Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
File: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft (raw, json)
Hash identifier: jR2B6sSwi44rGd5rKezq48zMBeuheDyhE9Fi8PNvFac=
Subject key identifier: B9:E3:87:C3:51:E9:4E:AF:CF:8F:BB:8A:83:EF:D2:D5:2E:DE:49:9F
Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
Certificate issuer: /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Certificate serial: 01A18419EEF8BDBB1AFEA6502065305BBF77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
Manifest number: 1ACA
Signing time: Wed 28 Oct 2026 20:00:54 +0000
Manifest this update: Wed 28 Oct 2026 20:00:54 +0000
Manifest next update: Thu 29 Oct 2026 20:00:54 +0000
Files and hashes: 1: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl (hash: 1AE+fn2/7ysmrE+VCXAFysh4UFPNWjZDgGlmtj3nkF8=)
2: MAlnrHBz52J4iUPlxj8tl8-oXOc.roa (hash: qXa+yTbuD7XjS6lZ9mqEs9hBbfiC68PWzv3F50Vgf2c=)
3: iNp0w88Ua-7UUDn8DRM4nU_0UtQ.roa (hash: 8nZ078lYm/30a7R5VvQz7RJG29EEwSHHijartjEwTJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:19:ee:f8:bd:bb:1a:fe:a6:50:20:65:30:5b:bf:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Validity
Not Before: Oct 28 20:00:54 2026 GMT
Not After : Oct 29 20:00:54 2026 GMT
Subject: CN=b9e387c351e94eafcf8fbb8a83efd2d52ede499f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:b9:35:5a:99:72:59:52:69:88:5e:9d:96:
cc:e0:2f:e1:79:47:66:47:e8:07:6d:10:48:e3:d3:
a7:e4:f5:6b:66:c7:3f:84:82:4a:b4:80:30:a1:26:
6a:9b:46:8f:74:a2:84:a6:3c:54:c5:92:c1:f1:68:
ed:b6:04:60:58:42:58:2b:71:63:a2:b3:76:5c:da:
4d:2d:23:4a:71:5d:9a:d0:0f:fc:18:44:90:76:5f:
08:52:cf:d5:be:a4:e6:eb:39:25:37:b8:ea:7e:30:
61:a4:9e:6a:04:5c:ca:76:f9:07:2e:e3:d8:90:03:
b1:64:cd:6e:61:3e:59:89:18:15:eb:65:97:6f:0c:
da:82:1b:4b:1c:9e:d8:11:98:f1:42:cf:79:73:37:
3c:6a:cc:66:2c:f5:f0:33:f5:d6:ff:c3:a9:ee:55:
d0:5c:a1:eb:d5:19:a3:99:dd:18:16:97:95:a1:ca:
81:54:7a:68:ae:30:ec:bc:d0:cb:22:1a:d1:f4:74:
31:53:4a:1d:d5:90:91:6a:bc:36:1a:c9:08:b4:8d:
ff:26:b3:40:3d:c6:b5:4d:86:23:dc:58:70:dc:3b:
de:af:cb:b6:c8:ee:d4:0f:f0:f2:84:02:2d:bf:30:
ce:fc:b7:90:9d:5a:fe:0a:d2:87:1b:18:f1:28:51:
fd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E3:87:C3:51:E9:4E:AF:CF:8F:BB:8A:83:EF:D2:D5:2E:DE:49:9F
X509v3 Authority Key Identifier:
keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c3:6b:e3:06:62:33:e1:d4:ac:66:b4:ca:c3:46:e9:ed:57:
66:19:1d:8a:9c:da:75:49:45:cb:f1:ef:1f:dd:b3:37:d9:10:
52:4a:02:fc:47:66:b4:f5:3a:21:c8:6c:bc:8d:4e:0d:5f:6d:
c7:eb:e6:c7:8a:ca:e3:3c:da:9a:35:52:fb:5c:fb:53:aa:61:
23:9d:d7:35:e3:4f:84:56:39:17:af:87:3c:e9:46:be:08:5b:
37:34:7c:33:b8:77:f2:a0:cc:bd:92:da:b9:59:42:3b:64:14:
1f:c5:4a:3c:22:83:d5:12:05:31:22:d5:4f:7e:4f:af:52:a7:
9d:2d:ff:a2:92:6e:72:95:ee:cf:bc:37:1f:ff:4f:45:c9:7c:
81:29:e2:9a:da:ff:89:2d:7f:46:87:83:4b:c9:e6:d2:27:ac:
a4:6f:c5:90:99:4e:c1:e8:75:64:28:ec:7a:99:82:9b:70:ed:
60:77:c1:90:87:4f:92:b7:20:ef:4c:d4:ee:40:a6:52:5a:36:
da:d4:c5:10:e5:fb:e2:e0:e1:3b:d9:bd:98:9a:92:74:9f:80:
bf:5f:0e:71:ce:82:d8:5f:de:bc:87:20:97:a3:21:78:cd:d9:
2e:de:b0:3f:da:aa:c5:6f:f7:20:30:7f:bd:c1:4e:db:66:27:
61:48:fa:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGEGe74vbsa/qZQIGUwW793MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NWIxYTRmMTk0MmU0YjFkODk0Y2JjOGNmMDkwNzNkMDI4
OTAxNzAwHhcNMjYxMDI4MjAwMDU0WhcNMjYxMDI5MjAwMDU0WjAzMTEwLwYDVQQD
EyhiOWUzODdjMzUxZTk0ZWFmY2Y4ZmJiOGE4M2VmZDJkNTJlZGU0OTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPq5NVqZcllSaYhenZbM4C/heUdm
R+gHbRBI49On5PVrZsc/hIJKtIAwoSZqm0aPdKKEpjxUxZLB8WjttgRgWEJYK3Fj
orN2XNpNLSNKcV2a0A/8GESQdl8IUs/VvqTm6zklN7jqfjBhpJ5qBFzKdvkHLuPY
kAOxZM1uYT5ZiRgV62WXbwzaghtLHJ7YEZjxQs95czc8asxmLPXwM/XW/8Op7lXQ
XKHr1Rmjmd0YFpeVocqBVHporjDsvNDLIhrR9HQxU0od1ZCRarw2GskItI3/JrNA
Pca1TYYj3Fhw3Dver8u2yO7UD/DyhAItvzDO/LeQnVr+CtKHGxjxKFH9awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnjh8NR6U6vz4+7ioPv0tUu3kmfMB8GA1UdIwQY
MBaAFOVbGk8ZQuSx2JTLyM8JBz0CiQFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVZzYVR4bEM1TEhZbE12SXp3a0hQUUtKQVhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jNjZhMWYtNzcwNy00ZjhkLWEyNzQt
NGRmNjVhYmE2YTYyLzEvNVZzYVR4bEM1TEhZbE12SXp3a0hQUUtKQVhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9jNjZhMWYtNzcwNy00ZjhkLWEyNzQtNGRmNjVhYmE2YTYy
LzEvNVZzYVR4bEM1TEhZbE12SXp3a0hQUUtKQVhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMNr4wZi
M+HUrGa0ysNG6e1XZhkdipzadUlFy/HvH92zN9kQUkoC/EdmtPU6IchsvI1ODV9t
x+vmx4rK4zzamjVS+1z7U6phI53XNeNPhFY5F6+HPOlGvghbNzR8M7h38qDMvZLa
uVlCO2QUH8VKPCKD1RIFMSLVT35Pr1KnnS3/opJucpXuz7w3H/9PRcl8gSnimtr/
iS1/RoeDS8nm0iespG/FkJlOweh1ZCjsepmCm3DtYHfBkIdPkrcg70zU7kCmUlo2
2tTFEOX74uDhO9m9mJqSdJ+Av18Occ6C2F/evIcgl6MheM3ZLt6wP9qqxW/3IDB/
vcFO22YnYUj6yA==
-----END CERTIFICATE-----
Generated at Thu Oct 29 01:09:25 2026 by rpki-client