Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
File: 5acKgaoDCKPLv2hXixgPNWtu2Kw.mft (raw, json)
Hash identifier: FkgILIrPfsmdXNe7XcT4JvNiVmEHG5ivqaA9icJdFKU=
Subject key identifier: 1C:07:21:6F:51:23:FC:0B:50:B6:F8:0C:28:2B:7A:7A:F8:CA:EF:2E
Authority key identifier: E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
Certificate issuer: /CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Certificate serial: 019D9BBE918FBBF5DB0A68E523FC79C8F496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
Manifest number: 0183
Signing time: Fri 17 Apr 2026 14:00:50 +0000
Manifest this update: Fri 17 Apr 2026 14:00:50 +0000
Manifest next update: Sat 18 Apr 2026 14:00:50 +0000
Files and hashes: 1: 5acKgaoDCKPLv2hXixgPNWtu2Kw.crl (hash: DwM4gcVCEHGLofiCXdyxfHCHgxcyY8FK9MQGUeY3swk=)
2: lKcxCQ3OfOPdVqWrI13qDrj054k.roa (hash: xLZ+rUY4dQ+17ft3i45+DuMCNmea8sukddDn1Ts3WII=)
3: wVow-AxbRtNSLbo8GRm_FtoRrvM.roa (hash: nceJKLP2a7knL1aJY0JZbTmlkyLD960ynWY7OWHE27E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:91:8f:bb:f5:db:0a:68:e5:23:fc:79:c8:f4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Validity
Not Before: Apr 17 14:00:50 2026 GMT
Not After : Apr 18 14:00:50 2026 GMT
Subject: CN=1c07216f5123fc0b50b6f80c282b7a7af8caef2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fb:c9:34:5f:23:52:19:96:34:d6:ae:bc:29:
ad:77:88:19:71:a4:f2:31:8b:c6:62:67:4f:34:0c:
05:91:5e:80:3a:fc:a8:52:8b:d0:1b:51:a0:4e:53:
86:4b:56:54:06:b6:d6:97:06:7a:9c:5b:1e:56:48:
13:67:b1:20:f9:00:74:1a:88:fc:83:ce:6a:50:27:
2b:be:8b:0d:43:6d:57:dc:6f:ef:e7:b0:ba:c0:61:
fb:d6:26:dc:11:0e:27:91:8b:76:ee:cb:19:54:47:
38:82:9b:4d:3e:c2:23:78:58:76:e8:dd:05:51:90:
8d:b4:4f:52:8f:9b:51:8d:47:a5:f8:9f:97:13:a5:
27:1c:3a:9b:5d:ba:ed:56:68:7d:0d:97:17:d6:51:
dc:9c:58:59:27:68:1c:75:c3:69:97:ed:63:8a:70:
04:b7:f5:e3:77:a6:6b:94:fe:00:7d:74:e1:c1:14:
f0:63:e1:57:33:84:8d:9f:54:c6:1d:73:2f:7e:a4:
5f:3f:d4:ef:15:36:aa:4a:63:ef:f5:0f:08:11:90:
22:65:73:15:26:e9:63:d2:4e:80:64:8f:03:ce:33:
e1:31:3a:03:b0:fe:0e:7c:a7:a7:46:14:16:70:57:
02:72:64:f8:a5:1c:d9:7e:8a:79:56:d7:08:37:ae:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:07:21:6F:51:23:FC:0B:50:B6:F8:0C:28:2B:7A:7A:F8:CA:EF:2E
X509v3 Authority Key Identifier:
keyid:E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d0:2a:85:51:ef:10:4c:3d:e5:a5:2e:8f:8d:76:5d:04:b7:
6d:dd:71:30:61:56:3b:73:25:23:bf:7b:ff:de:0f:94:a7:e5:
18:7f:23:f4:18:f3:cb:43:94:80:44:8d:84:92:6b:e8:c9:75:
79:bb:90:16:54:4b:a5:63:c7:c2:25:1b:a0:97:37:95:ae:43:
57:50:d8:cb:60:0d:e9:78:a6:2f:d4:ee:5d:d4:52:dd:07:a6:
ba:58:40:99:75:e3:c8:32:d3:8b:47:fb:1d:ef:32:2f:94:8d:
d2:b8:6c:25:e6:c1:e5:a3:7a:2e:f0:e8:97:72:c5:95:9c:ae:
3b:93:08:b8:0d:fe:44:fb:8d:51:41:9f:b0:de:8f:b1:b4:e2:
e2:4f:b1:01:35:90:24:92:e1:d9:68:e2:c1:e6:ec:48:3a:03:
13:7e:5b:10:87:87:33:32:18:04:76:e2:5a:c2:9b:e0:fd:57:
f7:f0:38:24:4f:ba:7b:89:ff:9c:85:90:a8:40:6b:75:3a:ce:
01:3f:fc:fc:91:79:54:91:fd:a2:91:c5:75:f6:9b:29:16:08:
c9:75:cb:38:8b:84:cc:b0:08:cd:7d:18:4a:f9:f6:cf:29:40:
99:f3:73:8d:2f:c8:a9:2c:79:ff:3e:d6:f4:73:3e:38:a3:f6:
1a:66:84:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvpGPu/XbCmjlI/x5yPSWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTcwYTgxYWEwMzA4YTNjYmJmNjg1NzhiMTgwZjM1NmI2
ZWQ4YWMwHhcNMjYwNDE3MTQwMDUwWhcNMjYwNDE4MTQwMDUwWjAzMTEwLwYDVQQD
EygxYzA3MjE2ZjUxMjNmYzBiNTBiNmY4MGMyODJiN2E3YWY4Y2FlZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fvJNF8jUhmWNNauvCmtd4gZcaTy
MYvGYmdPNAwFkV6AOvyoUovQG1GgTlOGS1ZUBrbWlwZ6nFseVkgTZ7Eg+QB0Goj8
g85qUCcrvosNQ21X3G/v57C6wGH71ibcEQ4nkYt27ssZVEc4gptNPsIjeFh26N0F
UZCNtE9Sj5tRjUel+J+XE6UnHDqbXbrtVmh9DZcX1lHcnFhZJ2gcdcNpl+1jinAE
t/Xjd6ZrlP4AfXThwRTwY+FXM4SNn1TGHXMvfqRfP9TvFTaqSmPv9Q8IEZAiZXMV
Julj0k6AZI8DzjPhMToDsP4OfKenRhQWcFcCcmT4pRzZfop5VtcIN66TSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwHIW9RI/wLULb4DCgrenr4yu8uMB8GA1UdIwQY
MBaAFOWnCoGqAwijy79oV4sYDzVrbtisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFjS2dhb0RDS1BMdjJoWGl4Z1BOV3R1Mkt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zMWQxZjAtOTRlNS00ZmQ0LTg3ZjIt
ZWU5NmUyOGVhNmU5LzEvNWFjS2dhb0RDS1BMdjJoWGl4Z1BOV3R1Mkt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8zMWQxZjAtOTRlNS00ZmQ0LTg3ZjItZWU5NmUyOGVhNmU5
LzEvNWFjS2dhb0RDS1BMdjJoWGl4Z1BOV3R1Mkt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtAqhVHv
EEw95aUuj412XQS3bd1xMGFWO3MlI797/94PlKflGH8j9Bjzy0OUgESNhJJr6Ml1
ebuQFlRLpWPHwiUboJc3la5DV1DYy2AN6XimL9TuXdRS3QemulhAmXXjyDLTi0f7
He8yL5SN0rhsJebB5aN6LvDol3LFlZyuO5MIuA3+RPuNUUGfsN6PsbTi4k+xATWQ
JJLh2WjiwebsSDoDE35bEIeHMzIYBHbiWsKb4P1X9/A4JE+6e4n/nIWQqEBrdTrO
AT/8/JF5VJH9opHFdfabKRYIyXXLOIuEzLAIzX0YSvn2zylAmfNzjS/IqSx5/z7W
9HM+OKP2GmaETw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:54:55 2026 by rpki-client