Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: Dl9kMxQLepatc7zKeCz4TR/gQqtTflLlVWD33WQV2sE=
Subject key identifier: 20:DD:55:01:DD:C9:39:7A:F3:87:6C:BA:0A:88:36:7F:C3:CD:F8:91
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 019CAAFCEE7B48A975B8A05EB73D99288576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 184C
Signing time: Sun 01 Mar 2026 20:00:28 +0000
Manifest this update: Sun 01 Mar 2026 20:00:28 +0000
Manifest next update: Mon 02 Mar 2026 20:00:28 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: 1gPzA9RNJG2fKjHWpMn0P4IRaZuifJlXeLALQ26kKoI=)
2: 9dcMnZF_hjQhvJcga50J4Lgw0oc.roa (hash: 6V2ZAOY1uWD3nVg5qScVh7xpT8E4AfFf2ucJTTSLBok=)
3: UZPOWsV_FJe0LaItYy8ujva8wUU.roa (hash: uIto6VX+5CDXd7vtEA+gBkH2FtA4Z4f+sQvfJ6SzABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:ee:7b:48:a9:75:b8:a0:5e:b7:3d:99:28:85:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Mar 1 20:00:28 2026 GMT
Not After : Mar 2 20:00:28 2026 GMT
Subject: CN=20dd5501ddc9397af3876cba0a88367fc3cdf891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:65:c0:77:95:c4:29:c6:3a:41:f9:20:8c:
2b:f3:66:fd:08:b5:4d:94:db:7b:9c:48:8a:93:65:
db:da:8a:06:5d:ca:58:a0:07:2e:dd:22:3e:77:ef:
08:17:96:ee:16:84:e9:49:5d:d1:90:e6:2d:ae:29:
17:69:7f:1b:d3:2c:9a:09:90:47:9e:0d:b9:19:f3:
6c:ef:1d:fe:19:34:35:87:c8:73:a4:fa:95:aa:8a:
66:fc:22:75:e2:d9:61:8c:a6:12:12:49:49:ed:25:
d5:0e:44:e3:c3:de:7e:d0:60:19:25:a9:98:6d:15:
8e:1f:9e:ce:ec:26:f0:16:0f:63:45:1c:81:66:91:
64:34:c3:1b:d5:48:c1:0b:b5:70:a6:92:b7:1b:00:
99:8c:a3:80:b9:83:9a:58:8d:26:5c:94:9a:8b:c5:
dd:cc:38:76:70:11:5a:2b:f3:36:94:21:c2:81:16:
52:c8:bc:7b:83:07:2c:53:a0:bc:78:e3:a3:05:17:
b8:a5:16:ba:04:b9:3a:5d:3d:cf:ef:61:bb:9a:fa:
e9:f7:d7:d5:f4:a0:d8:2c:fb:b5:ab:88:e8:22:2e:
bd:dd:44:8c:78:b0:3a:43:cc:db:b2:52:9e:89:6f:
9a:c1:1f:c1:0f:4e:d0:d1:39:99:c2:3c:51:90:8a:
f0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DD:55:01:DD:C9:39:7A:F3:87:6C:BA:0A:88:36:7F:C3:CD:F8:91
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:73:e0:53:1d:06:c5:80:45:da:ee:d0:e1:ae:a0:37:2c:cc:
51:99:eb:91:2f:be:01:53:3c:52:02:44:92:70:1e:de:ff:66:
ef:5c:85:b1:7a:1a:52:d2:17:de:ea:97:77:27:a1:23:c2:df:
d7:d8:bb:a6:29:d3:5f:0f:f0:ca:34:33:2e:ab:f4:d9:87:77:
e0:2b:3d:03:f5:53:bd:53:13:5c:ad:0c:e2:d9:6a:ee:f6:b1:
a6:a9:de:88:64:66:90:41:39:d4:ad:8f:ac:e9:e3:b0:b4:93:
66:78:6d:91:4b:c4:8e:2d:e9:5b:80:ed:2f:f2:d2:a2:08:ba:
1b:39:a5:aa:12:e9:c6:4b:42:6b:fa:38:07:27:ba:d0:d7:6a:
5b:66:2a:9b:33:f5:19:41:52:4e:50:51:66:54:c5:27:97:71:
6f:0b:66:4e:df:8e:6f:0d:38:1c:d3:b6:9d:be:17:31:ee:d7:
42:a1:1c:8e:a1:87:75:35:9b:70:0e:2c:13:36:fd:58:a4:28:
0c:ff:9c:1e:9c:01:2e:01:ff:64:03:10:4e:1a:ec:71:5d:30:
82:87:ee:83:64:78:8e:04:19:4f:2d:a9:2d:21:51:4b:5a:04:
58:b7:fb:bd:0e:ba:39:81:1a:97:57:7e:f9:53:f1:e1:f4:f1:
60:3e:5a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:16 2026 by rpki-client