Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: MbAP09HJ9tHcHEdGBTz5rcJdqpcIAm7x3wTyTXXJe0k=
Subject key identifier: 32:1B:31:11:62:6E:08:18:8F:A5:3A:D5:FC:5C:E9:7D:33:6C:5E:D6
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 019F9090B6161592C4E571562149FCA77C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 19CC
Signing time: Thu 23 Jul 2026 20:00:30 +0000
Manifest this update: Thu 23 Jul 2026 20:00:30 +0000
Manifest next update: Fri 24 Jul 2026 20:00:30 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: u2eL7/Dw/EvwbTLOW32NzrR/l+Eu7sjoXrghCG2e9Gk=)
2: 9dcMnZF_hjQhvJcga50J4Lgw0oc.roa (hash: 6V2ZAOY1uWD3nVg5qScVh7xpT8E4AfFf2ucJTTSLBok=)
3: UZPOWsV_FJe0LaItYy8ujva8wUU.roa (hash: uIto6VX+5CDXd7vtEA+gBkH2FtA4Z4f+sQvfJ6SzABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:b6:16:15:92:c4:e5:71:56:21:49:fc:a7:7c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Jul 23 20:00:30 2026 GMT
Not After : Jul 24 20:00:30 2026 GMT
Subject: CN=321b3111626e08188fa53ad5fc5ce97d336c5ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:95:a6:5a:35:50:8c:e1:d0:fe:df:dc:18:
ea:ae:9e:95:bf:52:b3:14:9a:60:21:dd:ed:10:bb:
6c:1c:da:48:1d:db:c1:d5:12:94:b8:72:98:ec:71:
57:90:0d:88:c6:6b:7f:b3:57:67:f6:35:8c:7d:42:
9c:ce:49:7c:45:92:9b:b3:50:a3:3c:bf:14:06:f8:
2f:73:18:f4:40:0d:20:fe:4b:73:07:6c:52:a3:ea:
73:90:be:35:3e:d5:1e:06:40:61:ef:7b:05:f6:95:
87:c5:18:04:55:32:3a:5b:cb:aa:1f:29:f0:01:fe:
2d:82:9a:76:22:f6:9a:9e:18:7d:92:e2:ef:ff:5e:
49:49:90:03:c8:20:b1:d9:67:96:5a:38:0e:28:f8:
f6:2f:03:29:c7:69:19:0f:fa:5d:a7:2c:ad:51:c6:
aa:24:00:6b:69:70:92:67:19:18:6d:31:6c:db:f9:
ef:cd:8e:0c:b2:82:a5:e5:d4:8d:ff:b8:38:3a:2e:
59:8f:b0:a1:ef:e0:85:24:2c:28:66:5c:68:f8:9f:
27:69:d8:66:79:00:9e:84:e1:40:be:aa:0e:7e:fc:
f3:a9:d2:5b:9d:ee:fd:1f:02:b7:87:e9:9f:9b:8b:
df:a4:99:4c:96:7b:1f:f0:78:93:36:ad:b6:7a:22:
e4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1B:31:11:62:6E:08:18:8F:A5:3A:D5:FC:5C:E9:7D:33:6C:5E:D6
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:07:1b:26:9b:1a:13:2b:d9:f3:1e:7a:59:38:63:ee:c2:6a:
c6:a6:39:94:bb:7d:fe:2e:fa:4b:c5:6f:f1:4f:8d:93:ce:7a:
7e:e6:87:68:57:9e:b8:34:a0:2b:85:4b:19:e0:3d:98:81:8b:
d5:7a:8e:0c:5e:7a:e9:e4:89:49:25:13:04:a1:5d:bf:04:7f:
a7:32:22:82:04:c0:9e:f5:57:a5:dc:c4:c5:79:88:9c:4b:18:
99:6f:e9:25:3b:8a:c2:e7:95:34:14:16:96:ce:fc:ae:3d:13:
18:d1:2e:96:ca:b8:f2:2c:75:24:41:b5:83:09:66:b6:ca:10:
45:53:e0:d2:ea:9d:50:71:bd:83:99:22:ab:2f:2f:db:74:25:
6e:96:09:2b:85:6a:f6:cf:82:fe:cf:80:c2:da:f3:8a:80:3b:
b0:6f:5a:4e:bc:f7:d4:53:3e:4d:28:8d:26:b6:dc:e7:9d:cb:
d4:02:af:a9:0b:47:01:4e:8f:3e:36:9f:c5:aa:f4:de:23:d2:
4f:33:9b:17:4d:47:5e:85:c1:82:d7:6a:8e:51:64:87:00:f5:
3f:52:fa:41:52:3f:eb:4b:34:92:2e:73:c2:30:12:4f:ac:85:
f4:59:87:f1:7b:b7:d4:77:e1:9b:a2:9d:b5:6d:8d:99:82:3f:
80:19:4a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:33 2026 by rpki-client