Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: puWQSHJ3xZBB/+lkPWohYiH8cfS+Dmr82As7uF0nud0=
Subject key identifier: 9B:7F:58:B3:C9:C6:5F:51:DE:48:17:CB:3E:0A:07:16:2F:91:63:FE
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 019D96981E473901C98DD0C5DCB8A750C51A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 18C6
Signing time: Thu 16 Apr 2026 14:00:44 +0000
Manifest this update: Thu 16 Apr 2026 14:00:44 +0000
Manifest next update: Fri 17 Apr 2026 14:00:44 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: 4N/4kQ49JUwT4fiKJVDRzQ7nUY06DO113SLBrLkriYw=)
2: 9dcMnZF_hjQhvJcga50J4Lgw0oc.roa (hash: 6V2ZAOY1uWD3nVg5qScVh7xpT8E4AfFf2ucJTTSLBok=)
3: UZPOWsV_FJe0LaItYy8ujva8wUU.roa (hash: uIto6VX+5CDXd7vtEA+gBkH2FtA4Z4f+sQvfJ6SzABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:98:1e:47:39:01:c9:8d:d0:c5:dc:b8:a7:50:c5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Apr 16 14:00:44 2026 GMT
Not After : Apr 17 14:00:44 2026 GMT
Subject: CN=9b7f58b3c9c65f51de4817cb3e0a07162f9163fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:40:c0:40:6b:db:af:aa:38:b4:de:8f:11:
6c:3c:f1:6e:b4:07:a4:23:72:2c:8f:ac:c4:64:09:
9a:61:84:a6:68:a6:be:ba:a2:65:5f:1b:8b:ce:84:
53:b5:5a:7c:8d:3f:c7:80:a6:60:03:a9:89:47:e7:
37:9b:28:bb:93:0f:ac:6e:1f:02:43:d3:ad:fe:b5:
25:9d:e0:65:33:ab:e0:5e:e2:a0:7a:f1:bf:8b:ea:
71:cb:00:38:f9:1d:67:85:c0:ca:9a:ff:10:67:29:
46:2b:4e:32:ce:4f:d2:31:32:8b:72:0a:b4:3d:5f:
be:4f:fd:69:4b:06:8e:e5:f2:df:2b:c9:0d:8f:53:
92:2e:28:92:78:d8:db:12:4f:f8:3d:7c:d7:52:a3:
35:94:9f:8d:d0:58:82:04:3d:d7:03:a8:fc:d0:4b:
1f:73:aa:13:f3:cf:dc:32:b0:3d:e3:af:a0:7e:ec:
4d:c5:e6:79:ac:49:79:55:b0:96:b0:ba:27:12:d8:
0c:56:44:ae:03:1c:2d:63:97:b1:79:1a:a4:f2:73:
38:18:d0:ea:4b:ea:a7:5d:9e:10:38:fa:37:5b:fc:
ee:84:e1:6b:14:a5:c4:e7:72:6c:b7:55:81:70:63:
8e:97:e4:86:53:6d:6e:9d:6b:b4:1a:9c:21:36:f5:
6f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7F:58:B3:C9:C6:5F:51:DE:48:17:CB:3E:0A:07:16:2F:91:63:FE
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:58:ee:a8:1e:a4:c4:da:4f:cd:9c:9e:a0:ce:df:09:07:29:
ad:12:fe:3b:65:cf:15:99:fc:2b:ab:d7:6c:6e:2c:31:c0:39:
81:37:e1:bf:9c:c3:5d:2b:e9:b9:b4:de:b8:6c:81:8f:52:6b:
fd:1b:02:1d:4a:59:29:94:80:45:20:76:cb:e7:55:cb:28:ce:
4e:e1:bc:2f:72:c3:8d:88:60:3c:96:aa:53:78:5d:b3:73:83:
66:04:d4:84:61:4f:5a:fa:fa:87:3a:8d:12:4a:13:f0:a8:d2:
58:bd:9b:e8:48:d7:73:bd:1d:21:0f:75:fc:4b:19:24:96:2c:
ac:6f:52:96:94:05:bc:d1:cb:8a:4b:09:f5:c2:e3:53:aa:32:
da:9c:3d:7d:7a:0a:54:52:73:14:6f:49:a2:08:a3:fd:1a:9e:
58:38:ac:f9:e7:77:ba:94:7b:3e:df:d5:3b:c4:c3:03:93:e7:
ee:21:7d:11:f8:a1:b6:a8:1b:05:16:37:7e:86:69:99:82:ce:
d7:1d:f6:cd:96:cc:26:21:87:1c:5b:8a:a6:57:c3:fd:d7:b2:
6d:2d:e6:c8:de:d7:75:51:26:70:05:44:59:67:f1:7c:04:71:
d5:0e:25:e3:2f:dc:fe:33:7b:86:79:4a:91:2c:7f:df:b2:7f:
14:6b:ad:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:03:00 2026 by rpki-client