Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier: 53zYr+90Q2rLWPTdmPu02iRQcqajWF+Ido47p1wucWc=
Subject key identifier: CA:DC:4C:AD:83:D3:56:60:CF:4E:CA:32:22:52:B1:06:76:59:B6:0B
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 019CAE356B9C89401C5FCAE9621F25F55959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number: 1203
Signing time: Mon 02 Mar 2026 11:01:02 +0000
Manifest this update: Mon 02 Mar 2026 11:01:02 +0000
Manifest next update: Tue 03 Mar 2026 11:01:02 +0000
Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: 13OLF+x1GS1ngLyKkxoWBWBJ3JncOvEyIR11L3B8COE=)
2: VpcTd6xXlgFFUSrpk4clP1LplCk.roa (hash: z6Z+0vG8Hh50YDE7aHF3RrHxwQleH1k0N54rCd2esz8=)
3: uGnD4olvWwb-IxQgtMlpkYc5Ygc.roa (hash: 3grRGp9lhYOmkty3bAIcup/fw2wObERf8v9hgQgL3a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:6b:9c:89:40:1c:5f:ca:e9:62:1f:25:f5:59:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Mar 2 11:01:02 2026 GMT
Not After : Mar 3 11:01:02 2026 GMT
Subject: CN=cadc4cad83d35660cf4eca322252b1067659b60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:c5:0d:5a:72:5f:0b:21:48:1e:0a:58:67:
92:dd:91:2f:d5:7c:2b:12:f2:1b:ef:98:05:f3:53:
7c:b8:fd:16:29:15:4c:c6:bb:7a:a8:33:9c:d3:df:
29:65:d7:2e:97:73:49:eb:b8:4f:45:37:56:3c:02:
2c:ff:fd:23:04:9f:5c:3a:e9:0d:c5:21:9d:98:26:
2e:e8:80:17:25:a7:60:86:c8:ad:a8:33:7a:58:f5:
63:40:f0:d7:b6:e4:fb:67:15:ad:0c:db:c8:92:a5:
af:50:5c:27:1a:0a:2e:65:49:92:f1:b3:bc:d5:3b:
51:cf:fc:57:bc:e8:af:23:af:45:a2:95:98:f5:bf:
27:62:7a:80:a6:30:cb:f9:94:b0:76:4a:84:29:bc:
52:76:75:b4:ed:17:90:70:56:ef:db:19:83:ef:70:
51:06:6b:3e:46:0b:a1:d5:39:73:4b:83:a2:e2:d4:
29:17:9a:ec:96:4f:cb:82:78:1d:9d:b6:56:aa:08:
75:07:79:ac:00:cc:33:1e:bf:aa:f0:ff:9d:5f:15:
73:02:5c:ea:6f:2f:6c:12:5b:87:c4:b1:a3:9f:a5:
71:29:c6:34:2b:0a:8f:a0:43:b6:20:18:2d:18:a6:
e3:a5:7c:2c:c5:1a:af:2c:61:04:5b:99:4b:21:71:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DC:4C:AD:83:D3:56:60:CF:4E:CA:32:22:52:B1:06:76:59:B6:0B
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3b:54:44:1f:7f:a4:7f:20:98:82:75:6b:e5:6a:94:32:3b:
dc:c2:2a:a4:19:2c:82:11:7b:cf:65:36:ef:13:4b:c3:91:95:
9f:99:ab:37:23:58:61:25:95:85:c6:d4:96:1a:80:99:94:49:
b3:9b:81:5b:a2:61:60:48:36:0a:75:b4:54:a6:9c:8c:92:c6:
88:06:fe:8d:2c:e1:b6:a9:be:d6:0e:06:46:91:d2:0c:2b:0a:
f3:17:9e:b8:40:1d:cb:84:cd:27:71:49:ad:5a:bf:96:b7:70:
01:4a:9d:97:b0:97:ab:21:58:9a:99:41:99:8d:04:82:6a:45:
e5:c2:38:4e:70:06:14:93:cc:fd:82:1b:3e:e3:5e:fd:c4:ee:
bf:a1:c5:6d:9c:81:55:d3:24:40:c2:a5:51:b3:7b:6d:f6:b8:
a8:3d:1d:c4:a3:f8:50:b0:27:44:b4:56:d3:d2:04:c0:55:a4:
15:36:74:ea:eb:6b:4a:c5:59:3a:de:bc:f0:49:0e:52:b2:05:
b8:90:93:b3:a3:69:ba:76:e7:7c:98:10:e7:d4:40:0e:c3:18:
51:e1:c8:ac:de:ef:e1:cb:cf:6a:d7:5d:4e:15:c4:9b:28:8d:
c5:4b:76:ac:64:63:66:de:98:d8:4b:e1:4f:13:86:f0:a5:38:
4e:30:87:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNWuciUAcX8rpYh8l9VlZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWQ4NTZhYWE5ZWFkMTJmNzVjYjY4Y2RhZTk2YTBkMmM4
ZGRlMWUwHhcNMjYwMzAyMTEwMTAyWhcNMjYwMzAzMTEwMTAyWjAzMTEwLwYDVQQD
EyhjYWRjNGNhZDgzZDM1NjYwY2Y0ZWNhMzIyMjUyYjEwNjc2NTliNjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtDFDVpyXwshSB4KWGeS3ZEv1Xwr
EvIb75gF81N8uP0WKRVMxrt6qDOc098pZdcul3NJ67hPRTdWPAIs//0jBJ9cOukN
xSGdmCYu6IAXJadghsitqDN6WPVjQPDXtuT7ZxWtDNvIkqWvUFwnGgouZUmS8bO8
1TtRz/xXvOivI69FopWY9b8nYnqApjDL+ZSwdkqEKbxSdnW07ReQcFbv2xmD73BR
Bms+Rguh1TlzS4Oi4tQpF5rslk/LgngdnbZWqgh1B3msAMwzHr+q8P+dXxVzAlzq
by9sEluHxLGjn6VxKcY0KwqPoEO2IBgtGKbjpXwsxRqvLGEEW5lLIXGO2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrcTK2D01Zgz07KMiJSsQZ2WbYLMB8GA1UdIwQY
MBaAFNedhWqqnq0S91y2jNrpag0sjd4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAt
NTk5MGNkNGRlODhiLzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAtNTk5MGNkNGRlODhi
LzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDtURB9/
pH8gmIJ1a+VqlDI73MIqpBksghF7z2U27xNLw5GVn5mrNyNYYSWVhcbUlhqAmZRJ
s5uBW6JhYEg2CnW0VKacjJLGiAb+jSzhtqm+1g4GRpHSDCsK8xeeuEAdy4TNJ3FJ
rVq/lrdwAUqdl7CXqyFYmplBmY0EgmpF5cI4TnAGFJPM/YIbPuNe/cTuv6HFbZyB
VdMkQMKlUbN7bfa4qD0dxKP4ULAnRLRW09IEwFWkFTZ06utrSsVZOt688EkOUrIF
uJCTs6NpunbnfJgQ59RADsMYUeHIrN7v4cvPatddThXEmyiNxUt2rGRjZt6Y2Evh
TxOG8KU4TjCH3w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:57 2026 by rpki-client