Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
File: 156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json)
Hash identifier: 6dep0aRazdDQMTxjUiIXTqWLwDXJNMg7ORo4AHsY4Kw=
Subject key identifier: DB:F8:8E:07:C1:01:2F:0F:9A:D0:7B:D3:A7:FE:AF:FE:D0:37:9B:17
Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Certificate serial: 019D2771FF99EF091C84852A6E62ABDB596D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
Manifest number: 0F2E
Signing time: Thu 26 Mar 2026 00:01:15 +0000
Manifest this update: Thu 26 Mar 2026 00:01:15 +0000
Manifest next update: Fri 27 Mar 2026 00:01:15 +0000
Files and hashes: 1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: v/5/HRxS2ViZg+y7v5LBB6OMTdziYCOBgB8/51oLNKM=)
2: FL8p74tWI7ntw6R2xksbD1PAPss.roa (hash: gYU94roAVzlnVYJ/I8E+mMblo4Z/HWZwqnYhXEb29/s=)
3: bz8OgK9KGk7s_9Rbo1BfVZKPRMc.roa (hash: QMlz5xU6ZIS5u6QE8mCAeeanjx7pStZbTuS8Yuj6acw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ff:99:ef:09:1c:84:85:2a:6e:62:ab:db:59:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Validity
Not Before: Mar 26 00:01:15 2026 GMT
Not After : Mar 27 00:01:15 2026 GMT
Subject: CN=dbf88e07c1012f0f9ad07bd3a7feaffed0379b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:96:48:aa:2c:66:bc:84:91:fd:96:56:30:b6:
87:d9:e9:c8:d3:82:33:2d:48:fa:7e:e1:a1:fc:49:
1f:c1:9a:c6:2f:3d:2a:8d:7b:f2:e0:08:78:eb:e7:
1b:e4:d5:07:db:0f:c7:d3:f2:a9:79:81:88:27:c1:
78:bf:0b:e5:65:a1:34:40:a3:43:c3:2b:c3:c5:86:
6f:a5:e5:81:ea:b3:d3:97:93:86:11:f5:a0:f9:83:
80:8e:72:21:b0:70:73:83:e6:39:28:e1:5b:ba:93:
ce:18:13:32:8a:36:be:19:61:1f:bc:e0:87:bf:5f:
71:72:f0:6f:21:58:d7:5b:86:ea:da:07:81:73:f3:
47:06:01:4a:e0:f9:25:90:ca:a9:21:af:27:0a:e9:
97:09:12:6b:a9:aa:3b:0b:c6:06:44:ea:65:f7:d3:
14:dd:31:f6:88:bd:19:9a:af:6c:a9:75:8e:d5:b1:
9c:f3:c4:84:34:2b:f5:ad:4c:ea:d6:df:41:19:0d:
c0:60:2b:d1:59:99:30:9b:71:36:3e:49:87:63:8c:
8b:63:87:2d:57:a4:b0:1f:94:a8:17:6b:53:45:9f:
9c:b4:50:78:6e:0c:a1:d6:df:9a:ee:27:6d:0d:8f:
48:ec:b7:45:4a:e9:48:27:c5:6a:d2:45:b1:e1:b5:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F8:8E:07:C1:01:2F:0F:9A:D0:7B:D3:A7:FE:AF:FE:D0:37:9B:17
X509v3 Authority Key Identifier:
keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1b:35:90:cf:c4:4a:c9:aa:07:ba:08:30:96:c2:50:61:b1:
4a:c5:9b:fb:7e:a1:6c:50:37:28:92:ad:a9:50:c6:75:b3:be:
41:6e:05:c5:68:c8:12:e2:9d:a7:22:ae:11:6d:47:84:44:f2:
95:8a:28:fc:ee:3f:4e:ef:e4:c9:c1:9c:84:38:f9:e3:09:9e:
4a:1f:e2:28:c9:70:1e:35:3b:5e:0f:9c:0c:e5:59:63:de:d2:
39:57:2e:ae:6f:a6:95:63:c8:f2:c8:6c:46:7b:ff:5b:c5:64:
55:99:c6:4c:24:94:d7:84:8c:a5:da:54:c9:e9:d9:bf:a9:95:
d0:b6:52:e1:b0:67:b7:1b:a4:37:d5:c8:8b:4d:1c:7b:da:74:
ae:68:ef:b0:16:43:f9:03:00:d1:38:f6:d7:52:a0:a4:07:77:
e4:67:b9:c6:1a:d2:86:c9:d0:75:2c:a4:26:a8:28:2e:66:0d:
9f:5a:70:49:a8:37:1d:8c:2a:7e:73:f8:50:50:09:b0:1b:e0:
16:f7:93:f0:88:18:c4:e8:dd:56:24:e6:f3:33:68:f0:13:5c:
58:ff:42:66:f7:f8:82:53:80:78:65:fa:d5:19:ff:9e:d5:38:
27:c6:94:57:5e:48:9e:86:21:8e:4c:9f:de:6d:0f:e1:4f:18:
e1:49:9b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:53 2026 by rpki-client