b3:cc:74:35:5a:61:ed:20:f2:
29:47:75:03:be:b0:c7:ea:23:04:68:a8:cb:df:ea:
da:63:8b:8f:c8:19:14:bc:9a:7c:bc:04:d7:a7:96:
54:7d:4f:cb:c1:71:53:e6:19:90:92:64:80:86:41:
53:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3C:EC:5D:67:75:65:85:79:05:7F:A6:52:10:AF:09:7D:95:B7:2B
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b2:24:d7:32:6f:66:15:b4:18:3f:53:f0:91:f8:93:94:e7:
ba:c8:f5:23:0f:97:21:4a:bc:11:08:7c:2e:7b:99:a5:30:86:
9f:ca:cc:01:f7:a4:1f:b6:6f:17:6f:6b:7d:dd:07:0d:f9:56:
17:bc:be:1e:1b:ae:54:37:36:01:cb:f9:aa:6c:46:c7:af:52:
fa:dc:04:de:dc:8c:a7:9d:42:aa:9a:47:f9:69:bc:f4:9f:c7:
0e:74:44:ca:a2:28:d1:70:9b:a9:68:f2:60:58:92:cf:bd:ec:
7f:9d:64:62:22:da:de:9d:5a:f4:a2:55:35:66:70:63:28:4c:
99:89:c1:c4:77:e5:6c:21:dd:e2:78:73:9d:63:39:20:ea:20:
4a:b7:a0:0f:92:27:57:fd:48:3e:36:6c:8d:0d:bd:21:4d:23:
e8:ea:47:a1:11:16:c0:10:a1:64:2a:16:e4:95:2c:04:50:d5:
de:42:60:12:fe:18:f2:8e:1e:1f:e3:2f:b8:21:dd:01:4e:87:
e4:2e:d8:d9:a5:d4:b1:83:23:d0:f7:aa:74:10:a9:ae:e2:bc:
d1:a1:a9:f8:da:d5:56:5e:d4:48:ce:f4:4f:f7:29:a0:ea:a3:
6e:89:b4:65:50:26:fc:16:e7:95:f2:f9:9f:8c:f2:7a:9f:50:
b6:51:1a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:54:22 2026 by rpki-client