Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
File: peC5TwtOTIRu-c8nzciBEIdrHPM.mft (raw, json)
Hash identifier: ACWdaifuNu3nhQiHXEaKAtwR5JHbdUES/r78JM7tofw=
Subject key identifier: E4:23:F8:2F:1C:6B:E1:99:A0:FD:0F:C4:95:E6:56:11:7E:50:B3:EA
Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
Certificate issuer: /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Certificate serial: 01A1822BB8F0AA479DFBBCA0C0ED11A09388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
Manifest number: 1ACA
Signing time: Wed 28 Oct 2026 11:01:05 +0000
Manifest this update: Wed 28 Oct 2026 11:01:05 +0000
Manifest next update: Thu 29 Oct 2026 11:01:05 +0000
Files and hashes: 1: pbzEOsOOyDKksxCPhBhG-xag72U.roa (hash: iF4hi9XQEfO4uOx6Je7Sgz4Viq0kEg/cT2o7PAWCJTI=)
2: peC5TwtOTIRu-c8nzciBEIdrHPM.crl (hash: ZStPSjwzxkRLURTogL8sghThRFoEBxl1vAUm+KzQ15w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:b8:f0:aa:47:9d:fb:bc:a0:c0:ed:11:a0:93:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Validity
Not Before: Oct 28 11:01:05 2026 GMT
Not After : Oct 29 11:01:05 2026 GMT
Subject: CN=e423f82f1c6be199a0fd0fc495e656117e50b3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:32:7a:57:ac:c1:ea:3b:78:69:8d:57:df:
db:79:16:70:4b:e2:a9:70:17:eb:6d:47:5f:5e:2e:
ec:f6:08:69:81:4d:c8:e9:5d:1e:16:37:f1:b5:0f:
16:ae:1e:56:f1:af:36:fe:ff:2a:83:23:13:cb:0f:
cc:5d:3e:36:16:b8:30:1c:68:39:1c:73:19:4b:8a:
52:ff:33:23:49:d2:28:31:18:6d:1a:22:f9:ac:0b:
60:05:49:a2:a7:df:b3:37:8d:34:b4:1a:1d:58:d4:
fc:16:29:b8:b9:c2:8a:b7:5f:4e:98:e0:52:d4:97:
e3:fa:e3:6a:f6:7e:bb:80:e4:7c:31:6e:96:90:c2:
27:13:86:98:6f:dd:ff:a5:00:ad:5b:19:56:dd:75:
52:5d:30:7c:a6:3e:4f:fc:75:bd:50:7a:e0:2d:8f:
67:0d:9c:b3:88:58:c8:98:b3:7b:75:fb:d5:49:50:
7f:7e:2f:b8:ce:e4:60:2e:be:8c:fa:59:82:d3:a3:
7a:45:db:cb:de:de:18:be:f3:55:3f:12:7d:c9:e7:
29:1b:9d:d0:ab:d2:c3:e0:87:95:b0:8b:4a:7f:e2:
cf:e1:14:f3:90:5d:51:db:3f:a9:25:77:b7:d8:bc:
83:1a:2f:97:f0:52:14:d2:7b:ea:29:86:c1:16:62:
3c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:23:F8:2F:1C:6B:E1:99:A0:FD:0F:C4:95:E6:56:11:7E:50:B3:EA
X509v3 Authority Key Identifier:
keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:95:54:1f:a6:b8:ef:56:68:74:42:95:3e:96:09:b2:9e:10:
f1:f0:6f:0d:25:1b:f8:df:61:ad:f3:12:48:6b:32:24:fa:60:
4b:b4:fc:8e:7d:8a:08:4a:90:ca:aa:37:a8:0e:67:3b:29:54:
f2:bc:a7:c3:93:7e:4e:c1:e6:04:e8:1b:20:2d:50:46:82:4a:
47:7b:80:7e:15:b9:f8:da:58:08:e8:13:f2:c5:a3:81:cd:2a:
46:ba:d9:23:55:f9:8c:d6:3f:45:62:79:8c:a2:e9:28:c1:e0:
bb:6a:08:ba:f1:b4:74:ef:cb:5c:bb:fc:30:d0:8a:a3:ae:2d:
4d:2f:9e:74:f9:23:43:21:8f:7b:54:73:cd:49:63:6e:64:8a:
80:a2:0e:9c:bc:18:32:70:be:70:a0:8a:57:4a:53:9e:ad:13:
31:bb:51:ab:ab:44:8a:a9:a8:fa:30:09:4d:0a:d8:b9:46:83:
67:2e:34:44:ee:02:c0:92:ca:ac:ea:e2:56:42:f2:83:f1:11:
97:09:4e:62:76:46:41:76:2c:a3:fe:b6:58:94:d6:ba:1c:c2:
df:2b:8e:d1:9a:4e:3b:2a:82:88:c5:b3:2e:5f:0c:b0:66:01:
e7:88:75:02:95:9c:1f:e4:97:73:37:5f:45:80:cc:78:bb:69:
69:bd:8d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:34:13 2026 by rpki-client