Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
File: peC5TwtOTIRu-c8nzciBEIdrHPM.mft (raw, json)
Hash identifier: QotVqNp0HUT5hm2CKa20+i8Xn4Dmnp1cLhaCIIDsQaM=
Subject key identifier: A0:BA:62:89:BB:1D:48:BC:34:75:CD:05:B6:D6:E6:A7:88:45:2B:D9
Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
Certificate issuer: /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Certificate serial: 019DCFE3AE935E75C99639F77BB339AD71B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
Manifest number: 18E0
Signing time: Mon 27 Apr 2026 17:01:38 +0000
Manifest this update: Mon 27 Apr 2026 17:01:38 +0000
Manifest next update: Tue 28 Apr 2026 17:01:38 +0000
Files and hashes: 1: pbzEOsOOyDKksxCPhBhG-xag72U.roa (hash: iF4hi9XQEfO4uOx6Je7Sgz4Viq0kEg/cT2o7PAWCJTI=)
2: peC5TwtOTIRu-c8nzciBEIdrHPM.crl (hash: Eb2ZUQSVl3MH79J4GI8KreqIofZhnKCs99+g+eH2hqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:ae:93:5e:75:c9:96:39:f7:7b:b3:39:ad:71:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Validity
Not Before: Apr 27 17:01:38 2026 GMT
Not After : Apr 28 17:01:38 2026 GMT
Subject: CN=a0ba6289bb1d48bc3475cd05b6d6e6a788452bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e0:5d:04:94:23:da:6f:45:ff:9a:d4:d1:0b:
f6:a1:81:71:48:d7:58:eb:97:35:85:30:e4:a2:5b:
1f:0f:b4:27:bd:e1:a0:4d:2d:4d:27:61:58:e4:c8:
f3:56:4b:8f:d0:ca:6b:b6:a8:8d:2e:6b:82:4e:3d:
65:27:a9:cf:4f:77:2e:b0:d8:aa:a8:d0:6d:37:fa:
e7:d0:4f:f7:2a:24:be:be:be:9a:7d:91:0c:d7:90:
5f:3d:6a:a7:7d:f6:7e:46:74:d4:73:5a:07:cc:e8:
2f:7a:52:23:11:64:6f:98:64:03:7c:2b:43:36:f2:
36:b7:ae:df:51:be:a9:f5:9d:3b:8c:7d:e2:46:3d:
14:70:42:7c:e7:77:44:b4:4c:b6:d1:d1:3e:92:e2:
3e:f0:b4:aa:22:f9:70:47:5e:8d:8b:bb:7e:bb:6a:
02:ce:fc:23:47:d3:43:fa:ba:5b:03:5c:ed:c4:27:
c0:c1:dc:2f:72:5e:86:87:c0:6e:3a:cd:91:e4:e2:
ed:12:cc:a2:62:d1:42:88:3b:bf:de:56:79:7c:a7:
27:89:f4:b9:e2:85:21:a7:73:77:2f:e9:47:1b:57:
96:25:65:fa:cf:65:ca:f3:d4:eb:fe:97:7c:7b:8a:
5e:ad:3e:d0:2a:2c:ba:8d:b6:ad:18:57:85:bd:fc:
c4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BA:62:89:BB:1D:48:BC:34:75:CD:05:B6:D6:E6:A7:88:45:2B:D9
X509v3 Authority Key Identifier:
keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3f:58:84:b7:36:e0:36:ab:e0:2a:f5:ea:70:1d:6f:47:19:
db:d5:57:90:9b:16:21:3c:b7:48:26:61:b0:e8:83:97:83:ce:
28:00:b8:83:b3:72:41:f1:4e:6a:b6:46:18:a4:3b:16:0e:e2:
79:ff:e9:27:fe:86:6b:e5:39:f5:13:6c:87:fc:d9:a4:1d:5f:
5d:97:a6:0e:a9:3b:17:1c:44:7d:5e:7f:7d:61:3e:50:ff:0b:
62:ed:3b:c5:75:2a:62:0d:1a:7a:64:3c:f5:b7:42:ba:66:d0:
c3:bd:b7:bf:86:16:42:87:4a:5a:68:e4:30:58:87:e8:30:a0:
33:a7:08:4d:33:da:24:0c:a1:9a:e9:b9:66:c3:50:db:bf:59:
d6:df:54:03:3b:79:16:29:a4:69:a2:01:84:63:4c:a8:d1:aa:
3e:72:de:a4:47:d7:e0:54:d3:f0:ff:8f:d7:35:54:41:02:e3:
81:9e:ba:0a:59:cc:18:ba:19:15:0e:b3:ab:0e:33:ca:3b:71:
b0:75:cc:5b:70:bb:a5:86:9f:1b:5c:77:81:b7:0f:f9:db:ff:
22:c2:ff:24:e1:26:bf:0a:a3:c8:99:f8:67:34:7d:61:b3:46:
05:67:a6:8d:aa:fc:ea:b5:0f:12:4d:34:5e:70:aa:40:69:a9:
4f:2a:66:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:27 2026 by rpki-client