Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
File: 156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json)
Hash identifier: CBAMiSyg6M79qydXZIarwJmTE5uZEazJaamKnaJ4fes=
Subject key identifier: 7A:84:4F:E2:C1:2A:02:30:BD:F2:B9:C6:40:75:A3:20:52:20:5B:77
Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Certificate serial: 01A0D2000FDABD78232108F3506D5CB2751C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
Manifest number: 1114
Signing time: Thu 24 Sep 2026 06:00:14 +0000
Manifest this update: Thu 24 Sep 2026 06:00:14 +0000
Manifest next update: Fri 25 Sep 2026 06:00:14 +0000
Files and hashes: 1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: 6cmsKF++8TCZc8IN0SgP/82oAqjkc92J6lS+0iiw3uA=)
2: FL8p74tWI7ntw6R2xksbD1PAPss.roa (hash: gYU94roAVzlnVYJ/I8E+mMblo4Z/HWZwqnYhXEb29/s=)
3: bz8OgK9KGk7s_9Rbo1BfVZKPRMc.roa (hash: QMlz5xU6ZIS5u6QE8mCAeeanjx7pStZbTuS8Yuj6acw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:0f:da:bd:78:23:21:08:f3:50:6d:5c:b2:75:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Validity
Not Before: Sep 24 06:00:14 2026 GMT
Not After : Sep 25 06:00:14 2026 GMT
Subject: CN=7a844fe2c12a0230bdf2b9c64075a32052205b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a6:38:19:4d:f9:68:e4:e3:43:27:1c:da:2d:
1f:16:b7:69:76:94:69:75:80:db:1e:8a:a4:21:12:
7c:eb:4e:f7:2d:b7:29:b8:08:d0:5b:f7:97:d7:e1:
a9:64:94:86:9b:2a:dc:e2:d6:b2:f7:11:45:57:6e:
97:79:4e:d7:35:a6:23:bb:f3:b4:5f:e0:59:fe:88:
75:85:50:5f:16:27:3a:e2:b7:a6:76:03:f9:c9:c9:
ee:42:f8:b8:53:6c:8c:1c:7f:74:9e:97:92:fd:26:
b0:29:7c:03:c9:e7:4b:98:74:ce:74:3e:a2:ea:f3:
a1:a6:52:04:e5:a5:8e:32:8f:f0:d2:c5:ab:a0:11:
04:03:81:b9:6f:c0:29:c4:36:32:bf:78:53:e2:30:
02:31:ce:27:49:1c:ac:ca:5c:56:2e:af:40:93:d1:
60:6d:ac:05:9d:4d:29:58:b5:73:6e:a5:26:6c:b5:
d6:35:18:c6:64:10:4f:46:0c:0d:9a:0a:e6:82:e7:
52:35:f0:55:62:c6:fb:ff:02:9d:cf:fb:f9:7b:e6:
c2:29:e1:c6:36:93:72:b0:28:87:f9:06:cf:97:79:
26:cd:fa:8e:29:7e:64:cb:b3:3c:05:d7:52:51:84:
f3:bb:63:f2:46:88:4f:14:1f:3d:1d:a4:e4:6c:76:
e0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:84:4F:E2:C1:2A:02:30:BD:F2:B9:C6:40:75:A3:20:52:20:5B:77
X509v3 Authority Key Identifier:
keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:01:b2:4f:5c:60:b8:31:9b:1c:5e:ed:e9:7f:4c:9e:c1:58:
20:ec:1a:92:c6:37:24:d3:b9:2d:18:e1:b9:5f:7e:14:51:a5:
ee:47:28:75:3f:9d:e0:97:1e:e3:13:92:20:e3:e1:bd:9a:46:
f0:31:1c:4f:b4:67:f4:0d:60:f6:22:61:ff:a0:05:7f:9a:70:
13:8e:c4:fe:09:83:54:08:3d:dc:49:e5:3a:55:91:ff:fd:8f:
7c:40:d7:52:a0:2d:25:ea:3e:30:b9:0b:9a:ff:c9:df:e3:e9:
2e:a1:f3:5c:24:2c:8b:3e:15:db:72:49:76:bf:e5:9a:c7:50:
06:93:38:a1:21:eb:91:b2:e9:22:57:3b:d5:5b:75:31:f0:d6:
44:d3:5f:ed:c0:02:1b:fa:d8:04:07:20:4c:3f:09:25:db:7f:
7c:10:a7:d1:45:99:f9:be:ae:3b:6a:0e:a7:c8:b9:54:a8:29:
f5:6d:e1:5d:40:f5:d6:d0:45:a2:df:28:a9:be:52:a8:2d:8d:
c3:1b:7b:d3:37:9d:32:4d:ed:1b:60:83:4f:a1:94:73:63:05:
62:d2:1e:c0:e8:7b:74:e5:cb:51:b4:3a:da:bc:29:44:af:76:
13:b1:ed:35:4c:37:6e:df:dc:ce:b9:13:47:a7:20:ec:c6:7a:
c3:8f:74:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:23:06 2026 by rpki-client