Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
File: 5acKgaoDCKPLv2hXixgPNWtu2Kw.mft (raw, json)
Hash identifier: 25GjK+HozhO+uhKZaUjMV/jTS/wGBSt49bNzDJsTEjU=
Subject key identifier: 05:01:FD:2F:4C:FE:7B:1E:95:F4:1D:86:3B:E3:DE:FE:A7:70:D9:59
Authority key identifier: E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
Certificate issuer: /CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Certificate serial: 019CAE35801E93B1865FEB7A54AAA389D48A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
Manifest number: 0108
Signing time: Mon 02 Mar 2026 11:01:07 +0000
Manifest this update: Mon 02 Mar 2026 11:01:07 +0000
Manifest next update: Tue 03 Mar 2026 11:01:07 +0000
Files and hashes: 1: 5acKgaoDCKPLv2hXixgPNWtu2Kw.crl (hash: WkfQwMadTp7+PldbQwPyMRao5Z+SjXk0zSKIu5Ukl2w=)
2: lKcxCQ3OfOPdVqWrI13qDrj054k.roa (hash: xLZ+rUY4dQ+17ft3i45+DuMCNmea8sukddDn1Ts3WII=)
3: wVow-AxbRtNSLbo8GRm_FtoRrvM.roa (hash: nceJKLP2a7knL1aJY0JZbTmlkyLD960ynWY7OWHE27E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:80:1e:93:b1:86:5f:eb:7a:54:aa:a3:89:d4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Validity
Not Before: Mar 2 11:01:07 2026 GMT
Not After : Mar 3 11:01:07 2026 GMT
Subject: CN=0501fd2f4cfe7b1e95f41d863be3defea770d959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:4f:73:7f:f7:44:5a:03:72:50:bf:ba:f7:
af:8c:01:20:e0:b8:af:7b:ff:2f:e6:83:f4:d5:0f:
d9:63:87:21:ba:1c:a9:1a:b6:fd:e9:12:ef:41:49:
ed:39:bc:13:97:65:bb:c9:b1:c1:ed:ac:b5:09:03:
d8:f9:e8:9e:f1:c5:61:fa:73:84:5b:a4:9f:16:cf:
f3:5a:00:7c:47:de:26:cf:e1:f8:94:de:82:f1:7b:
47:18:b9:9a:8b:46:02:10:4c:05:26:79:c1:4a:e3:
84:75:bc:7f:6a:67:d4:cb:de:3d:23:d5:a9:6e:4f:
3c:75:56:81:e4:46:8f:7d:56:44:97:a6:c2:5e:c8:
ef:25:0b:ef:bb:a0:52:a2:11:c3:33:d6:41:79:95:
c4:27:78:95:45:e7:e3:d6:e3:3d:1d:d6:b7:38:a4:
9b:5f:3c:6f:f9:7e:a2:80:88:21:ad:e5:33:b8:dc:
18:31:d8:41:07:4e:ac:4c:6c:1f:e1:4b:d5:7b:5a:
98:15:95:aa:2c:5f:52:96:6d:09:36:38:5f:34:71:
ce:54:06:c9:93:58:33:cf:46:09:26:f3:ce:85:52:
9b:e7:26:e1:e7:c3:9d:de:6c:a0:31:3d:64:8c:da:
37:2b:73:68:10:2e:7f:79:e2:75:20:f3:f9:6b:d0:
9e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:01:FD:2F:4C:FE:7B:1E:95:F4:1D:86:3B:E3:DE:FE:A7:70:D9:59
X509v3 Authority Key Identifier:
keyid:E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:30:bd:b9:8e:df:73:7d:0d:64:16:9a:07:f5:d7:c4:86:9e:
4b:a9:ae:c1:0a:51:76:c3:d2:18:8f:6d:5b:b3:f3:b9:96:24:
82:1d:0e:19:29:3e:39:28:38:52:51:39:ce:b5:2d:e4:df:e0:
2b:92:bd:7a:14:cf:5d:5e:76:a9:69:32:84:61:cf:05:7b:69:
47:10:b9:ae:fe:28:ef:1f:fb:75:4f:86:3d:1b:92:53:06:53:
56:90:bd:aa:fc:bd:a0:b8:65:18:e5:c0:9d:0e:c0:55:f5:c9:
d7:68:35:2d:c5:85:97:e3:b8:ac:5f:09:31:10:8d:ed:40:f0:
ab:7b:01:6f:7f:9b:83:7a:a3:48:88:3a:91:aa:92:8a:1d:da:
f9:f2:0c:e4:3f:17:8e:e3:fc:1d:d3:dd:51:1f:23:e8:7d:9f:
72:5d:9c:e2:3f:69:c8:c1:62:72:be:bc:ff:f4:b0:a4:07:a9:
66:ff:08:fe:75:ae:8f:14:b7:13:73:40:e0:30:24:26:7e:26:
22:15:f1:71:dd:cc:da:51:76:d7:a8:9b:f1:7f:a9:b8:02:8e:
b8:c3:f8:6e:40:1a:1b:5c:e3:bb:73:4b:ba:ce:45:a8:79:c4:
1d:d7:19:42:f0:bd:e5:0e:b5:2f:fa:96:4a:61:ad:32:e4:e0:
43:e6:54:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNYAek7GGX+t6VKqjidSKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTcwYTgxYWEwMzA4YTNjYmJmNjg1NzhiMTgwZjM1NmI2
ZWQ4YWMwHhcNMjYwMzAyMTEwMTA3WhcNMjYwMzAzMTEwMTA3WjAzMTEwLwYDVQQD
EygwNTAxZmQyZjRjZmU3YjFlOTVmNDFkODYzYmUzZGVmZWE3NzBkOTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0pPc3/3RFoDclC/uvevjAEg4Liv
e/8v5oP01Q/ZY4chuhypGrb96RLvQUntObwTl2W7ybHB7ay1CQPY+eie8cVh+nOE
W6SfFs/zWgB8R94mz+H4lN6C8XtHGLmai0YCEEwFJnnBSuOEdbx/amfUy949I9Wp
bk88dVaB5EaPfVZEl6bCXsjvJQvvu6BSohHDM9ZBeZXEJ3iVRefj1uM9Hda3OKSb
Xzxv+X6igIghreUzuNwYMdhBB06sTGwf4UvVe1qYFZWqLF9Slm0JNjhfNHHOVAbJ
k1gzz0YJJvPOhVKb5ybh58Od3mygMT1kjNo3K3NoEC5/eeJ1IPP5a9CeWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUB/S9M/nselfQdhjvj3v6ncNlZMB8GA1UdIwQY
MBaAFOWnCoGqAwijy79oV4sYDzVrbtisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFjS2dhb0RDS1BMdjJoWGl4Z1BOV3R1Mkt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zMWQxZjAtOTRlNS00ZmQ0LTg3ZjIt
ZWU5NmUyOGVhNmU5LzEvNWFjS2dhb0RDS1BMdjJoWGl4Z1BOV3R1Mkt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8zMWQxZjAtOTRlNS00ZmQ0LTg3ZjItZWU5NmUyOGVhNmU5
LzEvNWFjS2dhb0RDS1BMdjJoWGl4Z1BOV3R1Mkt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjC9uY7f
c30NZBaaB/XXxIaeS6muwQpRdsPSGI9tW7PzuZYkgh0OGSk+OSg4UlE5zrUt5N/g
K5K9ehTPXV52qWkyhGHPBXtpRxC5rv4o7x/7dU+GPRuSUwZTVpC9qvy9oLhlGOXA
nQ7AVfXJ12g1LcWFl+O4rF8JMRCN7UDwq3sBb3+bg3qjSIg6kaqSih3a+fIM5D8X
juP8HdPdUR8j6H2fcl2c4j9pyMFicr68//SwpAepZv8I/nWujxS3E3NA4DAkJn4m
IhXxcd3M2lF216ib8X+puAKOuMP4bkAaG1zju3NLus5FqHnEHdcZQvC95Q61L/qW
SmGtMuTgQ+ZUKw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:14:56 2026 by rpki-client