Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: s8qqjCQY7XLQgBykc3esRw/LVDR6gRWUiG7OvV9uV0E=
Subject key identifier: 46:60:FF:7D:87:DD:55:2F:9A:2F:77:E2:41:EC:80:C4:BC:B1:40:B4
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 01A0C39FA1DEA2A94846281F784DA86AACE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 1A6B
Signing time: Mon 21 Sep 2026 11:00:13 +0000
Manifest this update: Mon 21 Sep 2026 11:00:13 +0000
Manifest next update: Tue 22 Sep 2026 11:00:13 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: ekmtGuW9KSKq3fHI7qcXvzvHdPjSpI98uS7RExTK+U4=)
2: 9dcMnZF_hjQhvJcga50J4Lgw0oc.roa (hash: 6V2ZAOY1uWD3nVg5qScVh7xpT8E4AfFf2ucJTTSLBok=)
3: UZPOWsV_FJe0LaItYy8ujva8wUU.roa (hash: uIto6VX+5CDXd7vtEA+gBkH2FtA4Z4f+sQvfJ6SzABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:a1:de:a2:a9:48:46:28:1f:78:4d:a8:6a:ac:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Sep 21 11:00:13 2026 GMT
Not After : Sep 22 11:00:13 2026 GMT
Subject: CN=4660ff7d87dd552f9a2f77e241ec80c4bcb140b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4d:0b:11:ab:0f:81:0b:61:6d:96:1c:59:23:
42:31:6e:1a:4c:81:ab:22:43:a2:d9:e7:b3:58:63:
70:ab:5e:23:bf:9b:47:41:28:e0:21:bd:d7:be:aa:
c4:50:91:70:fa:3c:b3:bd:33:6a:ac:9a:c0:bc:a8:
ef:9d:87:3d:be:a2:57:f5:1d:31:62:2f:80:9e:2f:
f7:ad:1a:04:a2:99:9d:03:28:4c:47:e3:f4:9d:3c:
98:98:1f:f4:b1:38:ae:6f:5b:3b:23:07:d2:d2:62:
94:30:a3:20:3b:10:2c:4e:41:fa:fd:fd:84:0c:67:
06:07:b6:ea:32:2f:42:1f:a2:65:28:c7:f9:21:70:
ef:21:f1:d9:11:fa:fa:9c:93:f6:18:bc:f3:f2:b4:
a5:0d:14:e7:07:b8:8d:b4:34:70:9d:20:64:d9:46:
f1:49:bc:9f:bf:2a:38:26:53:a4:82:9c:ea:c1:87:
02:68:e6:60:1f:4a:d5:ad:aa:c1:30:78:90:1a:36:
ff:1f:02:16:28:bb:da:76:68:12:8c:55:c0:5d:18:
c6:3d:72:7d:0f:30:6c:2b:2c:f9:02:0c:a5:9e:d6:
cb:32:15:d3:35:4a:f5:b1:1e:15:89:f7:3b:c5:48:
a7:3c:14:ab:fd:04:fd:e5:da:79:6a:4e:32:27:48:
49:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:60:FF:7D:87:DD:55:2F:9A:2F:77:E2:41:EC:80:C4:BC:B1:40:B4
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:fa:b8:2a:b1:44:03:bb:cf:10:1c:9f:63:50:a3:bb:e2:12:
d5:36:a7:d9:ef:ed:b3:75:d2:91:5e:34:ef:fb:75:ee:2a:8a:
c3:9b:11:51:92:70:b9:d4:d2:8c:3a:18:c3:cc:8c:a5:cf:ed:
00:97:bf:6c:78:41:f9:58:37:78:ab:56:01:d5:6d:54:28:19:
99:5a:ac:bf:a2:42:a2:6d:8d:c8:40:97:f1:b8:4b:15:67:f9:
19:14:59:af:df:fd:ce:5c:a2:b5:d0:ea:48:8b:8f:12:9f:2e:
01:0d:b0:d8:c3:ce:da:a4:9f:3c:6b:3e:33:41:1e:0e:11:cb:
b0:67:ed:50:55:90:6f:ce:5c:91:bb:db:73:ea:6e:99:c4:d6:
e6:76:91:8c:11:ba:0b:72:b7:17:fa:22:a5:b2:9d:fe:1c:66:
46:d1:d3:4e:a0:91:24:c6:89:b7:9d:d4:de:94:7a:08:23:cf:
cc:8e:13:4b:9a:5c:6d:2c:aa:ec:12:a0:f3:18:fe:50:a1:4b:
1f:1c:fb:e0:47:8b:12:8b:6e:11:18:45:f9:1b:43:a2:c8:49:
2c:f7:28:cb:7c:0c:b2:35:47:9f:78:97:36:14:ff:ed:36:dd:
01:59:46:48:b5:1c:8a:82:3c:4d:49:58:64:64:49:ee:dd:6f:
3b:57:77:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:10:05 2026 by rpki-client