Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
File: 5acKgaoDCKPLv2hXixgPNWtu2Kw.mft (raw, json)
Hash identifier: 4O2hL1EBV49uXs0jTbVAhzbU4nzh17DZ/pTtQjcrctI=
Subject key identifier: 4C:E8:DE:4D:04:C1:76:BC:2A:5C:80:84:83:97:65:8C:2D:9E:14:A7
Authority key identifier: E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
Certificate issuer: /CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Certificate serial: 019EC1489C5451E6276A08D379DFF4CB7A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
Manifest number: 021B
Signing time: Sat 13 Jun 2026 14:00:21 +0000
Manifest this update: Sat 13 Jun 2026 14:00:21 +0000
Manifest next update: Sun 14 Jun 2026 14:00:21 +0000
Files and hashes: 1: 5acKgaoDCKPLv2hXixgPNWtu2Kw.crl (hash: TYpEp52tE+3MVfG2+1gji3kHjerl3NQ68pa4GGo8LGo=)
2: lKcxCQ3OfOPdVqWrI13qDrj054k.roa (hash: xLZ+rUY4dQ+17ft3i45+DuMCNmea8sukddDn1Ts3WII=)
3: wVow-AxbRtNSLbo8GRm_FtoRrvM.roa (hash: nceJKLP2a7knL1aJY0JZbTmlkyLD960ynWY7OWHE27E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:9c:54:51:e6:27:6a:08:d3:79:df:f4:cb:7a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a70a81aa0308a3cbbf68578b180f356b6ed8ac
Validity
Not Before: Jun 13 14:00:21 2026 GMT
Not After : Jun 14 14:00:21 2026 GMT
Subject: CN=4ce8de4d04c176bc2a5c80848397658c2d9e14a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:85:75:29:6a:64:d7:ef:fb:1f:b5:9d:aa:
43:34:ef:8c:97:35:31:e0:91:cf:94:76:ba:1c:66:
d0:ce:40:1c:84:9d:29:67:49:6d:f7:69:9d:e8:34:
f3:3b:1e:a5:c9:ac:e4:0d:be:ba:a7:0a:9a:77:1b:
e2:42:0e:87:a0:a1:38:7c:0d:2a:4a:31:11:82:f1:
9b:48:70:42:94:d8:6a:9a:d7:ac:b7:74:49:7a:f7:
7e:d0:c1:76:eb:9c:f4:b7:87:d1:82:ea:7f:97:b6:
31:ca:b3:ae:62:bc:4e:e2:0d:3f:26:fd:f0:3d:ca:
87:2f:1d:84:c8:67:62:0e:c1:12:b4:76:ac:e4:f1:
81:77:20:e2:5f:19:61:df:36:b0:c9:61:07:9c:cd:
31:41:d8:d2:be:95:ee:34:ac:3f:07:7d:2d:ea:c8:
7d:f5:89:2a:ca:30:2d:f5:64:03:4e:d1:09:27:58:
d6:9e:8c:ff:6e:e1:18:27:55:6f:9f:45:f4:aa:34:
fb:e2:57:84:a8:7c:64:d0:8e:2b:16:29:7d:fb:10:
85:5a:7b:e8:c1:cf:56:ff:f9:5d:2e:63:d6:a1:cd:
30:51:87:1c:6e:a5:c9:2d:08:43:01:89:b7:94:9d:
02:45:d5:62:52:d8:b6:64:f9:6e:2b:a4:85:47:5a:
f0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E8:DE:4D:04:C1:76:BC:2A:5C:80:84:83:97:65:8C:2D:9E:14:A7
X509v3 Authority Key Identifier:
keyid:E5:A7:0A:81:AA:03:08:A3:CB:BF:68:57:8B:18:0F:35:6B:6E:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5acKgaoDCKPLv2hXixgPNWtu2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/31d1f0-94e5-4fd4-87f2-ee96e28ea6e9/1/5acKgaoDCKPLv2hXixgPNWtu2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7a:5f:33:63:fb:68:4b:a6:f0:7c:b5:de:ab:12:40:42:b7:
2d:f8:d6:40:39:be:b3:d1:4b:25:af:6b:ca:68:58:28:e5:0f:
5c:de:a1:75:16:36:19:6a:be:17:2a:eb:c3:48:2c:7f:93:da:
1c:18:d6:7f:fc:b0:37:e2:d4:4b:89:a4:70:b4:e2:ff:3c:16:
de:75:3f:47:6a:b1:7e:4f:31:3a:3c:02:cc:62:48:73:ea:99:
85:20:05:43:3c:40:27:fe:f4:38:9b:a4:2a:63:83:fb:3b:2e:
60:d1:c0:51:35:03:16:cf:f9:54:ce:58:65:20:29:e1:f4:5d:
a8:0a:2f:c4:8d:42:b5:0f:8b:b5:cc:c0:3b:20:88:34:90:86:
2b:f2:22:c9:f9:5d:e5:b0:a4:13:55:df:17:9a:74:b4:22:ed:
2d:ea:16:77:b2:a3:d2:c0:9e:d7:02:3c:3c:57:2a:51:93:b2:
89:ae:2e:7a:1b:3d:22:2e:15:7d:0c:95:9e:09:01:57:86:bf:
3b:90:b0:aa:81:11:a4:4f:ec:cc:9d:6f:2a:b7:6e:93:4f:60:
3f:da:5d:54:27:31:2a:05:09:39:e9:a9:c8:e0:b0:ff:37:0d:
cb:ec:82:c1:43:7f:3f:0b:89:b8:e5:58:84:f6:e2:0d:af:b0:
47:22:09:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:57:29 2026 by rpki-client