Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier: DA0UCGcwXlTZ3xAlwkNVY/ugItmZZaBWOU6nh1OmKo0=
Subject key identifier: 35:35:74:45:6A:BE:10:D4:20:0B:2E:BA:BE:83:4B:76:83:92:BD:1F
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 019CABD9B4EFB0F1876A90B20571F580E8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number: 14F8
Signing time: Mon 02 Mar 2026 00:01:37 +0000
Manifest this update: Mon 02 Mar 2026 00:01:37 +0000
Manifest next update: Tue 03 Mar 2026 00:01:37 +0000
Files and hashes: 1: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: fatB+TuMIxKbEnNaq5H2Y4A/b8s4JStmJ5F8HwsObwM=)
2: CBtJzFMoigMYechG5k_lhWICkAA.roa (hash: 6qcOp5zAWvjz4mUxBNJFQHjpgjjuwwz7xV3uMQfNfLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b4:ef:b0:f1:87:6a:90:b2:05:71:f5:80:e8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Mar 2 00:01:37 2026 GMT
Not After : Mar 3 00:01:37 2026 GMT
Subject: CN=353574456abe10d4200b2ebabe834b768392bd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:58:61:3d:8f:0d:44:92:a6:2c:88:8c:24:f3:
90:4f:7d:26:2c:72:17:59:45:ec:b7:7a:d5:1a:ef:
93:a9:73:e7:c8:58:39:b9:68:1e:67:da:da:0e:5d:
5c:b7:86:f5:13:8e:8f:33:28:8e:65:d5:21:12:88:
a4:63:51:ca:d4:f2:04:c9:48:f5:e2:b1:81:de:9b:
b3:a7:5c:56:60:a0:81:d8:ba:ee:50:50:36:46:63:
d8:3e:da:79:f0:5f:0c:74:db:ba:4d:bf:7e:ce:0d:
3f:e2:7b:75:8f:33:f6:77:e9:ef:ce:58:f6:c8:61:
3d:9e:78:c9:2d:33:85:2e:f7:de:c5:f8:f1:a6:7a:
5d:39:5f:1d:10:03:b2:5b:d4:d3:c3:1f:21:7f:55:
0a:f1:42:77:88:e7:a8:d0:5e:1b:31:f8:17:98:ba:
01:93:f0:4c:a7:63:25:e3:e8:cd:37:c4:ad:b4:dd:
44:b6:63:92:a9:56:11:fd:1d:bb:9c:a5:f7:f7:15:
cd:29:54:d3:22:e2:5d:42:50:94:d3:74:ff:4b:f3:
e3:2a:03:da:02:f8:e5:ea:80:56:80:d1:cb:75:7c:
32:ad:3d:be:e2:94:1b:34:fe:fb:6d:e0:c9:40:3c:
db:09:5d:8d:e8:d2:0b:ce:f5:7a:c1:ae:d8:51:b7:
6e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:35:74:45:6A:BE:10:D4:20:0B:2E:BA:BE:83:4B:76:83:92:BD:1F
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:46:9b:8a:34:50:b7:5d:39:b2:b4:42:57:df:75:5a:0b:9e:
d2:f7:ea:52:16:e2:fb:01:20:fa:98:a0:b8:a1:f5:d5:7b:a8:
63:bb:65:ef:40:0c:40:76:fc:06:df:ac:bd:90:4f:26:e8:ce:
a4:03:f5:25:7a:ed:f1:d8:e4:05:a4:c3:db:fe:71:3e:32:c8:
63:34:05:10:af:73:73:d0:f6:6e:c5:ff:c7:46:56:4c:90:44:
0b:57:c3:c4:83:36:c0:78:10:ef:bf:69:06:c4:54:e0:47:27:
c2:e6:1a:27:31:77:2a:3d:94:18:c4:33:16:8c:08:d8:60:4e:
ca:bf:71:6f:47:95:a2:9a:f2:e5:91:81:e3:cc:39:e9:18:c4:
a1:8d:e5:29:69:d1:ef:44:8d:e0:b6:3a:cf:01:01:eb:f8:e4:
c5:5a:0d:d9:17:fb:1a:21:e9:84:af:29:11:5a:4d:56:4e:d2:
15:47:6f:17:02:4a:0e:32:f7:e1:4e:94:6d:cc:7a:3e:77:6d:
c0:b7:d8:fa:00:da:b3:8b:64:1c:7e:12:ea:c6:7e:bc:39:57:
c5:c9:ad:86:e0:9c:33:a3:9d:fc:36:75:8b:56:c7:c6:2a:8b:
41:d2:30:f2:44:6d:f8:1e:6a:42:c4:67:aa:e4:a9:99:a5:39:
25:5e:bc:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2bTvsPGHapCyBXH1gOjqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZTY5MDY4YThiMWZiN2ZhMDc5NWJhZjliYjNhYjg2Yzk0
ZTQ2ZmMwHhcNMjYwMzAyMDAwMTM3WhcNMjYwMzAzMDAwMTM3WjAzMTEwLwYDVQQD
EygzNTM1NzQ0NTZhYmUxMGQ0MjAwYjJlYmFiZTgzNGI3NjgzOTJiZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VhhPY8NRJKmLIiMJPOQT30mLHIX
WUXst3rVGu+TqXPnyFg5uWgeZ9raDl1ct4b1E46PMyiOZdUhEoikY1HK1PIEyUj1
4rGB3puzp1xWYKCB2LruUFA2RmPYPtp58F8MdNu6Tb9+zg0/4nt1jzP2d+nvzlj2
yGE9nnjJLTOFLvfexfjxpnpdOV8dEAOyW9TTwx8hf1UK8UJ3iOeo0F4bMfgXmLoB
k/BMp2Ml4+jNN8SttN1EtmOSqVYR/R27nKX39xXNKVTTIuJdQlCU03T/S/PjKgPa
Avjl6oBWgNHLdXwyrT2+4pQbNP77beDJQDzbCV2N6NILzvV6wa7YUbdueQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDU1dEVqvhDUIAsuur6DS3aDkr0fMB8GA1UdIwQY
MBaAFOXmkGiosft/oHlbr5uzq4bJTkb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVhUWFLaXgtMy1nZVZ1dm03T3Joc2xPUnZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82MjlmNGQtMzkyOS00NjFlLWExOTQt
ZGQxMDI4OTkxZmYzLzEvNWVhUWFLaXgtMy1nZVZ1dm03T3Joc2xPUnZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82MjlmNGQtMzkyOS00NjFlLWExOTQtZGQxMDI4OTkxZmYz
LzEvNWVhUWFLaXgtMy1nZVZ1dm03T3Joc2xPUnZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEabijRQ
t105srRCV991Wgue0vfqUhbi+wEg+piguKH11XuoY7tl70AMQHb8Bt+svZBPJujO
pAP1JXrt8djkBaTD2/5xPjLIYzQFEK9zc9D2bsX/x0ZWTJBEC1fDxIM2wHgQ779p
BsRU4EcnwuYaJzF3Kj2UGMQzFowI2GBOyr9xb0eVopry5ZGB48w56RjEoY3lKWnR
70SN4LY6zwEB6/jkxVoN2Rf7GiHphK8pEVpNVk7SFUdvFwJKDjL34U6Ubcx6Pndt
wLfY+gDas4tkHH4S6sZ+vDlXxcmthuCcM6Od/DZ1i1bHxiqLQdIw8kRt+B5qQsRn
quSpmaU5JV68Hw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:25 2026 by rpki-client