Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
File: 5acKgaoDCKPLv2hXixgPNWtu2Kw.mft (raw, json)
Hash identifier: GUQ719RGokxW9ANnXTnA9ZvblYYxZPmx+yiqmEqfPhM=
Subject key identifier: E1:79:ED:A4:B8:C9:90:DC:2B:CE:9A:52:FE:CA:44:D2:E5:DD:39:60
Authority key identifier: E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
Certificate issuer: /CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Certificate serial: 01A13E947F90A03EF7003A7E71D458E216B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
Manifest number: 0365
Signing time: Thu 15 Oct 2026 08:01:21 +0000
Manifest this update: Thu 15 Oct 2026 08:01:21 +0000
Manifest next update: Fri 16 Oct 2026 08:01:21 +0000
Files and hashes: 1: 5acKgaoDCKPLv2hXixgPNWtu2Kw.crl (hash: JbdyNM0q/DvIAE6UJWxDYjKmdbI73asDKTrg0WL+HPI=)
2: lKcxCQ3OfOPdVqWrI13qDrj054k.roa (hash: xLZ+rUY4dQ+17ft3i45+DuMCNmea8sukddDn1Ts3WII=)
3: wVow-AxbRtNSLbo8GRm_FtoRrvM.roa (hash: nceJKLP2a7knL1aJY0JZbTmlkyLD960ynWY7OWHE27E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:7f:90:a0:3e:f7:00:3a:7e:71:d4:58:e2:16:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Validity
Not Before: Oct 15 08:01:21 2026 GMT
Not After : Oct 16 08:01:21 2026 GMT
Subject: CN=e179eda4b8c990dc2bce9a52feca44d2e5dd3960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:08:d1:a6:04:36:82:78:5a:9c:a9:59:39:0f:
52:5e:7a:31:23:6e:29:17:b9:a5:8a:8d:14:49:12:
26:13:3e:a0:c8:4c:b5:7e:35:15:7e:14:a9:a3:f8:
54:86:77:2d:69:b4:cb:5f:bf:41:e7:eb:d1:c9:ce:
28:f3:d7:cb:4a:90:e6:17:84:60:17:1f:d7:f5:d5:
bf:6c:72:a0:83:00:5c:a3:1e:c2:cf:d8:89:12:a6:
22:a4:dd:dd:60:65:68:36:80:16:ef:46:df:54:8c:
80:46:0f:7f:74:2d:9e:48:17:e7:fa:54:a5:db:75:
0c:87:8c:df:95:f1:4f:5c:41:c4:3f:66:5d:f6:05:
d2:91:6e:43:b8:2a:bb:38:55:96:99:8c:b4:6a:a9:
35:d7:55:6d:01:c2:f5:28:07:82:6f:dd:b8:24:0e:
e4:98:f2:2a:8d:06:60:74:16:f3:33:4c:f4:dc:00:
14:75:6e:fa:a1:ea:58:c8:7f:bb:9d:80:a0:3e:9c:
76:10:55:a7:82:80:63:3e:d7:95:b2:af:3a:71:6c:
47:a0:86:e8:a1:c3:67:90:ce:96:6d:87:de:f5:91:
3c:81:8a:8f:22:d1:b5:19:9e:31:5f:9a:11:d2:60:
96:da:87:9c:e6:0c:57:9f:83:96:c4:1d:7c:9e:b1:
a1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:79:ED:A4:B8:C9:90:DC:2B:CE:9A:52:FE:CA:44:D2:E5:DD:39:60
X509v3 Authority Key Identifier:
keyid:E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:cc:05:7c:5c:1d:91:a5:a8:33:4d:77:2e:17:16:72:70:f5:
7a:8d:73:46:84:af:ef:aa:da:95:ec:c3:71:97:2b:0e:e6:f5:
8f:2d:38:3f:51:2f:65:87:67:6d:a4:e2:a2:4b:c5:36:e2:20:
e3:b7:16:5e:82:03:ab:6b:e0:4c:5d:51:cb:f4:2b:b3:a0:ba:
92:1b:fc:ab:23:76:3d:2f:83:fe:19:99:49:5e:be:8d:b4:ef:
b2:22:be:ce:e6:5e:e7:5e:c1:e8:72:0e:23:e8:3b:65:09:22:
14:57:1a:3c:c3:ae:96:46:bf:51:23:f2:19:4c:6b:bb:2c:59:
c7:c8:24:4a:be:64:08:99:5a:7a:79:28:4c:05:a5:90:ff:4a:
dd:55:ea:38:f7:e5:e4:9e:17:2d:40:aa:ae:08:9a:34:50:a9:
51:4e:60:1f:b5:11:4e:ae:7a:75:f3:34:e5:ad:e4:93:47:66:
ff:7c:01:41:b7:3b:71:95:d0:b9:50:bc:d3:03:5f:dc:41:c6:
87:1d:53:32:41:3a:00:ad:51:10:8a:a0:1f:dc:ac:1b:e2:38:
64:f4:26:2b:9c:fa:8e:89:21:53:9a:82:a4:23:02:32:c5:94:
9e:6b:21:14:39:98:10:49:11:a2:e5:0d:3f:55:3d:17:17:40:
5b:e8:db:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:05:55 2026 by rpki-client