Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: dKaxvJ4KOB3HdqZqO2IXvU+36dHXvoPs+lhd8tCZOn8=
Subject key identifier: 71:D2:F7:44:EC:ED:AA:F9:82:89:E1:0F:B9:65:97:E7:39:E0:8D:D6
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 019E1DC710DC9CFAC679FD81B70007A7DF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 190C
Signing time: Tue 12 May 2026 20:00:45 +0000
Manifest this update: Tue 12 May 2026 20:00:45 +0000
Manifest next update: Wed 13 May 2026 20:00:45 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: W+ooFk6UJyjRrfXcMx/g/Qbv9sEwtsVaWy8aqhzyS3Q=)
2: 9dcMnZF_hjQhvJcga50J4Lgw0oc.roa (hash: 6V2ZAOY1uWD3nVg5qScVh7xpT8E4AfFf2ucJTTSLBok=)
3: UZPOWsV_FJe0LaItYy8ujva8wUU.roa (hash: uIto6VX+5CDXd7vtEA+gBkH2FtA4Z4f+sQvfJ6SzABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:10:dc:9c:fa:c6:79:fd:81:b7:00:07:a7:df:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: May 12 20:00:45 2026 GMT
Not After : May 13 20:00:45 2026 GMT
Subject: CN=71d2f744ecedaaf98289e10fb96597e739e08dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:74:a3:53:54:59:10:5c:82:b9:89:77:a7:
c2:ff:9e:8c:4a:10:9b:db:e2:e1:df:f5:bf:b6:e8:
f5:1c:9e:99:90:df:3e:bb:c4:7b:cc:13:95:45:e7:
bd:11:98:f5:b2:85:83:39:31:89:5a:9d:7c:02:f4:
93:ff:82:42:80:f5:fa:a1:f4:61:7d:b3:2c:68:8a:
4c:d0:2a:48:ae:20:53:6e:90:59:6b:17:35:63:27:
fc:a1:e5:10:ef:09:f7:83:26:4c:ce:f7:90:49:ca:
ce:0e:eb:19:53:cd:c4:bc:43:ad:99:90:e2:e3:8e:
2e:84:d9:47:82:7f:50:b4:12:aa:78:46:11:2c:f6:
9c:6b:9d:39:68:03:64:9d:de:ff:43:60:19:ab:82:
14:8c:c4:39:2b:72:73:68:1c:d6:5d:aa:8d:19:a5:
d9:02:ac:56:47:83:11:9f:e0:62:fe:f6:6c:77:b5:
64:33:b4:83:13:fb:3e:5d:4d:dc:80:b4:04:8b:f0:
d5:99:fc:21:dd:d7:5b:68:47:88:8a:08:30:3e:81:
38:e2:93:75:ef:62:39:15:82:88:78:1a:a6:cb:f3:
70:86:ac:fd:42:1c:b2:59:b6:3a:83:46:b0:ba:01:
30:3a:a4:01:6e:b2:bd:01:ba:57:95:6b:75:ca:70:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D2:F7:44:EC:ED:AA:F9:82:89:E1:0F:B9:65:97:E7:39:E0:8D:D6
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:05:21:9b:a7:c8:53:c3:89:cc:14:c5:f7:ab:58:f8:f5:93:
62:7b:12:d1:6b:b8:83:0f:03:87:f1:00:55:2d:ae:82:97:73:
57:7a:6c:19:9f:c0:62:f8:ec:0c:65:e3:df:63:64:eb:4d:b4:
e4:83:b3:fe:c0:94:9c:e3:a0:d8:06:fb:99:d3:9c:21:36:1e:
82:1b:d4:00:d0:90:94:64:bf:e3:ea:7e:f8:45:64:9b:ad:3b:
07:71:ae:44:50:db:47:d1:fd:1b:0f:55:2b:19:95:5a:1c:6a:
7e:cb:c7:6e:cb:a3:18:5e:58:46:07:2d:dd:fa:27:0b:d7:71:
52:e8:1d:a5:d7:8e:b0:5c:27:8e:6b:80:f4:13:45:ef:3d:0f:
53:70:2b:90:6e:58:02:d0:97:ab:45:99:a8:5a:1b:a0:a5:a4:
06:f9:2d:d6:25:67:ea:86:51:f6:32:f9:1f:1c:b5:dd:04:81:
48:8c:14:81:c2:e0:c6:9b:a0:f7:25:77:a5:9a:60:63:6a:3c:
dc:9e:cb:e4:75:67:e5:86:b9:6e:1f:0f:3f:59:a3:06:7b:56:
0c:2e:2f:ed:78:70:ec:b6:9c:09:b0:02:3b:71:02:2f:08:50:
af:ad:0e:f5:08:6e:22:14:85:f6:9e:b1:e1:47:46:d5:55:ce:
3e:5d:53:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:24 2026 by rpki-client