Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
File: 156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json)
Hash identifier: tCIx5Q7NxLD02jTBoN4orxPuaJwBeVRAu7a5Ka7p+PU=
Subject key identifier: 34:33:B0:57:78:C4:F1:E3:9C:94:8A:A0:24:56:00:F3:1D:84:A3:83
Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Certificate serial: 019FAA8801C59663EE7BA883B289705098CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
Manifest number: 107B
Signing time: Tue 28 Jul 2026 21:01:07 +0000
Manifest this update: Tue 28 Jul 2026 21:01:07 +0000
Manifest next update: Wed 29 Jul 2026 21:01:07 +0000
Files and hashes: 1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: zyEpCdJly7ibTMFEW9QItixgEcdJ/X6L8FDkokLYVv0=)
2: FL8p74tWI7ntw6R2xksbD1PAPss.roa (hash: gYU94roAVzlnVYJ/I8E+mMblo4Z/HWZwqnYhXEb29/s=)
3: bz8OgK9KGk7s_9Rbo1BfVZKPRMc.roa (hash: QMlz5xU6ZIS5u6QE8mCAeeanjx7pStZbTuS8Yuj6acw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:01:c5:96:63:ee:7b:a8:83:b2:89:70:50:98:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Validity
Not Before: Jul 28 21:01:07 2026 GMT
Not After : Jul 29 21:01:07 2026 GMT
Subject: CN=3433b05778c4f1e39c948aa0245600f31d84a383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:46:01:dd:1f:d7:a9:80:9e:6b:31:5d:86:
f4:b1:81:ff:92:09:64:cf:c1:cb:e7:0a:d3:a1:fd:
1c:6a:96:cf:bc:48:51:f4:26:0a:5c:8e:06:22:a3:
17:05:9c:a0:80:b3:fb:1b:1b:84:9b:ec:e6:76:7a:
b2:64:22:66:c7:42:52:24:61:00:5a:45:6a:ac:45:
74:6b:6c:21:0f:15:3a:1e:41:4d:69:23:cd:0f:d0:
5e:fd:63:8b:32:d0:0f:7f:0c:14:f2:cc:7a:60:68:
9a:23:bd:7a:50:10:44:59:f8:29:3a:c4:4f:03:03:
9a:bd:7d:50:28:5b:4c:da:2e:a2:2f:22:11:90:8e:
ce:c0:9a:b0:7a:01:a4:28:8d:7b:a0:46:e2:24:35:
57:dd:19:b4:42:19:e7:78:96:72:2a:2e:82:c0:de:
4f:96:7e:16:23:5c:db:4e:60:b9:5c:8c:48:23:43:
6c:ae:9a:80:77:c5:34:35:4d:16:49:0f:aa:53:c7:
a6:dc:40:75:58:85:78:47:41:8a:c7:a2:fe:ac:95:
0b:69:a8:21:8c:00:eb:08:2d:d8:ad:7f:f2:42:2b:
de:db:5a:6c:15:57:4d:65:c8:6f:77:12:2c:83:23:
1f:f9:6d:f1:ad:e0:39:8c:d9:15:2b:9d:ba:1a:a4:
b0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:33:B0:57:78:C4:F1:E3:9C:94:8A:A0:24:56:00:F3:1D:84:A3:83
X509v3 Authority Key Identifier:
keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d4:fb:9a:c0:5c:5e:4a:b1:82:05:63:c5:24:ea:a2:06:14:
3a:5d:d2:3f:6a:f6:cf:fa:73:c8:31:51:c2:e4:5b:6a:84:23:
ae:58:aa:04:59:b8:91:f0:5f:28:9c:60:4c:b3:74:20:c0:b6:
3e:d0:3a:5e:17:20:96:26:f6:de:2d:e8:e3:ea:11:66:83:bf:
f6:32:bd:0c:d7:8e:3d:5f:77:63:14:06:4f:20:12:36:ef:00:
73:6e:0e:a2:a1:3b:a7:ae:e3:fb:e1:35:d5:1e:48:78:86:6a:
69:8c:8d:78:b5:a7:77:24:52:97:67:50:6a:49:58:7e:b0:f9:
6c:d5:3c:2a:ab:7a:82:62:44:50:61:cb:69:4f:c0:c7:60:27:
d2:c6:03:1d:03:7a:d4:db:24:09:44:0c:20:84:bc:16:7a:33:
87:d3:c8:e5:2d:e5:b6:7e:43:72:19:cb:d9:8e:f4:63:c4:78:
00:71:79:73:88:12:c7:ee:27:bd:40:e4:17:48:c4:2d:86:23:
bd:3c:e3:42:fd:6e:3c:9d:55:5f:f8:89:02:66:31:14:9a:01:
fb:54:8f:ce:b6:16:bb:5f:c7:e4:93:65:4a:c1:71:fc:ff:48:
72:a1:e9:a7:04:e4:09:4e:07:97:dc:91:29:c0:fa:3f:82:8f:
fb:9c:59:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:57:46 2026 by rpki-client