Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier: wPqHxxQyE73gM8INIu5GrYWdWvhwZACgdXpGmyjEgjg=
Subject key identifier: 7E:B5:74:A2:A8:3C:4F:AB:75:0A:8F:16:DA:51:D7:25:11:0F:68:7B
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 019FA9071965C3845977225D84E5DE7F31E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number: 138E
Signing time: Tue 28 Jul 2026 14:00:42 +0000
Manifest this update: Tue 28 Jul 2026 14:00:42 +0000
Manifest next update: Wed 29 Jul 2026 14:00:42 +0000
Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: cMDvTn9UpTkJM9RGmDNfYVF3ocWAjSJK1oPaY6NmKOw=)
2: VpcTd6xXlgFFUSrpk4clP1LplCk.roa (hash: z6Z+0vG8Hh50YDE7aHF3RrHxwQleH1k0N54rCd2esz8=)
3: uGnD4olvWwb-IxQgtMlpkYc5Ygc.roa (hash: 3grRGp9lhYOmkty3bAIcup/fw2wObERf8v9hgQgL3a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:19:65:c3:84:59:77:22:5d:84:e5:de:7f:31:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Jul 28 14:00:42 2026 GMT
Not After : Jul 29 14:00:42 2026 GMT
Subject: CN=7eb574a2a83c4fab750a8f16da51d725110f687b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1e:19:21:9d:b8:b9:d1:cd:5f:9c:9a:3d:92:
ec:25:4d:27:9e:c2:35:f5:7a:d4:7c:0f:ca:b5:64:
07:5c:14:01:67:cf:28:1e:b9:b7:f7:fd:6f:b6:6c:
d6:73:6f:39:53:ce:e8:2f:cb:2e:e9:4e:3b:e5:54:
e7:2f:ab:0e:e3:8c:29:1a:f7:8d:fb:7c:5c:7d:a6:
23:e7:e6:35:08:a0:f2:09:ce:51:74:89:63:2f:b8:
69:aa:f7:a5:87:f7:1d:d9:39:76:26:9f:05:3d:f5:
f5:d8:84:3f:21:d7:b8:19:fe:25:30:66:1c:4c:4c:
57:47:14:86:c0:08:aa:d2:a6:de:57:bf:2a:66:03:
17:d3:fc:7c:92:de:f0:e7:5b:6e:1f:bd:bd:a0:4e:
fd:c8:0f:c5:9f:19:53:39:ed:0d:20:16:9b:76:33:
41:4c:b2:3e:e8:7c:c5:37:9f:06:81:a7:4b:13:cf:
ef:fb:39:b6:42:77:c3:d5:92:67:88:63:c6:91:e3:
0e:db:84:18:6f:62:83:52:c6:d4:1a:25:5a:41:00:
7e:04:28:31:4f:f8:25:ff:8b:f4:25:34:99:48:71:
4f:a2:45:70:75:91:76:8e:b6:4c:e1:1a:57:be:f3:
70:6d:bf:8c:e7:21:15:61:bb:76:23:0d:b4:0b:81:
75:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B5:74:A2:A8:3C:4F:AB:75:0A:8F:16:DA:51:D7:25:11:0F:68:7B
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4f:c7:df:c8:65:3e:78:4c:66:f8:c7:1f:c0:f6:f4:21:38:
06:f2:3d:18:da:ef:b7:aa:f0:75:b2:f2:15:47:81:40:12:50:
a2:e0:99:a8:1f:4a:e8:f1:18:9a:1f:1e:2f:68:9b:09:b8:a5:
65:e7:81:a7:9d:d8:f4:6a:d2:8f:31:d8:e5:a7:e7:57:bf:f3:
0f:74:3e:0a:c0:a3:32:ae:0b:1c:31:52:b1:16:ec:cf:18:af:
82:b1:89:9e:4b:63:64:da:03:b6:d2:cf:d3:d9:bc:74:45:db:
85:88:2a:2d:51:c5:09:26:03:40:d5:c2:3e:dd:2a:f4:56:20:
0c:a3:8c:f7:10:67:6a:67:1c:d1:2d:34:43:96:8d:00:7a:47:
0f:02:9c:28:94:fa:da:f3:b8:ee:6b:e0:75:39:c2:05:7e:35:
12:9b:fa:56:d3:fe:1f:18:69:cc:b8:6b:bd:1a:bc:b1:4a:3a:
ce:31:df:d2:2a:d6:78:08:39:fd:38:7d:ed:71:3e:b4:74:96:
76:75:37:87:5c:29:5d:6d:ae:c2:d3:0f:6f:33:6c:f6:ef:30:
d0:2a:e3:bd:23:f4:78:bb:90:55:af:57:4b:66:ae:ff:9b:58:
ed:ae:5c:c1:52:e2:9b:51:de:09:87:bc:31:01:a2:b3:32:d1:
97:b1:82:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:32 2026 by rpki-client