Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
File: 5acKgaoDCKPLv2hXixgPNWtu2Kw.mft (raw, json)
Hash identifier: sfiyijseRKTn27NyyB7m+lcmo11Ma8OARMhO55l6Pms=
Subject key identifier: F9:BE:B6:93:A5:4F:F6:89:AB:85:7B:9E:67:20:54:87:E9:04:C7:9F
Authority key identifier: E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
Certificate issuer: /CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Certificate serial: 01A0CCA2D4B2EBB0207F4A464BD902783659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
Manifest number: 032A
Signing time: Wed 23 Sep 2026 05:00:18 +0000
Manifest this update: Wed 23 Sep 2026 05:00:18 +0000
Manifest next update: Thu 24 Sep 2026 05:00:18 +0000
Files and hashes: 1: 5acKgaoDCKPLv2hXixgPNWtu2Kw.crl (hash: qV2Kh4Tm7NiaudCCtd9E6kffkGLIY9Jl4orPwCdcOSs=)
2: lKcxCQ3OfOPdVqWrI13qDrj054k.roa (hash: xLZ+rUY4dQ+17ft3i45+DuMCNmea8sukddDn1Ts3WII=)
3: wVow-AxbRtNSLbo8GRm_FtoRrvM.roa (hash: nceJKLP2a7knL1aJY0JZbTmlkyLD960ynWY7OWHE27E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a2:d4:b2:eb:b0:20:7f:4a:46:4b:d9:02:78:36:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Validity
Not Before: Sep 23 05:00:18 2026 GMT
Not After : Sep 24 05:00:18 2026 GMT
Subject: CN=f9beb693a54ff689ab857b9e67205487e904c79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:60:c1:78:64:ac:13:78:a1:79:d7:db:8d:e5:
24:28:05:da:8c:d7:04:74:27:d1:7b:0d:06:ca:c7:
bc:6e:f5:85:d6:c5:dd:4f:d7:aa:fb:1f:ca:28:ed:
bd:c4:f1:07:90:53:80:87:40:56:62:c8:bd:a7:db:
8c:49:6a:e9:58:75:37:bf:73:d7:a7:7d:a0:0b:88:
8c:21:d2:51:d3:18:2b:05:93:1b:58:14:f8:c9:80:
ba:d1:e2:9d:81:72:4b:f6:fe:89:18:46:58:09:11:
0f:77:7e:e4:64:7b:1f:3b:64:ef:c5:24:b9:4a:b4:
44:84:2a:0a:ad:98:7a:4e:f5:b8:78:45:52:4e:42:
49:b1:09:3a:9c:82:67:f2:43:3b:03:9a:81:43:0e:
84:b6:cf:20:93:ff:d8:89:ae:57:a5:a5:a3:97:ca:
94:f4:9b:45:be:83:da:9a:0e:a6:7d:fa:56:f2:81:
6e:d2:b4:8a:9e:f9:2b:6d:7d:3c:9c:46:f4:0d:6c:
56:22:61:90:68:b2:c4:88:e5:f4:2b:e0:51:89:c6:
53:5f:72:dc:b0:27:4a:b3:94:74:d2:75:57:24:d8:
9c:71:8d:cc:aa:1c:e4:58:34:76:2e:19:a1:9e:c4:
78:67:cb:14:85:f2:b2:31:6e:44:06:cf:ac:f7:62:
49:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BE:B6:93:A5:4F:F6:89:AB:85:7B:9E:67:20:54:87:E9:04:C7:9F
X509v3 Authority Key Identifier:
keyid:E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a4:38:ae:f6:12:4b:0a:22:b4:c5:68:8b:90:2f:c6:4f:c5:
d5:20:a5:47:88:42:ac:a5:bc:49:f6:b7:41:3f:d0:4a:93:38:
a2:5b:cc:89:13:0c:1f:65:89:6b:1c:43:6d:0c:fc:77:d5:45:
2d:b4:31:83:88:a9:15:4b:2a:61:c7:d5:2c:ce:e0:38:72:40:
47:69:b5:ce:8b:cb:32:b7:fd:4b:c7:35:37:33:e2:1e:f7:e1:
f1:e6:9d:89:76:52:19:c8:c7:b6:f1:19:42:e2:12:70:b5:ec:
16:ce:97:ca:ab:f5:dc:cb:6c:5c:d3:e6:32:9c:6c:50:2a:8d:
7d:10:8e:76:06:61:d0:73:77:a4:ff:cc:cf:51:6c:b8:88:55:
ba:23:b2:97:a2:65:dd:4c:04:61:7b:38:fa:58:3b:d5:a8:9b:
97:9e:b1:01:db:1e:4c:13:00:d7:79:f0:62:98:83:1d:e3:24:
50:a7:93:84:15:78:79:98:a0:82:c8:d2:ec:e7:5b:ad:0f:dd:
0f:fd:9e:7e:19:bb:b1:74:66:88:9f:26:3f:cd:99:a3:2b:29:
7f:00:0d:1f:ef:1c:2a:c8:90:f5:44:46:a2:4f:06:9e:34:8d:
d1:ea:9a:02:e9:fe:40:07:75:7b:d2:56:40:20:8a:23:eb:09:
fc:bd:2e:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMotSy67Agf0pGS9kCeDZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTcwYTgxYWEwMzA4YTNjYmJmNjg1NzhiMTgwZjM1NmI2
ZWQ4YWMwHhcNMjYwOTIzMDUwMDE4WhcNMjYwOTI0MDUwMDE4WjAzMTEwLwYDVQQD
EyhmOWJlYjY5M2E1NGZmNjg5YWI4NTdiOWU2NzIwNTQ4N2U5MDRjNzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGDBeGSsE3ihedfbjeUkKAXajNcE
dCfRew0Gyse8bvWF1sXdT9eq+x/KKO29xPEHkFOAh0BWYsi9p9uMSWrpWHU3v3PX
p32gC4iMIdJR0xgrBZMbWBT4yYC60eKdgXJL9v6JGEZYCREPd37kZHsfO2TvxSS5
SrREhCoKrZh6TvW4eEVSTkJJsQk6nIJn8kM7A5qBQw6Ets8gk//Yia5XpaWjl8qU
9JtFvoPamg6mffpW8oFu0rSKnvkrbX08nEb0DWxWImGQaLLEiOX0K+BRicZTX3Lc
sCdKs5R00nVXJNiccY3MqhzkWDR2LhmhnsR4Z8sUhfKyMW5EBs+s92JJIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPm+tpOlT/aJq4V7nmcgVIfpBMefMB8GA1UdIwQY
MBaAFOWnCoGqAwijy79oV4sYDzVrbtisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFjS2dhb0RDS1BMdjJoWGl4Z1BOV3R1Mkt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zMWQxZjAtOTRlNS00ZmQ0LTg3ZjIt
ZWU5NmUyOGVhNmU5LzEvNWFjS2dhb0RDS1BMdjJoWGl4Z1BOV3R1Mkt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8zMWQxZjAtOTRlNS00ZmQ0LTg3ZjItZWU5NmUyOGVhNmU5
LzEvNWFjS2dhb0RDS1BMdjJoWGl4Z1BOV3R1Mkt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVaQ4rvYS
SwoitMVoi5Avxk/F1SClR4hCrKW8Sfa3QT/QSpM4olvMiRMMH2WJaxxDbQz8d9VF
LbQxg4ipFUsqYcfVLM7gOHJAR2m1zovLMrf9S8c1NzPiHvfh8eadiXZSGcjHtvEZ
QuIScLXsFs6Xyqv13MtsXNPmMpxsUCqNfRCOdgZh0HN3pP/Mz1FsuIhVuiOyl6Jl
3UwEYXs4+lg71aibl56xAdseTBMA13nwYpiDHeMkUKeThBV4eZiggsjS7OdbrQ/d
D/2efhm7sXRmiJ8mP82ZoyspfwANH+8cKsiQ9URGok8GnjSN0eqaAun+QAd1e9JW
QCCKI+sJ/L0unw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:20:53 2026 by rpki-client