Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
File: 156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json)
Hash identifier: Ch+dGTckXND2IAhzLv7xlbz0zcWR1eIsycHWlGCzhiU=
Subject key identifier: 98:A2:F8:1E:50:74:AD:36:43:87:D2:6E:84:22:B4:B8:F7:40:A4:7D
Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Certificate serial: 019EBEECEF11540F19F00D4EB91AED8DCAC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
Manifest number: 1001
Signing time: Sat 13 Jun 2026 03:00:59 +0000
Manifest this update: Sat 13 Jun 2026 03:00:59 +0000
Manifest next update: Sun 14 Jun 2026 03:00:59 +0000
Files and hashes: 1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: BKXzlB/L8vvSUohq5SzhXBCuExhbIdf22Ya44nX1nFY=)
2: FL8p74tWI7ntw6R2xksbD1PAPss.roa (hash: gYU94roAVzlnVYJ/I8E+mMblo4Z/HWZwqnYhXEb29/s=)
3: bz8OgK9KGk7s_9Rbo1BfVZKPRMc.roa (hash: QMlz5xU6ZIS5u6QE8mCAeeanjx7pStZbTuS8Yuj6acw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:ef:11:54:0f:19:f0:0d:4e:b9:1a:ed:8d:ca:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Validity
Not Before: Jun 13 03:00:59 2026 GMT
Not After : Jun 14 03:00:59 2026 GMT
Subject: CN=98a2f81e5074ad364387d26e8422b4b8f740a47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:ae:28:58:19:48:fb:ca:72:09:5d:d5:5f:
3d:ae:45:0b:92:31:64:6c:e6:97:d1:38:bc:66:79:
6d:aa:1f:52:e7:27:b3:e9:15:ed:97:a2:cf:d0:c3:
5d:15:09:23:87:bc:99:22:25:46:6c:fe:85:e7:e9:
72:63:9a:da:d9:b3:a0:b2:e6:0a:32:a8:5f:88:2c:
85:85:3e:d7:79:c3:d1:a5:60:78:63:27:93:0c:00:
a7:a6:84:ce:c7:31:2b:67:ca:67:9e:fd:ca:9b:39:
ce:52:47:1e:c4:aa:78:9b:46:3b:27:34:23:17:e1:
74:b4:ab:78:f6:c3:c8:18:69:79:29:8f:e8:69:1d:
b4:ef:a2:d9:bf:f3:d3:c7:f7:c6:a3:6b:a2:de:09:
e4:c1:7b:03:d9:c6:e1:7e:48:77:69:87:6b:ee:a3:
0d:86:33:f5:88:ba:ed:29:de:56:2c:bf:d6:36:e9:
7d:ab:fc:50:53:2a:67:72:1e:3e:97:8e:41:29:1f:
d3:f1:70:0d:81:91:ab:f7:c9:e2:71:31:56:09:62:
ef:18:cd:96:8a:d4:d6:82:93:ac:ec:38:53:f6:a2:
62:88:72:0c:75:5c:39:c5:c1:72:39:fb:b1:ff:cf:
32:16:60:76:f3:8e:94:20:c2:72:5c:91:8d:90:97:
d3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A2:F8:1E:50:74:AD:36:43:87:D2:6E:84:22:B4:B8:F7:40:A4:7D
X509v3 Authority Key Identifier:
keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:49:be:2b:fe:31:65:1b:2f:60:18:f6:a9:48:61:8f:d2:d2:
95:0e:28:b0:7a:4a:92:76:4d:37:26:53:7d:46:07:a5:6c:c7:
81:31:c2:01:8f:a3:93:1b:96:cb:8f:08:a9:1d:76:ae:9d:1d:
fb:a0:21:44:e1:30:7e:7c:8a:d8:e3:78:81:12:3f:ec:d2:2b:
34:a3:0f:64:8c:71:76:a5:b6:87:9e:46:01:59:4d:50:31:d5:
05:52:cc:2c:fe:90:68:a2:67:70:83:ec:23:28:9f:b3:8d:34:
a9:11:b6:a1:91:06:99:90:d0:24:ec:10:34:69:cd:f7:14:2e:
aa:71:d4:86:b7:9b:14:d9:d8:79:8a:75:29:95:c1:79:ac:ed:
6d:e5:79:53:1d:43:70:47:aa:9d:33:5a:e1:52:f9:dd:84:72:
0a:29:86:d3:d5:5c:a8:89:da:e5:b7:6a:c2:d3:ab:6a:5a:09:
59:70:fd:ae:3d:f8:18:3c:79:ff:b4:95:00:a3:cc:a2:7a:1d:
99:b8:e1:53:36:f0:15:58:12:36:74:eb:73:4a:5a:5c:ae:2e:
5a:78:4a:dd:b7:91:86:7e:8d:e8:5e:6f:9f:36:d8:a0:d4:09:
41:d7:f8:b9:ed:ee:20:2a:0b:2b:b5:1b:8a:91:d5:89:ce:db:
64:01:39:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:08:03 2026 by rpki-client