Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier: gyduo8uFexaASn6GGGvqgQ5hSgI4PMw5BusSiPYzxyg=
Subject key identifier: 4B:AD:8F:F5:48:EB:B9:34:EF:6C:27:92:CB:D0:68:64:F7:35:4E:47
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 019DA566A7CED7F0F73519AB81121C2D4974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number: 1283
Signing time: Sun 19 Apr 2026 11:01:01 +0000
Manifest this update: Sun 19 Apr 2026 11:01:01 +0000
Manifest next update: Mon 20 Apr 2026 11:01:01 +0000
Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: C/sJuZryvsliQKBsw4BaukplZajdVR7KnFceV4S5Uqc=)
2: VpcTd6xXlgFFUSrpk4clP1LplCk.roa (hash: z6Z+0vG8Hh50YDE7aHF3RrHxwQleH1k0N54rCd2esz8=)
3: uGnD4olvWwb-IxQgtMlpkYc5Ygc.roa (hash: 3grRGp9lhYOmkty3bAIcup/fw2wObERf8v9hgQgL3a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:a7:ce:d7:f0:f7:35:19:ab:81:12:1c:2d:49:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Apr 19 11:01:01 2026 GMT
Not After : Apr 20 11:01:01 2026 GMT
Subject: CN=4bad8ff548ebb934ef6c2792cbd06864f7354e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:83:44:b7:f2:87:74:ad:1d:33:ef:22:df:
02:bf:30:18:43:27:b1:45:53:eb:f9:44:f9:d3:f1:
b6:8c:8e:88:38:49:f6:26:09:c5:1a:6d:a9:79:d9:
f0:2f:bf:1b:b6:b3:8c:83:d5:9e:af:f3:db:fa:a4:
fd:e0:10:1e:ea:71:95:86:59:da:37:c3:dd:91:d5:
64:d9:f6:98:70:25:60:57:0f:c4:72:0b:36:95:6e:
20:da:f2:2d:d0:56:d0:9e:db:55:75:00:9b:76:90:
68:31:a8:b2:f6:75:4a:25:ed:d0:b9:1e:73:0e:d6:
3a:ac:fd:28:16:f4:38:21:61:d7:fd:1f:5b:0e:14:
d5:d8:3c:16:c3:00:0c:1e:f9:35:06:78:a5:4b:0b:
b9:f6:02:38:b8:34:4c:d1:12:2d:48:d4:e2:11:a8:
15:af:45:7a:47:95:3b:68:0d:a8:84:17:49:25:f2:
06:02:49:ee:a4:03:d8:70:f9:a6:11:bf:f9:f0:f7:
cb:32:6a:21:a0:8d:85:e4:1c:5f:d2:a4:4e:44:9b:
0e:b6:13:5f:4c:ca:bf:f6:34:cd:a8:c5:c1:42:df:
ae:b2:bc:8a:ae:3f:8c:1d:84:7f:3a:84:2c:af:94:
1e:e9:07:c4:5b:e7:57:e6:51:6a:80:9a:a1:f8:c1:
60:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AD:8F:F5:48:EB:B9:34:EF:6C:27:92:CB:D0:68:64:F7:35:4E:47
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:91:8f:f4:b0:bf:8b:09:6a:2e:51:97:b3:c7:2e:e8:a3:cb:
c7:46:bb:1e:67:36:f8:dd:a1:5e:38:18:10:21:73:df:17:db:
62:5c:bd:3b:65:d0:90:09:71:c2:9d:c5:a2:9e:6b:46:87:29:
e3:d1:b9:e7:40:bc:ea:d9:74:9f:04:dc:b9:66:31:9b:03:c1:
c7:37:a7:a5:4f:86:6a:ea:7d:4e:0b:70:86:e8:00:34:4a:77:
e6:c9:89:b6:c0:c2:7b:93:b4:61:cf:e2:2d:2e:fa:d7:62:45:
b3:5c:2c:22:f3:eb:a5:79:3b:63:02:6c:6c:16:c8:24:d5:e6:
4f:40:68:e3:01:e4:57:b6:f3:e5:9d:ac:2b:60:84:91:85:3b:
e4:82:b2:e8:2d:de:0d:99:7a:e7:c0:e6:2e:7d:49:e6:c0:d3:
25:ce:c6:a4:91:a9:2f:3a:88:6a:16:16:9b:1d:b6:45:6e:2e:
be:b8:3c:3f:a1:01:2f:06:79:a6:62:13:51:53:86:b9:b1:93:
6a:46:11:a1:cf:00:fd:ec:bc:91:17:6d:9a:43:a2:15:57:e6:
c4:bb:bb:20:92:d9:9a:43:22:ba:76:35:9c:a2:da:68:85:6a:
f4:36:47:e5:e5:c7:4e:8c:e4:ee:9d:24:5e:ea:89:48:93:2f:
88:56:77:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lZqfO1/D3NRmrgRIcLUl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWQ4NTZhYWE5ZWFkMTJmNzVjYjY4Y2RhZTk2YTBkMmM4
ZGRlMWUwHhcNMjYwNDE5MTEwMTAxWhcNMjYwNDIwMTEwMTAxWjAzMTEwLwYDVQQD
Eyg0YmFkOGZmNTQ4ZWJiOTM0ZWY2YzI3OTJjYmQwNjg2NGY3MzU0ZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbeDRLfyh3StHTPvIt8CvzAYQyex
RVPr+UT50/G2jI6IOEn2JgnFGm2pednwL78btrOMg9Wer/Pb+qT94BAe6nGVhlna
N8PdkdVk2faYcCVgVw/Ecgs2lW4g2vIt0FbQnttVdQCbdpBoMaiy9nVKJe3QuR5z
DtY6rP0oFvQ4IWHX/R9bDhTV2DwWwwAMHvk1BnilSwu59gI4uDRM0RItSNTiEagV
r0V6R5U7aA2ohBdJJfIGAknupAPYcPmmEb/58PfLMmohoI2F5Bxf0qRORJsOthNf
TMq/9jTNqMXBQt+usryKrj+MHYR/OoQsr5Qe6QfEW+dX5lFqgJqh+MFgVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEutj/VI67k072wnksvQaGT3NU5HMB8GA1UdIwQY
MBaAFNedhWqqnq0S91y2jNrpag0sjd4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAt
NTk5MGNkNGRlODhiLzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAtNTk5MGNkNGRlODhi
LzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5GP9LC/
iwlqLlGXs8cu6KPLx0a7Hmc2+N2hXjgYECFz3xfbYly9O2XQkAlxwp3Fop5rRocp
49G550C86tl0nwTcuWYxmwPBxzenpU+Gaup9TgtwhugANEp35smJtsDCe5O0Yc/i
LS7612JFs1wsIvPrpXk7YwJsbBbIJNXmT0Bo4wHkV7bz5Z2sK2CEkYU75IKy6C3e
DZl658DmLn1J5sDTJc7GpJGpLzqIahYWmx22RW4uvrg8P6EBLwZ5pmITUVOGubGT
akYRoc8A/ey8kRdtmkOiFVfmxLu7IJLZmkMiunY1nKLaaIVq9DZH5eXHTozk7p0k
XuqJSJMviFZ3fQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:43:02 2026 by rpki-client