Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier: ajZmluBp2uc5AvC3AY1fN1IUg3wi67iN3eMIA0001jw=
Subject key identifier: 6C:4D:99:25:83:22:D7:7A:15:3B:F8:12:47:2B:A3:02:92:18:24:48
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 019CAA582FE5C76835890CE9CC29FA00226C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number: 1201
Signing time: Sun 01 Mar 2026 17:00:31 +0000
Manifest this update: Sun 01 Mar 2026 17:00:31 +0000
Manifest next update: Mon 02 Mar 2026 17:00:31 +0000
Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: /g+svKhk28garnq4Xk8GUmk7SVPWIi73K0uFg0WPThM=)
2: VpcTd6xXlgFFUSrpk4clP1LplCk.roa (hash: z6Z+0vG8Hh50YDE7aHF3RrHxwQleH1k0N54rCd2esz8=)
3: uGnD4olvWwb-IxQgtMlpkYc5Ygc.roa (hash: 3grRGp9lhYOmkty3bAIcup/fw2wObERf8v9hgQgL3a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:2f:e5:c7:68:35:89:0c:e9:cc:29:fa:00:22:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Mar 1 17:00:31 2026 GMT
Not After : Mar 2 17:00:31 2026 GMT
Subject: CN=6c4d99258322d77a153bf812472ba30292182448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:af:0b:08:e9:b0:75:b0:27:67:43:bf:a0:9d:
4a:35:83:fa:cc:f5:ad:47:11:98:82:dc:1d:00:2d:
09:55:41:f1:b9:55:cf:4a:29:6a:aa:b8:9a:1a:6d:
05:c5:a9:ca:c9:9e:12:a4:90:e9:70:d5:1d:8c:e1:
ce:96:7e:84:91:83:ce:3f:6c:ac:bc:79:78:0e:bb:
3d:9a:e5:c4:5c:72:8c:d0:0e:c1:75:f0:7e:53:b3:
b0:d0:03:c7:bb:a2:39:3d:75:86:81:b2:2e:f5:99:
2f:8b:3f:5f:7b:c8:6d:74:a0:3c:61:94:62:2b:5d:
92:b4:97:d5:b2:87:78:79:87:b9:7f:60:ea:08:21:
be:62:26:3d:14:dc:f0:01:ee:79:8a:da:68:ec:5d:
eb:18:ed:7b:76:66:be:5c:05:92:d1:0a:b2:d4:9d:
d2:eb:67:72:d0:35:57:71:a1:11:bc:fd:7e:29:28:
ef:84:40:a8:51:3c:ca:82:56:f2:9a:c0:0a:a6:08:
b6:97:33:a7:99:3f:d8:ee:6b:db:7a:df:eb:43:74:
6c:79:5d:aa:77:df:fa:55:77:7d:04:49:b3:80:38:
9c:c9:74:69:27:49:b2:d4:c0:71:e3:d5:09:65:8d:
0c:69:e5:c7:cf:e9:87:86:f6:b2:e7:a5:59:8d:14:
8d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4D:99:25:83:22:D7:7A:15:3B:F8:12:47:2B:A3:02:92:18:24:48
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:12:08:ec:38:63:e0:21:93:f9:c9:59:75:bb:27:1e:ee:bf:
ea:7b:11:5b:39:a7:34:c8:44:d4:30:7a:77:df:72:11:33:05:
c5:8a:ae:38:20:5d:84:ee:46:2c:b1:58:a1:91:b5:07:0e:08:
5e:f4:8d:5a:63:44:41:69:6e:c8:89:26:7b:54:5c:97:df:d2:
dd:ce:03:6a:a8:68:c1:0d:3b:b2:f8:10:f5:74:f9:f5:d9:be:
d5:7c:81:4a:ec:f9:ea:0d:67:73:db:3b:3f:66:00:a5:3b:74:
2f:94:ae:db:40:76:fa:89:f0:1e:49:dd:9b:98:9a:8b:14:ee:
5a:c0:00:96:93:0f:5d:31:8b:61:09:c1:12:9d:1a:1a:2a:90:
7f:0b:53:08:00:21:1e:10:90:8e:b6:b1:5b:27:59:af:7f:86:
2a:da:23:31:72:f8:e8:de:ec:fd:41:48:ac:bd:db:f5:07:6e:
0d:8b:1f:49:c8:5d:04:b9:a0:dd:8b:39:78:5c:65:e3:5b:09:
9c:d4:90:0d:84:80:e1:9c:ca:ed:20:46:1d:e5:53:1c:d8:11:
e2:3a:0d:07:43:3a:cd:de:64:b0:f9:74:fe:70:43:db:c1:1f:
56:e1:1c:19:0d:87:c9:31:33:36:25:1e:6d:4e:20:d0:20:c9:
c8:7a:ff:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWC/lx2g1iQzpzCn6ACJsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWQ4NTZhYWE5ZWFkMTJmNzVjYjY4Y2RhZTk2YTBkMmM4
ZGRlMWUwHhcNMjYwMzAxMTcwMDMxWhcNMjYwMzAyMTcwMDMxWjAzMTEwLwYDVQQD
Eyg2YzRkOTkyNTgzMjJkNzdhMTUzYmY4MTI0NzJiYTMwMjkyMTgyNDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4a8LCOmwdbAnZ0O/oJ1KNYP6zPWt
RxGYgtwdAC0JVUHxuVXPSilqqriaGm0FxanKyZ4SpJDpcNUdjOHOln6EkYPOP2ys
vHl4Drs9muXEXHKM0A7BdfB+U7Ow0APHu6I5PXWGgbIu9Zkviz9fe8htdKA8YZRi
K12StJfVsod4eYe5f2DqCCG+YiY9FNzwAe55itpo7F3rGO17dma+XAWS0Qqy1J3S
62dy0DVXcaERvP1+KSjvhECoUTzKglbymsAKpgi2lzOnmT/Y7mvbet/rQ3RseV2q
d9/6VXd9BEmzgDicyXRpJ0my1MBx49UJZY0MaeXHz+mHhvay56VZjRSN0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxNmSWDItd6FTv4EkcrowKSGCRIMB8GA1UdIwQY
MBaAFNedhWqqnq0S91y2jNrpag0sjd4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAt
NTk5MGNkNGRlODhiLzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAtNTk5MGNkNGRlODhi
LzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxII7Dhj
4CGT+clZdbsnHu6/6nsRWzmnNMhE1DB6d99yETMFxYquOCBdhO5GLLFYoZG1Bw4I
XvSNWmNEQWluyIkme1Rcl9/S3c4DaqhowQ07svgQ9XT59dm+1XyBSuz56g1nc9s7
P2YApTt0L5Su20B2+onwHkndm5iaixTuWsAAlpMPXTGLYQnBEp0aGiqQfwtTCAAh
HhCQjraxWydZr3+GKtojMXL46N7s/UFIrL3b9QduDYsfSchdBLmg3Ys5eFxl41sJ
nNSQDYSA4ZzK7SBGHeVTHNgR4joNB0M6zd5ksPl0/nBD28EfVuEcGQ2HyTEzNiUe
bU4g0CDJyHr/ng==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:21 2026 by rpki-client