Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
File: 156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json)
Hash identifier: lN1D2wVL4ka3DIPcpqrFVCgr0cp9daOWiZUO538h750=
Subject key identifier: 6F:CE:2C:8F:17:64:FC:E9:BE:4F:D9:0C:6F:16:44:77:40:1E:7A:EA
Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Certificate serial: 019D9774305AE372557E534F58EADDE9C62C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
Manifest number: 0F68
Signing time: Thu 16 Apr 2026 18:01:07 +0000
Manifest this update: Thu 16 Apr 2026 18:01:07 +0000
Manifest next update: Fri 17 Apr 2026 18:01:07 +0000
Files and hashes: 1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: g+U4F2AFrkQ3TT+gB5ZBqXaaVEgJQS26bE2hFgUcCto=)
2: FL8p74tWI7ntw6R2xksbD1PAPss.roa (hash: gYU94roAVzlnVYJ/I8E+mMblo4Z/HWZwqnYhXEb29/s=)
3: bz8OgK9KGk7s_9Rbo1BfVZKPRMc.roa (hash: QMlz5xU6ZIS5u6QE8mCAeeanjx7pStZbTuS8Yuj6acw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:30:5a:e3:72:55:7e:53:4f:58:ea:dd:e9:c6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Validity
Not Before: Apr 16 18:01:07 2026 GMT
Not After : Apr 17 18:01:07 2026 GMT
Subject: CN=6fce2c8f1764fce9be4fd90c6f164477401e7aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:c8:57:c4:f1:46:70:54:23:41:5d:9b:79:
42:c9:d1:c4:4f:7f:2c:e9:a5:fa:4e:d9:80:a8:f3:
3f:b8:fc:55:8b:9e:03:11:04:62:4f:23:37:16:ea:
ed:cf:c1:59:1c:1f:92:45:ce:cc:90:45:d6:61:ff:
fc:0e:f6:7c:b1:93:f2:d0:95:51:92:fc:4c:e4:44:
15:69:9f:67:83:43:3f:fd:8d:e8:9e:57:0f:f0:2e:
f8:79:1b:69:96:36:81:35:74:01:c5:0f:0f:87:a5:
20:77:98:23:03:3e:f3:8d:10:cc:21:01:10:50:f0:
96:04:42:f0:b7:3d:81:08:48:bf:30:e1:dc:79:f1:
31:44:02:22:bc:56:64:1d:31:db:3b:d8:06:9c:f4:
56:98:59:63:c5:81:fd:f2:1a:b3:42:c4:73:5f:16:
aa:df:92:31:80:72:92:b2:36:21:6c:17:83:cb:8a:
3a:8b:8f:89:55:04:fb:8b:a7:c2:e7:ec:f2:13:9f:
c7:2c:a5:12:22:60:df:5f:3b:70:06:f7:ea:66:bb:
52:70:59:79:4f:b5:d6:2f:0e:19:b1:a8:90:48:01:
08:9b:9e:83:6d:86:66:ac:5c:bb:02:5f:72:0e:b1:
c4:4d:ab:22:91:25:1c:99:19:a9:e1:11:ba:6b:eb:
a3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CE:2C:8F:17:64:FC:E9:BE:4F:D9:0C:6F:16:44:77:40:1E:7A:EA
X509v3 Authority Key Identifier:
keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8a:86:f1:49:8e:84:15:3f:0b:1f:57:ae:40:19:60:9b:99:
69:ea:9a:7e:8a:6c:dd:4a:71:8c:88:34:e0:a7:6c:00:01:e2:
04:be:f2:0c:63:29:4c:2b:28:1f:d1:5e:bc:fa:90:d2:a1:12:
f1:fc:ee:6b:3b:63:30:a9:61:15:ca:5a:d1:62:d6:f1:42:e1:
e2:bd:db:a6:25:27:3d:45:e4:02:58:2d:62:74:cd:27:0c:3e:
9b:a5:1b:c2:9a:68:c6:c9:06:5f:28:e1:9d:14:9b:8f:42:17:
98:bf:7e:e5:6f:83:76:91:61:5c:17:19:2a:77:d6:6f:96:d8:
d4:2c:4f:da:7e:fa:6e:c7:80:1b:64:de:c1:7f:eb:e0:71:ff:
3a:57:fe:44:23:75:b3:c9:1e:12:a9:1e:9a:c6:56:47:e6:17:
4d:3b:b1:59:8b:bd:9c:d7:32:84:46:6f:7a:7c:72:f9:61:3d:
8f:c8:02:65:52:b9:0b:a6:c5:54:05:46:7f:03:c4:d9:91:d9:
95:14:1a:66:d3:25:2d:cb:f5:ff:cc:d7:47:1d:83:c9:3b:22:
a7:fc:75:7c:d3:e4:aa:64:a8:70:58:68:a8:90:27:e8:bb:55:
bf:8f:3b:3b:25:e5:af:30:8c:86:aa:4c:06:27:b5:20:47:14:
a5:4b:cd:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XdDBa43JVflNPWOrd6cYsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWVhNDdhZTE2MWNiYjNkYWVmOTc3ODk3MzBkNzBjNGNi
YTg5ZDAwHhcNMjYwNDE2MTgwMTA3WhcNMjYwNDE3MTgwMTA3WjAzMTEwLwYDVQQD
Eyg2ZmNlMmM4ZjE3NjRmY2U5YmU0ZmQ5MGM2ZjE2NDQ3NzQwMWU3YWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLLIV8TxRnBUI0Fdm3lCydHET38s
6aX6TtmAqPM/uPxVi54DEQRiTyM3Furtz8FZHB+SRc7MkEXWYf/8DvZ8sZPy0JVR
kvxM5EQVaZ9ng0M//Y3onlcP8C74eRtpljaBNXQBxQ8Ph6Ugd5gjAz7zjRDMIQEQ
UPCWBELwtz2BCEi/MOHcefExRAIivFZkHTHbO9gGnPRWmFljxYH98hqzQsRzXxaq
35IxgHKSsjYhbBeDy4o6i4+JVQT7i6fC5+zyE5/HLKUSImDfXztwBvfqZrtScFl5
T7XWLw4ZsaiQSAEIm56DbYZmrFy7Al9yDrHETasikSUcmRmp4RG6a+ujOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/OLI8XZPzpvk/ZDG8WRHdAHnrqMB8GA1UdIwQY
MBaAFNeepHrhYcuz2u+XeJcw1wxMuonQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kOWNiNDEtMWMzYi00NmFiLWE5OTMt
M2MzZTUwZGRhNmNjLzEvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9kOWNiNDEtMWMzYi00NmFiLWE5OTMtM2MzZTUwZGRhNmNj
LzEvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4qG8UmO
hBU/Cx9XrkAZYJuZaeqafops3UpxjIg04KdsAAHiBL7yDGMpTCsoH9FevPqQ0qES
8fzuaztjMKlhFcpa0WLW8ULh4r3bpiUnPUXkAlgtYnTNJww+m6UbwppoxskGXyjh
nRSbj0IXmL9+5W+DdpFhXBcZKnfWb5bY1CxP2n76bseAG2TewX/r4HH/Olf+RCN1
s8keEqkemsZWR+YXTTuxWYu9nNcyhEZvenxy+WE9j8gCZVK5C6bFVAVGfwPE2ZHZ
lRQaZtMlLcv1/8zXRx2DyTsip/x1fNPkqmSocFhoqJAn6LtVv487OyXlrzCMhqpM
Bie1IEcUpUvN+Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:43:09 2026 by rpki-client