Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: X3FXiOcYld3oF54gyqFqVzUGGOWM3IMgvh33QhWtos0=
Subject key identifier: 49:33:5C:43:0D:A6:13:16:D5:B5:1C:43:EA:E9:9C:74:E0:7C:5C:13
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 019FAB9A5B04BFB1016D415C45351EE01D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 19DA
Signing time: Wed 29 Jul 2026 02:00:47 +0000
Manifest this update: Wed 29 Jul 2026 02:00:47 +0000
Manifest next update: Thu 30 Jul 2026 02:00:47 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: +sXR5U3r1BOTmqJyPlFZhl6ujGTjWLefb4eRQRYLB2o=)
2: 9dcMnZF_hjQhvJcga50J4Lgw0oc.roa (hash: 6V2ZAOY1uWD3nVg5qScVh7xpT8E4AfFf2ucJTTSLBok=)
3: UZPOWsV_FJe0LaItYy8ujva8wUU.roa (hash: uIto6VX+5CDXd7vtEA+gBkH2FtA4Z4f+sQvfJ6SzABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:5b:04:bf:b1:01:6d:41:5c:45:35:1e:e0:1d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Jul 29 02:00:47 2026 GMT
Not After : Jul 30 02:00:47 2026 GMT
Subject: CN=49335c430da61316d5b51c43eae99c74e07c5c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:6f:38:12:e2:c8:1e:05:af:23:e2:45:f1:
d7:4f:bf:1c:cf:dd:b1:8f:87:7f:12:0b:9b:d1:3d:
57:65:21:0b:2f:1b:e6:12:17:af:c0:a9:91:8c:7f:
98:86:17:dc:87:37:4f:02:91:83:8b:0b:6e:73:78:
00:48:69:46:fa:b7:35:d5:bd:de:b0:e3:e0:92:ab:
84:81:f9:2e:f5:40:4a:37:42:2a:4f:66:da:f9:33:
6a:ca:0e:3e:f7:2e:dc:85:f3:84:8a:cd:3b:39:83:
87:26:f0:ee:66:61:7a:37:48:b4:ac:24:f9:8f:bb:
c9:4d:af:95:91:0c:78:d6:47:bb:ae:bc:c8:8e:d1:
16:a6:bd:8f:f6:30:41:4d:80:14:56:bb:e7:a2:79:
06:5b:4d:ce:e1:1a:6c:01:e8:38:ad:63:14:a6:a3:
db:98:11:d6:b8:8b:2e:1d:47:3f:38:8c:ad:36:a6:
09:7e:ce:72:20:09:37:2c:2a:62:4f:30:2b:40:52:
43:e7:3a:8e:cd:06:1b:36:6c:b4:6d:1e:d1:56:93:
85:36:5e:f3:55:46:f8:0a:08:c2:b8:81:27:a0:bb:
7b:00:9d:91:fe:b3:f4:eb:b4:38:8b:64:05:7a:2c:
36:5a:94:19:61:7b:43:55:1e:18:90:8e:94:e4:5f:
45:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:33:5C:43:0D:A6:13:16:D5:B5:1C:43:EA:E9:9C:74:E0:7C:5C:13
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:87:63:1e:35:31:fa:25:ad:af:1b:1b:b2:fa:2d:96:5c:4e:
13:36:cd:67:78:25:cf:1b:a3:40:40:84:69:e1:66:e0:5e:86:
aa:f6:24:a7:1e:9a:05:5c:a4:10:aa:74:a3:76:bc:9b:02:1c:
df:29:80:5d:48:cf:8d:32:ac:b7:30:e8:d7:4b:91:9a:2e:ed:
9c:1d:d9:f1:d9:c7:ca:7b:05:f3:39:5f:af:aa:5f:e8:3a:14:
65:b1:a7:be:59:61:9a:19:a9:85:c7:50:a1:3b:79:74:ce:1e:
b2:5f:4c:d0:cb:75:a6:e9:95:cc:88:f3:80:03:6b:d1:be:de:
63:3d:8a:86:5a:0a:72:80:23:9f:be:f4:fb:60:d3:83:0d:e2:
e3:86:3c:af:4c:d5:21:94:00:9e:97:9b:61:94:2c:09:16:b2:
5b:fd:cf:e8:90:fd:69:34:2b:f8:55:22:fc:0f:6f:f5:16:dd:
72:a4:b6:2d:0c:59:91:25:dd:e8:83:be:8d:cb:33:f4:04:11:
b2:a8:e1:a1:dd:10:3b:62:a1:cb:65:f0:55:7e:61:08:4a:9a:
de:c8:0e:9e:49:dd:4d:8c:42:83:36:03:0d:fb:6e:8e:d1:bb:
1f:04:f9:2e:9e:95:a1:6d:d8:77:e4:db:ae:9e:6d:69:72:6c:
a0:c1:77:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:00 2026 by rpki-client