Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
File: 5acKgaoDCKPLv2hXixgPNWtu2Kw.mft (raw, json)
Hash identifier: 1xRrXmylxpKv4toMBqC+T+hjjWVN29N0P3Ps3KAUY20=
Subject key identifier: E8:F3:46:85:5F:3F:71:EE:10:CD:1D:EF:2A:10:27:9C:3E:C5:19:84
Authority key identifier: E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
Certificate issuer: /CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Certificate serial: 019D3941BA24B1801B590FF5C75FCC3A8850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
Manifest number: 0150
Signing time: Sun 29 Mar 2026 11:01:41 +0000
Manifest this update: Sun 29 Mar 2026 11:01:41 +0000
Manifest next update: Mon 30 Mar 2026 11:01:41 +0000
Files and hashes: 1: 5acKgaoDCKPLv2hXixgPNWtu2Kw.crl (hash: U2WQ0sg6wP5FrwutEqx4e8/ncMNCx3OlBkCkXnHIh24=)
2: lKcxCQ3OfOPdVqWrI13qDrj054k.roa (hash: xLZ+rUY4dQ+17ft3i45+DuMCNmea8sukddDn1Ts3WII=)
3: wVow-AxbRtNSLbo8GRm_FtoRrvM.roa (hash: nceJKLP2a7knL1aJY0JZbTmlkyLD960ynWY7OWHE27E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:ba:24:b1:80:1b:59:0f:f5:c7:5f:cc:3a:88:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Validity
Not Before: Mar 29 11:01:41 2026 GMT
Not After : Mar 30 11:01:41 2026 GMT
Subject: CN=e8f346855f3f71ee10cd1def2a10279c3ec51984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bc:c5:81:a5:d8:16:13:40:d4:fb:33:85:e6:
ea:e6:fb:92:0e:5f:5b:2d:ef:ec:29:c6:5d:fd:6e:
e8:e9:12:e9:06:56:5e:d3:33:89:8a:bb:28:19:5a:
32:8e:2e:2a:8f:f1:81:ba:b9:6f:0e:68:82:b2:4d:
25:55:34:03:d8:b1:78:3d:be:0d:65:4d:be:28:60:
6b:24:aa:25:e3:d1:1e:9f:76:01:67:19:c0:7b:8e:
c6:95:da:c0:7b:90:7e:a5:69:cd:71:e8:2e:a5:c5:
2b:8b:3f:4d:3b:7d:43:8d:a6:70:16:20:ee:27:7b:
e6:cf:ff:dd:8b:c3:10:51:b3:2c:e7:02:a0:7d:d9:
7a:3d:f5:d8:eb:f1:9a:7d:54:0d:02:96:23:d0:85:
f9:15:6f:85:bb:56:8b:fe:b2:92:57:1b:9b:69:08:
4b:36:90:50:ad:54:3e:f9:3a:27:6c:78:f7:07:8f:
d9:03:c2:0e:fa:2a:89:ad:1f:af:32:5b:ad:7e:aa:
0b:81:4f:c1:55:c4:70:72:2b:3f:8b:3f:59:08:cb:
96:a1:fa:4b:a7:a1:00:d9:96:d3:c9:74:ae:3e:bd:
e2:ee:22:c2:9c:fd:e5:d6:ba:78:60:f0:f2:ab:12:
e8:8f:f5:b5:33:a1:ed:b3:89:90:0c:be:82:40:8f:
78:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F3:46:85:5F:3F:71:EE:10:CD:1D:EF:2A:10:27:9C:3E:C5:19:84
X509v3 Authority Key Identifier:
keyid:E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f3:a8:0e:7a:8c:1e:29:ee:79:ce:39:54:8a:3b:1b:5a:3c:
fd:fc:ec:26:f6:0b:6f:a5:3e:a4:70:3f:ad:e3:30:69:a0:42:
11:8e:4f:ea:ea:81:eb:6a:b4:ec:bd:62:89:fa:1e:30:aa:53:
f4:85:29:ee:37:33:cc:3d:c8:37:5e:8a:78:df:93:30:cb:09:
45:5b:22:3a:f9:ca:2e:de:b3:25:45:33:2a:8e:58:d1:3c:37:
7f:65:fb:e5:f0:e3:e7:37:7a:8a:8f:0f:5c:4a:c9:32:e9:a6:
14:44:29:16:50:0d:2a:05:e2:65:db:dc:a3:20:0e:b2:6d:ae:
d5:a0:dd:16:87:94:6d:1c:f6:48:8c:12:54:6f:05:73:fa:7c:
f5:76:e1:99:61:fe:aa:db:3d:fb:11:d5:f5:68:6e:54:58:20:
b5:5b:de:94:92:d1:35:24:dd:71:95:e3:b6:60:99:af:99:b6:
51:9d:fb:f9:3c:cc:d6:08:fc:f6:99:c8:b7:7e:2a:05:8f:d6:
47:ac:91:7a:16:9f:78:e4:75:e8:46:9d:09:5c:4a:d4:3c:45:
e9:19:47:5b:56:66:7a:62:2c:b5:29:62:69:6a:69:40:73:b0:
f0:b3:2d:22:bc:cd:a0:f6:dd:7c:59:76:5e:bb:c2:ec:c0:60:
c7:f9:e1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:24 2026 by rpki-client