Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
File: 156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json)
Hash identifier: jMZENpSbGyVgQR62n9AO2uvtxxLPHFxJDnHCbjhFpjg=
Subject key identifier: 38:B6:F5:1B:45:C1:DE:B3:A6:0C:57:EA:4E:31:3A:FA:FF:1F:C2:23
Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Certificate serial: 019E1EA3C5BEBCEF236A39F064BAC4FCEBCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
Manifest number: 0FAE
Signing time: Wed 13 May 2026 00:01:49 +0000
Manifest this update: Wed 13 May 2026 00:01:49 +0000
Manifest next update: Thu 14 May 2026 00:01:49 +0000
Files and hashes: 1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: 2w54fkM6tYvQFMUQ3nc+CoAeORvh4lVBWMy3xO7gKFk=)
2: FL8p74tWI7ntw6R2xksbD1PAPss.roa (hash: gYU94roAVzlnVYJ/I8E+mMblo4Z/HWZwqnYhXEb29/s=)
3: bz8OgK9KGk7s_9Rbo1BfVZKPRMc.roa (hash: QMlz5xU6ZIS5u6QE8mCAeeanjx7pStZbTuS8Yuj6acw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:c5:be:bc:ef:23:6a:39:f0:64:ba:c4:fc:eb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Validity
Not Before: May 13 00:01:49 2026 GMT
Not After : May 14 00:01:49 2026 GMT
Subject: CN=38b6f51b45c1deb3a60c57ea4e313afaff1fc223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:a2:cb:00:08:84:42:bd:5d:d9:4f:87:73:
b3:3f:9f:08:59:7e:2b:e6:f2:1c:86:ca:26:19:94:
4e:91:12:af:d0:87:19:8f:10:55:c3:b2:b6:52:5a:
6b:79:22:76:e3:54:e4:9c:99:9c:77:df:b7:0e:8c:
8d:87:c6:51:c0:d8:44:64:74:bd:cc:be:63:7d:ef:
f6:01:d6:c8:67:74:c0:3c:11:0d:b1:73:d8:75:25:
d7:7c:51:5d:43:b9:77:8a:4d:42:22:ed:1e:bd:ef:
32:db:ba:e4:e3:7b:1f:21:73:35:11:76:2c:dc:18:
4d:47:cc:71:ca:04:7d:05:13:07:48:db:ad:7e:56:
0f:98:13:b7:83:43:0b:f5:13:35:c3:7a:21:c4:46:
6c:25:4b:bd:ff:eb:4d:80:f2:82:28:90:af:87:98:
a7:1c:7b:e4:59:60:30:d9:29:d5:1c:92:ad:33:44:
5b:3f:f7:5b:cc:24:34:30:44:4c:9e:2b:6b:c2:50:
95:a9:1c:e7:c9:0d:2c:3b:6e:a7:52:55:08:8b:1b:
d8:f8:fe:4d:48:07:92:33:05:5b:3f:db:ab:1b:29:
1b:a2:48:33:5c:c5:40:7f:05:4a:63:21:89:46:fd:
fa:96:a4:cb:25:2b:c1:6d:96:78:b6:b3:7e:08:57:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B6:F5:1B:45:C1:DE:B3:A6:0C:57:EA:4E:31:3A:FA:FF:1F:C2:23
X509v3 Authority Key Identifier:
keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b5:cd:8a:21:f7:fc:7e:4d:fb:12:07:f3:37:21:66:55:cc:
a4:56:97:ca:d9:b4:cb:0d:d8:fd:45:75:8c:9f:f4:35:50:d5:
97:33:4c:f2:d9:82:b3:2b:83:49:ab:4d:57:78:74:6e:a6:ac:
a0:be:48:d5:41:36:9c:96:83:e3:99:23:14:2f:28:f6:00:f1:
c0:bd:93:c5:88:1f:0c:7a:b0:01:83:da:5c:ce:d6:55:ca:9b:
2f:60:0e:a7:42:ca:62:2b:ca:fe:94:ae:80:3e:80:8e:87:5f:
d7:8e:dc:b1:50:dc:65:ef:73:53:3b:47:48:4c:eb:5f:c1:90:
1c:5c:31:ac:71:47:ba:0d:71:0d:8e:07:90:e1:5e:7f:64:da:
cc:ac:d2:4f:ca:c6:aa:17:76:7a:ad:b4:f2:d9:d3:f9:36:d2:
8d:fd:d0:3c:e4:b7:0b:a7:a8:78:77:15:bd:aa:60:74:3e:79:
ce:cb:c2:9d:cb:99:59:e2:30:f3:1e:92:53:a0:07:61:83:38:
ee:72:0f:21:21:cd:10:5c:d8:10:45:57:ad:f9:9d:cc:4c:7c:
9b:af:20:a0:24:0d:24:4b:50:cd:93:ec:bf:6e:10:11:15:bd:
ae:5d:56:0a:45:58:c3:f3:20:03:eb:38:a3:e3:0a:01:40:31:
3e:7f:a6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:39:07 2026 by rpki-client