Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
File: 5acKgaoDCKPLv2hXixgPNWtu2Kw.mft (raw, json)
Hash identifier: v/NRPenlAj+H8AY48OYM2+APxnlUDUps3cWAWvf1nOs=
Subject key identifier: 83:7D:3B:33:45:FC:82:2A:45:88:32:E0:31:8B:5F:A8:FC:19:92:DF
Authority key identifier: E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
Certificate issuer: /CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Certificate serial: 019E1D224E09A8CDC4538239F44E21159667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
Manifest number: 01C6
Signing time: Tue 12 May 2026 17:00:47 +0000
Manifest this update: Tue 12 May 2026 17:00:47 +0000
Manifest next update: Wed 13 May 2026 17:00:47 +0000
Files and hashes: 1: 5acKgaoDCKPLv2hXixgPNWtu2Kw.crl (hash: 4q3v1Cwz0xVsDOwcJ4CqyJ7xGlCBxpygTfDOKdiRyCM=)
2: lKcxCQ3OfOPdVqWrI13qDrj054k.roa (hash: xLZ+rUY4dQ+17ft3i45+DuMCNmea8sukddDn1Ts3WII=)
3: wVow-AxbRtNSLbo8GRm_FtoRrvM.roa (hash: nceJKLP2a7knL1aJY0JZbTmlkyLD960ynWY7OWHE27E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:4e:09:a8:cd:c4:53:82:39:f4:4e:21:15:96:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Validity
Not Before: May 12 17:00:47 2026 GMT
Not After : May 13 17:00:47 2026 GMT
Subject: CN=837d3b3345fc822a458832e0318b5fa8fc1992df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:4f:58:bf:76:57:1a:83:6e:86:b8:50:21:
de:bb:d8:cd:31:94:41:71:f3:5a:20:48:02:d7:b0:
d8:29:9d:a0:d5:22:63:c1:5e:9b:b4:d3:a4:cf:6e:
ab:94:74:89:f8:c7:98:d7:16:31:26:55:79:55:3c:
9d:0e:0e:2d:e3:60:dd:7a:1d:7c:61:e2:d7:0b:7f:
60:de:0d:aa:dc:35:4f:db:e3:16:75:c7:1b:14:4f:
73:9b:40:86:65:57:99:9b:bf:31:a3:4c:6e:3a:b5:
b2:cc:3f:2c:d1:ac:ad:00:85:55:f0:fd:af:da:87:
0e:e6:6c:79:bc:d5:72:c9:6c:6d:8f:e9:fc:41:e7:
83:4d:71:63:24:44:8e:5b:0d:56:ae:51:cf:94:e1:
6c:08:6e:ca:e9:ce:05:a8:8a:02:dd:01:14:7e:51:
bc:25:b5:c9:36:00:d0:b1:34:be:fa:f8:f8:05:87:
71:9b:b1:36:3c:bb:7d:d1:a9:67:45:66:70:32:c5:
65:59:fe:32:79:28:52:b4:24:ed:8e:2e:64:68:d1:
89:3e:f4:04:ac:5f:cc:e5:c6:43:9b:08:56:07:54:
5b:e3:7a:cd:3b:4d:f3:02:8c:b1:63:22:2f:34:bf:
7e:d7:f3:4b:e5:ff:b8:5e:49:c4:3f:73:36:de:aa:
38:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7D:3B:33:45:FC:82:2A:45:88:32:E0:31:8B:5F:A8:FC:19:92:DF
X509v3 Authority Key Identifier:
keyid:E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:0f:bb:f0:dd:bd:57:28:7a:4a:b5:94:bb:5f:39:db:13:21:
7a:b9:d3:b5:f3:fa:b8:07:06:02:be:82:84:fb:61:c0:c4:09:
40:76:eb:40:ff:d2:4f:f2:1f:a3:e5:1f:7c:f3:b7:03:4a:7b:
3c:8a:e1:2a:f9:cc:69:b5:ba:c0:cb:cd:09:a9:b6:81:64:85:
9b:a2:bd:30:ed:06:f4:e2:cd:6c:5c:44:51:7b:ea:c2:5e:1b:
48:85:e9:f8:34:ae:74:4d:67:1e:93:33:6e:de:2e:51:61:ba:
de:3a:15:98:c1:23:4a:93:18:9a:5d:b5:7f:99:80:19:12:66:
e4:1d:03:fe:67:f2:06:66:e9:b7:08:f6:29:aa:6f:11:be:65:
3e:c3:bd:3a:fe:81:97:d5:1a:3e:a0:c5:76:03:22:3f:17:a1:
fe:44:d7:32:9c:ba:52:cf:b6:72:e2:23:23:59:15:b1:26:14:
72:dc:cf:2b:aa:e2:29:23:40:9a:a2:d0:e6:9d:0b:65:ac:24:
3f:f1:b2:ba:c4:72:aa:2a:a7:91:6d:d6:35:42:c3:0a:bd:45:
1e:c3:4c:c2:0e:fe:54:45:ed:da:03:e4:f4:c0:0b:e4:c6:c0:
49:d2:22:a9:7d:1b:48:b8:d8:69:4a:e0:9f:48:10:89:89:5c:
db:48:8a:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIk4JqM3EU4I59E4hFZZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTcwYTgxYWEwMzA4YTNjYmJmNjg1NzhiMTgwZjM1NmI2
ZWQ4YWMwHhcNMjYwNTEyMTcwMDQ3WhcNMjYwNTEzMTcwMDQ3WjAzMTEwLwYDVQQD
Eyg4MzdkM2IzMzQ1ZmM4MjJhNDU4ODMyZTAzMThiNWZhOGZjMTk5MmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE5PWL92VxqDboa4UCHeu9jNMZRB
cfNaIEgC17DYKZ2g1SJjwV6btNOkz26rlHSJ+MeY1xYxJlV5VTydDg4t42Ddeh18
YeLXC39g3g2q3DVP2+MWdccbFE9zm0CGZVeZm78xo0xuOrWyzD8s0aytAIVV8P2v
2ocO5mx5vNVyyWxtj+n8QeeDTXFjJESOWw1WrlHPlOFsCG7K6c4FqIoC3QEUflG8
JbXJNgDQsTS++vj4BYdxm7E2PLt90alnRWZwMsVlWf4yeShStCTtji5kaNGJPvQE
rF/M5cZDmwhWB1Rb43rNO03zAoyxYyIvNL9+1/NL5f+4XknEP3M23qo4twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIN9OzNF/IIqRYgy4DGLX6j8GZLfMB8GA1UdIwQY
MBaAFOWnCoGqAwijy79oV4sYDzVrbtisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFjS2dhb0RDS1BMdjJoWGl4Z1BOV3R1Mkt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zMWQxZjAtOTRlNS00ZmQ0LTg3ZjIt
ZWU5NmUyOGVhNmU5LzEvNWFjS2dhb0RDS1BMdjJoWGl4Z1BOV3R1Mkt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8zMWQxZjAtOTRlNS00ZmQ0LTg3ZjItZWU5NmUyOGVhNmU5
LzEvNWFjS2dhb0RDS1BMdjJoWGl4Z1BOV3R1Mkt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Q+78N29
Vyh6SrWUu1852xMhernTtfP6uAcGAr6ChPthwMQJQHbrQP/ST/Ifo+UffPO3A0p7
PIrhKvnMabW6wMvNCam2gWSFm6K9MO0G9OLNbFxEUXvqwl4bSIXp+DSudE1nHpMz
bt4uUWG63joVmMEjSpMYml21f5mAGRJm5B0D/mfyBmbptwj2KapvEb5lPsO9Ov6B
l9UaPqDFdgMiPxeh/kTXMpy6Us+2cuIjI1kVsSYUctzPK6riKSNAmqLQ5p0LZawk
P/GyusRyqiqnkW3WNULDCr1FHsNMwg7+VEXt2gPk9MAL5MbASdIiqX0bSLjYaUrg
n0gQiYlc20iKrg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:58:03 2026 by rpki-client