Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: iLBS4iH30T6MMzzHaPcA3VspXU60lg+IoL4uwVHAArg=
Subject key identifier: 9F:F0:59:A3:19:6A:D6:9E:B8:AA:A5:38:34:7E:EA:AE:0D:55:50:D1
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 019FA9AC58C3B33A22936C4AE5247C9C3AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 17:01:12 +0000
Manifest this update: Tue 28 Jul 2026 17:01:12 +0000
Manifest next update: Wed 29 Jul 2026 17:01:12 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: spsHUKj3fBDj/DerrpuMnpRNMa0mxKmjOry3WkjTi2w=)
2: 9dcMnZF_hjQhvJcga50J4Lgw0oc.roa (hash: 6V2ZAOY1uWD3nVg5qScVh7xpT8E4AfFf2ucJTTSLBok=)
3: UZPOWsV_FJe0LaItYy8ujva8wUU.roa (hash: uIto6VX+5CDXd7vtEA+gBkH2FtA4Z4f+sQvfJ6SzABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:58:c3:b3:3a:22:93:6c:4a:e5:24:7c:9c:3a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Jul 28 17:01:12 2026 GMT
Not After : Jul 29 17:01:12 2026 GMT
Subject: CN=9ff059a3196ad69eb8aaa538347eeaae0d5550d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:ed:ec:74:63:ba:59:4e:5b:1b:ad:5a:a5:
04:b0:9e:bf:9c:b5:c8:ff:db:78:af:ea:6c:c1:b1:
ae:de:34:04:e7:93:e8:b1:24:00:25:f3:16:94:37:
49:12:24:f8:0c:95:36:fc:cc:1d:ea:2a:64:87:d5:
3b:31:91:91:ba:76:09:74:c5:f9:9b:0d:31:8f:ff:
19:20:63:a2:e2:90:a8:93:eb:87:83:21:39:d2:bc:
b0:d3:a0:43:12:da:0a:ab:63:d1:c9:3c:ce:e4:21:
b8:61:d5:cb:a3:49:60:e8:9c:f5:af:7a:39:95:21:
3c:bd:41:24:14:d5:a0:7a:60:f1:84:1a:25:ce:50:
88:3b:0a:33:85:f3:9e:00:58:b5:76:f2:ee:e8:a9:
68:99:78:08:b8:fc:e1:8d:49:02:a1:d4:4b:25:04:
0f:c7:42:34:fa:64:71:b5:63:0a:6c:12:3e:73:50:
bc:ce:15:88:23:0a:e1:b8:5a:29:bc:eb:28:90:d5:
0a:3a:e3:88:f1:e4:62:58:06:a5:02:51:9e:45:c0:
2f:1f:be:f3:42:dc:5f:83:86:32:8f:3f:a1:10:d1:
05:b7:68:97:1f:6f:6d:b3:9f:b4:ea:08:5c:77:2a:
b0:92:db:dd:97:6e:2b:54:bc:30:8d:e8:ed:a6:07:
55:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F0:59:A3:19:6A:D6:9E:B8:AA:A5:38:34:7E:EA:AE:0D:55:50:D1
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fa:77:25:82:51:88:24:12:d8:a2:5d:d8:2a:d1:b2:57:4a:
b2:75:fa:52:e4:09:d7:f8:69:60:79:d0:c5:83:fb:dc:72:0e:
33:b3:42:d7:a2:44:9a:38:c1:00:c0:27:71:c8:32:34:5a:16:
bc:dc:37:0f:49:ae:44:f0:84:b0:78:4b:7f:f6:bb:bc:b7:1c:
fa:a7:e2:25:61:48:93:e8:c3:c1:4b:f8:fe:12:3a:1a:57:ab:
5c:a9:2b:57:e5:77:f8:37:2a:b3:23:eb:a9:94:48:99:31:f5:
bf:cd:8d:09:a8:6e:37:c1:af:72:75:6c:ae:eb:30:6a:bc:86:
a4:7a:e4:70:0f:4c:43:76:24:56:47:ba:61:65:1b:00:3d:91:
7c:12:ae:77:2e:2b:b1:cc:da:c8:3c:de:f3:8d:82:d0:1e:b2:
1a:27:3c:b0:82:05:66:39:88:5f:83:53:25:76:bb:f2:77:81:
c1:46:ec:cb:a0:7c:ed:7c:e9:ad:75:ef:86:6f:28:d8:a4:44:
1b:f5:d6:e3:b2:ef:a8:ac:c2:bf:d7:6e:9b:53:96:d8:76:48:
43:2b:85:91:f4:3e:49:14:8a:0b:93:31:d5:36:56:d0:c6:97:
fd:16:a8:93:4f:61:71:e7:39:f8:a3:69:1f:6b:7e:3f:63:af:
22:72:e0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:44 2026 by rpki-client