Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
File: 5acKgaoDCKPLv2hXixgPNWtu2Kw.mft (raw, json)
Hash identifier: rkXwuzEzpvVHf823q/b5A8AL79h1l+M+vc+4x1uEwdM=
Subject key identifier: 96:E8:46:E3:A5:F0:EC:F3:09:7B:30:17:1B:83:DA:48:78:28:6C:71
Authority key identifier: E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
Certificate issuer: /CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Certificate serial: 019FAAF5BDF07627C04E195E8A075BDE91B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
Manifest number: 0294
Signing time: Tue 28 Jul 2026 23:00:59 +0000
Manifest this update: Tue 28 Jul 2026 23:00:59 +0000
Manifest next update: Wed 29 Jul 2026 23:00:59 +0000
Files and hashes: 1: 5acKgaoDCKPLv2hXixgPNWtu2Kw.crl (hash: +wqhPCgOkdh5BrhCRqk6zbiqBrt4x/1bd+hbjKPKdg8=)
2: lKcxCQ3OfOPdVqWrI13qDrj054k.roa (hash: xLZ+rUY4dQ+17ft3i45+DuMCNmea8sukddDn1Ts3WII=)
3: wVow-AxbRtNSLbo8GRm_FtoRrvM.roa (hash: nceJKLP2a7knL1aJY0JZbTmlkyLD960ynWY7OWHE27E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:bd:f0:76:27:c0:4e:19:5e:8a:07:5b:de:91:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Validity
Not Before: Jul 28 23:00:59 2026 GMT
Not After : Jul 29 23:00:59 2026 GMT
Subject: CN=96e846e3a5f0ecf3097b30171b83da4878286c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:bf:e2:74:5b:80:ba:60:ee:a9:34:12:94:
17:58:5a:d7:4f:3d:76:3d:d6:7c:1a:eb:38:8b:e6:
07:de:63:77:19:84:5c:14:04:b1:3f:90:0b:cc:cb:
cd:86:e4:95:e3:ad:7b:15:29:bc:60:c5:fd:14:ea:
a1:b0:84:83:48:8f:98:11:95:b7:8e:ed:7d:0b:76:
c7:d9:45:0b:e6:ce:33:60:a9:79:ec:bd:75:cb:d9:
aa:cf:80:d5:c1:24:2e:34:88:b7:86:47:b6:21:94:
02:97:e4:8c:2f:e8:32:49:59:50:cb:cd:95:d8:ef:
c7:07:b7:ca:42:9c:41:da:94:e0:8e:b8:5e:09:9c:
56:aa:3b:f0:56:45:76:da:a4:a9:7d:ac:89:3d:ae:
dd:3d:da:18:54:3b:00:36:ab:ab:4c:09:4b:91:88:
c0:f1:de:33:75:93:c9:59:03:3b:43:02:2c:f0:33:
e0:e9:43:2d:81:ee:c1:01:9e:3c:e3:93:1b:b6:a9:
7e:bf:22:35:c2:d3:eb:1b:f1:95:f8:2e:e4:aa:1c:
af:17:a4:87:7a:ce:9e:c2:f8:13:e7:b6:88:84:02:
1c:91:22:89:bc:d8:e1:d5:34:c9:21:74:44:02:0c:
12:39:03:66:c0:a1:18:e2:cc:dc:6e:56:c4:3b:41:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E8:46:E3:A5:F0:EC:F3:09:7B:30:17:1B:83:DA:48:78:28:6C:71
X509v3 Authority Key Identifier:
keyid:E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:95:5c:d4:2e:85:bb:7e:68:72:09:d2:b4:36:c4:ae:f7:b3:
7d:ad:6e:67:61:30:e1:c4:21:80:b6:0d:26:b2:17:53:e1:94:
14:47:18:98:66:0c:4a:6a:bd:b8:ce:17:a2:bf:1e:93:9c:49:
eb:d5:60:7d:ea:a2:00:5a:46:ed:67:90:70:0c:89:12:e2:6f:
b2:71:6c:43:ff:ff:66:b6:0f:d7:6f:e5:b0:21:5d:71:da:7e:
25:74:72:cc:2d:36:c5:2c:50:59:00:e9:48:09:e4:57:22:51:
35:5b:96:cd:ab:4f:21:30:3c:6a:1f:f1:55:fd:ec:77:ca:fe:
31:00:db:3a:df:18:6f:f8:7b:4e:dd:08:b9:17:75:68:b5:dc:
37:bc:b6:d2:fb:76:3d:f3:14:53:6f:b3:c6:8f:46:01:38:1f:
1d:c3:a6:e7:e0:8d:c3:2a:11:f4:cf:15:88:0d:3e:e6:67:fb:
32:b9:93:14:17:85:ac:3f:d3:be:d9:7e:fc:d5:bf:0f:80:9f:
54:49:5e:f6:40:46:e8:2e:1e:9d:d2:7c:1f:3a:06:56:df:ae:
f5:50:a0:09:99:7e:03:77:63:d3:b8:04:4d:5a:1e:bb:61:fc:
61:59:f9:81:6a:b6:24:94:08:4e:ac:af:b6:70:99:d8:ea:4f:
49:86:58:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9b3wdifAThleigdb3pG0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTcwYTgxYWEwMzA4YTNjYmJmNjg1NzhiMTgwZjM1NmI2
ZWQ4YWMwHhcNMjYwNzI4MjMwMDU5WhcNMjYwNzI5MjMwMDU5WjAzMTEwLwYDVQQD
Eyg5NmU4NDZlM2E1ZjBlY2YzMDk3YjMwMTcxYjgzZGE0ODc4Mjg2YzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeC/4nRbgLpg7qk0EpQXWFrXTz12
PdZ8Gus4i+YH3mN3GYRcFASxP5ALzMvNhuSV4617FSm8YMX9FOqhsISDSI+YEZW3
ju19C3bH2UUL5s4zYKl57L11y9mqz4DVwSQuNIi3hke2IZQCl+SML+gySVlQy82V
2O/HB7fKQpxB2pTgjrheCZxWqjvwVkV22qSpfayJPa7dPdoYVDsANqurTAlLkYjA
8d4zdZPJWQM7QwIs8DPg6UMtge7BAZ4845Mbtql+vyI1wtPrG/GV+C7kqhyvF6SH
es6ewvgT57aIhAIckSKJvNjh1TTJIXREAgwSOQNmwKEY4szcblbEO0G2AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJboRuOl8OzzCXswFxuD2kh4KGxxMB8GA1UdIwQY
MBaAFOWnCoGqAwijy79oV4sYDzVrbtisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFjS2dhb0RDS1BMdjJoWGl4Z1BOV3R1Mkt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zMWQxZjAtOTRlNS00ZmQ0LTg3ZjIt
ZWU5NmUyOGVhNmU5LzEvNWFjS2dhb0RDS1BMdjJoWGl4Z1BOV3R1Mkt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8zMWQxZjAtOTRlNS00ZmQ0LTg3ZjItZWU5NmUyOGVhNmU5
LzEvNWFjS2dhb0RDS1BMdjJoWGl4Z1BOV3R1Mkt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJVc1C6F
u35ocgnStDbErvezfa1uZ2Ew4cQhgLYNJrIXU+GUFEcYmGYMSmq9uM4Xor8ek5xJ
69VgfeqiAFpG7WeQcAyJEuJvsnFsQ///ZrYP12/lsCFdcdp+JXRyzC02xSxQWQDp
SAnkVyJRNVuWzatPITA8ah/xVf3sd8r+MQDbOt8Yb/h7Tt0IuRd1aLXcN7y20vt2
PfMUU2+zxo9GATgfHcOm5+CNwyoR9M8ViA0+5mf7MrmTFBeFrD/Tvtl+/NW/D4Cf
VEle9kBG6C4endJ8HzoGVt+u9VCgCZl+A3dj07gETVoeu2H8YVn5gWq2JJQITqyv
tnCZ2OpPSYZYDA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:37:35 2026 by rpki-client