Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
File: 5acKgaoDCKPLv2hXixgPNWtu2Kw.mft (raw, json)
Hash identifier: vrH6/1p1hKGBc+rebR6qZ7joMbz+ZGsdk3OdO47KTgk=
Subject key identifier: DF:5E:EE:68:5D:A6:5D:C0:72:7D:47:77:21:AA:E1:D6:20:45:05:54
Authority key identifier: E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
Certificate issuer: /CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Certificate serial: 019D29CE230CA1BF4F4430D79D3C40ED0787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
Manifest number: 0148
Signing time: Thu 26 Mar 2026 11:01:08 +0000
Manifest this update: Thu 26 Mar 2026 11:01:08 +0000
Manifest next update: Fri 27 Mar 2026 11:01:08 +0000
Files and hashes: 1: 5acKgaoDCKPLv2hXixgPNWtu2Kw.crl (hash: fHii4RWqC18T51Sr4tezDsyxda4R7/b6JM50GP7vZMk=)
2: lKcxCQ3OfOPdVqWrI13qDrj054k.roa (hash: xLZ+rUY4dQ+17ft3i45+DuMCNmea8sukddDn1Ts3WII=)
3: wVow-AxbRtNSLbo8GRm_FtoRrvM.roa (hash: nceJKLP2a7knL1aJY0JZbTmlkyLD960ynWY7OWHE27E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:23:0c:a1:bf:4f:44:30:d7:9d:3c:40:ed:07:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Validity
Not Before: Mar 26 11:01:08 2026 GMT
Not After : Mar 27 11:01:08 2026 GMT
Subject: CN=df5eee685da65dc0727d477721aae1d620450554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:78:30:87:33:27:9a:2d:ad:29:58:4c:92:
dc:18:1d:17:8d:23:53:62:83:5a:fa:d7:ae:0d:bd:
40:93:a1:17:e1:5e:32:ee:8d:84:5f:78:a0:0f:06:
a6:6e:2a:e6:2b:9f:a2:9f:27:a3:e6:33:64:29:b4:
88:74:fd:e9:19:53:c3:b6:54:c7:48:c3:5c:30:9d:
82:2e:9c:d4:c6:97:24:0f:f4:d1:12:5d:67:d9:a7:
58:8e:db:cc:28:d3:75:25:87:a7:3c:b1:e5:d5:b7:
64:78:d9:fa:de:9d:9b:66:5b:4b:ba:db:a7:a1:64:
00:a4:ab:a4:f3:f4:5f:63:78:09:1d:49:20:fb:dd:
3c:fd:49:43:e3:65:e5:85:19:f1:d9:72:15:2e:85:
79:52:71:7d:80:17:2d:bd:c7:aa:f9:7f:26:81:df:
a8:80:38:c0:b7:8c:ec:42:6b:df:03:8f:98:5c:a8:
fe:a0:50:e7:cd:9c:36:b0:76:0d:e2:cb:f0:67:15:
bf:2d:f0:43:75:15:30:ff:9f:1d:02:d8:bf:4c:8d:
fc:f2:d5:9c:31:21:1d:c7:cc:81:b8:15:3c:4a:f1:
a5:ea:7f:5f:fe:7f:66:68:1a:44:0a:74:35:f6:a7:
78:a7:42:4f:0a:1c:95:37:db:fa:5f:39:af:f9:9d:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5E:EE:68:5D:A6:5D:C0:72:7D:47:77:21:AA:E1:D6:20:45:05:54
X509v3 Authority Key Identifier:
keyid:E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e2:cd:7d:8f:cc:a9:55:bb:9b:9d:02:f1:72:cf:29:94:c5:
d5:86:d1:9c:05:aa:fe:3f:10:23:1d:93:c2:5e:82:94:f5:45:
25:c7:d5:71:47:40:aa:82:46:70:d8:15:62:cc:5a:19:c1:00:
e0:3e:d5:a7:a1:00:30:73:ab:2a:05:07:98:74:62:2c:f5:5c:
eb:26:89:d6:08:d0:53:ed:6f:97:84:a4:7e:31:7a:ed:21:e1:
18:04:25:b2:2b:a7:3a:52:97:3c:3f:50:4d:19:05:ec:b5:97:
c1:d9:ce:8a:dc:6d:8c:1a:68:f8:7f:e5:e6:d9:26:35:8d:12:
ba:38:ba:21:f7:52:30:62:a1:a0:67:08:40:df:ac:18:f2:c4:
b9:2c:d5:97:9f:43:20:fd:ed:26:e7:d5:25:44:2d:f6:1a:99:
d4:4d:03:ed:e4:29:d6:16:37:1c:74:bc:d0:ec:e8:c1:80:77:
7e:63:84:e8:a4:66:a2:b1:0b:b3:e7:71:18:ab:b5:59:63:2b:
ad:c8:fa:af:f4:ec:ac:2c:64:ce:1a:1a:dc:4f:21:e7:64:6a:
48:61:1b:ac:3c:bf:c2:de:c7:f3:00:b2:99:66:f5:8a:68:33:
56:73:8e:1c:51:1f:25:1b:8e:1f:f8:c1:11:75:0c:76:0b:94:
d5:77:ff:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:04 2026 by rpki-client