Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
File: 5acKgaoDCKPLv2hXixgPNWtu2Kw.mft (raw, json)
Hash identifier: 7FHy4xcOpYmTTEQcXkVdpZfAJjpM3y0Z6U6IREf1PoU=
Subject key identifier: 0C:C7:10:D6:81:EB:F8:7F:CE:4D:4F:5A:E9:DD:E7:F2:A9:31:76:58
Authority key identifier: E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
Certificate issuer: /CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Certificate serial: 01A0CAB47019D7887D040FFBD275ED7D4ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
Manifest number: 0329
Signing time: Tue 22 Sep 2026 20:00:17 +0000
Manifest this update: Tue 22 Sep 2026 20:00:17 +0000
Manifest next update: Wed 23 Sep 2026 20:00:17 +0000
Files and hashes: 1: 5acKgaoDCKPLv2hXixgPNWtu2Kw.crl (hash: zu1/wYPcIiUHNeEziLKUrs/S2fIzUzInPoQOtZ9WR68=)
2: lKcxCQ3OfOPdVqWrI13qDrj054k.roa (hash: xLZ+rUY4dQ+17ft3i45+DuMCNmea8sukddDn1Ts3WII=)
3: wVow-AxbRtNSLbo8GRm_FtoRrvM.roa (hash: nceJKLP2a7knL1aJY0JZbTmlkyLD960ynWY7OWHE27E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:70:19:d7:88:7d:04:0f:fb:d2:75:ed:7d:4a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Validity
Not Before: Sep 22 20:00:17 2026 GMT
Not After : Sep 23 20:00:17 2026 GMT
Subject: CN=0cc710d681ebf87fce4d4f5ae9dde7f2a9317658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bc:7e:b2:b9:13:e0:4b:4f:8c:9f:8b:d1:60:
d9:b2:27:6d:82:b6:60:2b:a8:64:92:8d:d8:ad:ae:
24:b7:6e:aa:36:bf:dd:b0:db:01:89:9a:09:00:5a:
b3:cf:50:05:ae:5a:d1:7c:1a:ff:2d:d4:6c:ed:32:
3a:2d:83:c9:db:fa:a6:9d:88:94:4c:aa:b1:2c:38:
43:75:7b:3e:de:3a:50:a3:bf:14:79:ef:92:2c:d3:
b3:da:09:c6:59:22:15:69:ff:75:35:06:c4:b2:66:
c3:dd:d7:ad:5e:3f:cd:6a:e7:94:e7:ab:1f:ae:74:
0c:72:84:fb:de:96:c0:61:c2:e9:d1:41:72:2f:bc:
c8:1b:0e:f8:5c:cc:56:a3:1b:59:e5:bd:82:31:ba:
27:ea:78:17:24:c7:6e:1e:80:8d:bf:9d:86:fb:14:
a5:5e:b3:84:2b:fa:4f:e5:73:35:71:23:b1:4f:96:
c7:ae:fc:e5:94:59:02:da:2d:9a:bb:4c:4c:d3:16:
e7:50:6a:56:10:8a:c3:96:89:45:01:d3:c9:90:2b:
2d:57:80:25:c9:c8:a8:77:b2:65:2e:c4:11:71:3d:
7a:27:0c:00:bb:25:5f:d4:8a:69:7c:3e:56:db:db:
e0:cd:61:15:65:5e:d2:01:03:d6:5c:3a:f5:89:a6:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C7:10:D6:81:EB:F8:7F:CE:4D:4F:5A:E9:DD:E7:F2:A9:31:76:58
X509v3 Authority Key Identifier:
keyid:E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c2:93:89:0c:43:59:ef:b1:86:d1:df:3d:50:96:9d:d4:f4:
a2:4c:95:a1:b3:af:53:20:77:04:7c:20:2f:c3:70:3d:95:77:
13:d5:2f:ad:19:53:1c:fb:db:be:aa:17:6f:3c:a1:87:15:7a:
2d:dd:d7:bd:db:94:94:e1:82:f0:94:96:1d:3a:fc:a5:4b:d4:
b0:8a:6e:b5:7a:bf:e7:b5:e6:08:c7:45:07:42:eb:d6:d3:d8:
af:26:50:e4:89:1c:dc:53:37:33:c2:31:3c:6b:e7:6c:6c:e0:
46:8f:8f:be:de:8c:8b:83:cf:8d:14:34:03:86:d2:6e:f9:22:
65:58:ee:87:06:49:e1:79:ec:01:58:6b:b6:f4:49:45:84:0f:
7f:7f:05:d2:2a:82:9c:9f:21:3b:e7:4b:39:ab:54:c7:f1:48:
ee:a0:b7:be:54:17:88:16:72:47:7a:30:52:c9:a7:ae:da:a9:
31:19:11:d8:e6:19:d2:31:7a:02:30:82:73:c9:76:da:c0:8c:
5f:f6:91:ee:ad:33:40:2a:b7:36:ea:dc:f0:dc:8c:e7:ff:8f:
67:7d:e5:28:fa:b1:44:37:00:0e:0b:51:9a:1a:a6:8e:46:87:
46:b0:40:eb:15:2a:6a:0b:e5:cd:b7:85:2a:e6:60:58:92:84:
be:c5:56:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:48:41 2026 by rpki-client