Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: 0OWbagkzwD+ws2UsOYd0nvwHSUMq+hCMy31MPnd78ok=
Subject key identifier: 72:3F:C4:2F:21:11:07:8F:39:DE:78:E7:DE:25:E7:A4:99:B6:06:62
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 019D2695EEE87A3532CC2865930A6108BF69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 20:00:53 +0000
Manifest this update: Wed 25 Mar 2026 20:00:53 +0000
Manifest next update: Thu 26 Mar 2026 20:00:53 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: wtsHe7dQ+Eoye0uOT6mc5Migk+81guBfZ2/mIfxNoWY=)
2: 9dcMnZF_hjQhvJcga50J4Lgw0oc.roa (hash: 6V2ZAOY1uWD3nVg5qScVh7xpT8E4AfFf2ucJTTSLBok=)
3: UZPOWsV_FJe0LaItYy8ujva8wUU.roa (hash: uIto6VX+5CDXd7vtEA+gBkH2FtA4Z4f+sQvfJ6SzABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:ee:e8:7a:35:32:cc:28:65:93:0a:61:08:bf:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Mar 25 20:00:53 2026 GMT
Not After : Mar 26 20:00:53 2026 GMT
Subject: CN=723fc42f2111078f39de78e7de25e7a499b60662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e9:54:f7:9f:32:9a:3b:65:ac:aa:c1:b4:f2:
02:f2:b4:b8:24:68:f0:67:3c:ad:ce:53:fe:b8:3f:
7f:bb:9d:06:f9:37:8a:0b:ce:0b:ac:a4:5b:d6:1a:
ab:9a:6f:d4:a3:af:b1:e6:88:52:29:00:cf:9f:16:
32:e4:bd:bc:9f:c1:e5:64:84:83:83:25:ab:19:ef:
06:13:12:5e:c4:88:ad:e6:2b:a9:04:82:84:1f:96:
91:c0:44:f8:1b:d2:9c:a3:32:05:36:92:58:63:09:
17:bf:3b:18:d6:b5:be:04:35:89:60:87:1c:d3:ca:
64:9d:a9:b3:fe:27:5c:ce:8f:fb:bf:15:48:94:d3:
e2:0c:b7:e4:74:da:d4:f2:9d:b7:b6:af:c8:0e:95:
e8:75:d1:1e:e7:ef:e9:5d:bf:6d:70:56:95:24:20:
b3:dd:45:53:d0:9f:c4:ba:f4:b4:9d:f7:e3:c2:60:
c6:a0:12:19:5a:0a:55:06:a9:1c:f1:cf:ff:5b:0e:
9d:e1:bf:89:f8:b4:b5:c0:eb:6d:6f:98:54:c2:ff:
47:19:1e:e1:74:70:86:5a:71:0f:a6:30:c8:32:dd:
8c:6e:37:92:12:04:bd:e3:47:4e:c9:97:41:9e:4a:
ca:68:a3:3e:b5:5c:9d:f7:d0:8d:9f:bd:39:f1:27:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3F:C4:2F:21:11:07:8F:39:DE:78:E7:DE:25:E7:A4:99:B6:06:62
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c8:fd:19:b3:f2:52:54:6f:fc:39:52:ab:1f:b8:4c:31:00:
d4:72:2f:a2:8f:64:ab:be:b8:87:ab:97:08:1a:36:b8:1e:b4:
61:3a:a0:3c:df:39:10:da:a8:91:0a:77:70:3a:0f:32:f2:02:
3b:5e:09:4f:b5:d2:b5:8b:05:88:54:3f:9f:af:a0:2d:cc:72:
42:0a:d0:87:c7:3c:30:87:87:ca:7c:b7:2a:e2:52:e6:7d:4f:
44:c7:60:fc:b0:f1:ec:ae:80:ea:6d:dd:3b:a0:c5:ff:f5:ef:
28:3a:1d:ae:cf:d2:03:a0:59:5a:b7:fc:0a:f3:13:af:d2:e3:
ad:a0:90:14:ec:47:fd:4a:1b:d4:7f:7e:12:0c:8c:f0:39:0c:
fe:63:91:76:87:50:5c:4f:82:3e:9d:89:9b:0f:d8:8f:d6:5e:
30:7c:15:2c:c3:19:26:7b:fe:d4:82:2f:ed:72:5a:f2:0c:72:
e3:08:b7:ce:7f:77:20:76:f3:68:25:a4:4c:f9:8e:e5:70:cf:
2b:14:bd:14:26:c8:9c:24:37:03:30:a0:51:c3:15:ae:b2:80:
2d:3f:7a:d4:e6:a3:6b:e8:08:c5:27:cc:47:4a:8a:70:8e:e3:
0d:ff:f7:c3:f2:ab:94:8c:10:5d:23:0f:1a:a1:19:75:f8:49:
11:ea:7d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:16 2026 by rpki-client