Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
File: 5acKgaoDCKPLv2hXixgPNWtu2Kw.mft (raw, json)
Hash identifier: qkIgBPEedXJnWvkVXigDjB+tdDr9qMGJgJIIkUPTQAI=
Subject key identifier: 99:FD:58:97:13:9A:5F:92:CE:6D:A4:9B:78:F0:99:7A:CF:30:77:37
Authority key identifier: E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
Certificate issuer: /CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Certificate serial: 019E6E3E46190E6A7F901A2ED50BEDF3BD2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
Manifest number: 01F0
Signing time: Thu 28 May 2026 11:00:35 +0000
Manifest this update: Thu 28 May 2026 11:00:35 +0000
Manifest next update: Fri 29 May 2026 11:00:35 +0000
Files and hashes: 1: 5acKgaoDCKPLv2hXixgPNWtu2Kw.crl (hash: 7fsQpBTtnj/LnMdb0oaDIcO+W+YlVcFQnqNPhlWh8ys=)
2: lKcxCQ3OfOPdVqWrI13qDrj054k.roa (hash: xLZ+rUY4dQ+17ft3i45+DuMCNmea8sukddDn1Ts3WII=)
3: wVow-AxbRtNSLbo8GRm_FtoRrvM.roa (hash: nceJKLP2a7knL1aJY0JZbTmlkyLD960ynWY7OWHE27E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:3e:46:19:0e:6a:7f:90:1a:2e:d5:0b:ed:f3:bd:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Validity
Not Before: May 28 11:00:35 2026 GMT
Not After : May 29 11:00:35 2026 GMT
Subject: CN=99fd5897139a5f92ce6da49b78f0997acf307737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:de:c1:cc:96:0d:a1:3e:49:d3:2f:81:aa:
9f:72:e3:bb:c2:9f:ec:62:18:7c:3b:3e:38:b2:52:
6f:01:43:c7:c6:2b:e3:df:8f:7c:38:b3:a0:49:47:
5b:55:64:08:e6:94:f7:c3:d2:89:c2:a1:1c:b1:67:
05:d9:52:20:5c:47:d7:8b:d1:00:7a:66:7e:e9:54:
95:05:70:e3:dd:72:66:92:09:10:e2:41:06:33:a6:
8b:11:5e:f6:78:a9:e8:32:c2:86:90:c4:a4:21:48:
18:ad:65:cc:aa:80:c7:5c:f2:5a:0f:68:bd:e6:ee:
56:e9:86:18:b8:99:ed:a4:78:61:6b:b6:cf:80:db:
be:91:3d:b2:5e:3b:80:d4:c2:88:57:63:ae:07:50:
32:9b:4f:22:85:f6:f7:ed:0a:94:41:e1:b2:49:f7:
6d:8b:ec:84:77:ed:e4:be:31:47:99:2b:e8:6d:a9:
f1:cb:df:4d:47:32:a7:53:0d:5c:b0:9d:6e:41:2b:
b7:49:c8:3d:ec:31:f4:93:f0:0f:5e:a9:aa:5d:ee:
67:43:e1:30:85:ea:d2:b6:c8:d1:ff:aa:77:8d:c6:
68:86:7c:81:73:c5:0c:19:0f:b5:de:16:74:1c:2a:
38:2a:fb:33:2a:da:7f:03:de:e3:ab:d5:56:ed:54:
74:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FD:58:97:13:9A:5F:92:CE:6D:A4:9B:78:F0:99:7A:CF:30:77:37
X509v3 Authority Key Identifier:
keyid:E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:64:bd:25:0a:0d:60:62:42:2a:4f:d6:19:a5:4f:a0:5b:ae:
28:49:5d:1b:34:5f:ca:97:f8:da:01:17:e7:4d:ed:20:0f:db:
e4:11:6b:81:15:3c:d5:fb:c0:d9:76:93:b8:93:fb:8e:9f:98:
dc:d2:d6:59:04:3d:03:d9:df:60:27:58:f3:ab:9d:b5:e6:47:
c9:12:2a:0e:95:b8:c2:d9:37:0d:20:6e:6b:e4:41:45:b9:f2:
2d:9d:01:05:52:ce:74:58:76:f7:7d:14:c2:e9:f8:e5:43:c7:
3c:f2:36:da:c3:a2:43:2a:78:fb:21:ee:7d:b9:5f:10:a7:a2:
b6:6a:85:a9:d7:99:13:4d:7a:cc:d8:98:03:2a:01:cd:da:2e:
d8:92:8c:33:cc:a8:6c:61:bf:8c:aa:32:1f:f8:6c:fe:63:62:
ac:35:b8:88:c3:5f:9c:ca:7e:e6:fd:2d:71:92:3b:5b:c3:dc:
0f:1c:c0:80:b5:b9:ab:28:71:b6:6e:06:45:f3:3f:0d:38:43:
44:fb:c7:21:f1:b7:1c:a3:bb:e5:0e:0c:15:ff:a0:92:4e:3c:
40:17:7f:97:08:a5:6c:e0:fb:d8:b1:96:74:9c:43:9c:82:5e:
00:82:1e:45:b7:49:89:2c:20:f7:9d:5a:00:91:9f:55:98:f7:
44:b6:7c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 15:59:54 2026 by rpki-client