Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
File: 5QwixmuF-smN6D12HvQkNDerA5M.mft (raw, json)
Hash identifier: VcxyFsQo4E2oNMe4b/M50fwwZLhupuSH83Tad8AKDOY=
Subject key identifier: BE:04:C9:8C:D6:58:7C:42:2A:FD:5E:4A:99:FB:40:5D:46:0D:75:5F
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial: 019CAD5958ACFA1F47034D6150A3A91B72F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
Manifest number: 14E4
Signing time: Mon 02 Mar 2026 07:00:39 +0000
Manifest this update: Mon 02 Mar 2026 07:00:39 +0000
Manifest next update: Tue 03 Mar 2026 07:00:39 +0000
Files and hashes: 1: 3_hfFDS7edlldv387Ibuhej6dF0.roa (hash: gnG2OhlolS2lCXusOxQspiG1poLsx9jOsN1iE3+1PLg=)
2: 5QwixmuF-smN6D12HvQkNDerA5M.crl (hash: kJJiIWVy+hE1Vat9iDjVmfbNGFie/gZDn5D4yPM4NOE=)
3: ahD0iaW_0ThtBThvoZxxwuKgJjg.roa (hash: U0W4C4rh5x5idCXkv/t66E/4Ep/GgVtjWoxIgE8QXiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:58:ac:fa:1f:47:03:4d:61:50:a3:a9:1b:72:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
Validity
Not Before: Mar 2 07:00:39 2026 GMT
Not After : Mar 3 07:00:39 2026 GMT
Subject: CN=be04c98cd6587c422afd5e4a99fb405d460d755f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:91:a6:f7:02:d4:9b:bf:ae:61:14:e5:c5:1a:
a9:69:e9:76:64:8b:e5:df:6c:2b:94:90:0b:25:cc:
d3:d7:61:35:05:29:e6:2a:1b:84:05:5e:fe:27:b0:
e0:3d:b4:8f:07:20:4c:b9:81:db:06:9e:54:91:a0:
40:f8:30:15:e6:09:62:6f:be:2f:94:e5:38:e7:37:
d6:ef:f3:4b:4d:78:60:81:87:cd:dc:85:53:df:fe:
3c:4a:59:1f:dc:cb:fb:13:aa:36:fb:16:82:d0:37:
59:bf:57:52:39:d2:90:81:70:fd:e2:50:86:cf:d2:
4b:77:b5:df:08:e4:ef:ad:da:4d:71:3a:27:82:6e:
51:8f:a0:b2:8d:a7:c1:f9:39:9e:23:45:7e:c0:2b:
4b:df:a8:42:d3:91:77:c7:43:a8:41:5d:bf:b0:f9:
66:bc:7f:05:5a:93:6c:94:2b:c0:45:fc:f9:20:21:
96:ba:9e:60:d0:34:22:ce:f4:43:4e:5d:0f:1f:c4:
bd:ad:c0:8b:3c:00:c5:dd:5d:f7:51:69:e5:95:37:
cc:08:6b:42:31:0e:35:1f:ce:c9:0a:ad:3d:9e:b1:
68:f4:48:68:51:8d:5e:5c:62:c2:36:ff:99:ac:c3:
33:3a:75:c7:66:9e:aa:c8:7e:de:24:ca:8b:2d:33:
73:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:04:C9:8C:D6:58:7C:42:2A:FD:5E:4A:99:FB:40:5D:46:0D:75:5F
X509v3 Authority Key Identifier:
keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:58:45:dd:2c:cc:3f:0f:ca:ac:9d:dc:4f:ea:6c:93:25:16:
27:87:ea:df:7d:3f:ea:2b:44:3e:97:4e:9f:14:3c:52:38:db:
86:67:0a:77:3f:e8:30:74:07:70:79:58:90:ea:12:41:93:20:
6d:76:37:a1:8b:cd:de:34:b5:36:6b:82:d2:7a:df:2e:6e:db:
ee:82:e1:ad:26:d1:8e:c9:3b:d3:6d:7d:5c:7c:d6:48:83:b3:
5d:04:27:b8:df:0c:95:3d:11:20:f7:ef:79:3a:ac:4d:a4:b8:
c4:5b:46:c2:0a:31:29:72:78:62:e8:17:ca:98:6b:77:16:e9:
e8:56:4d:82:e4:82:56:99:75:72:29:9f:4b:db:e6:80:5d:09:
e0:a6:27:9a:3e:bc:24:b5:1d:af:5c:b1:c9:73:26:50:ef:7e:
41:30:f6:c9:ad:6b:8d:84:7f:73:28:b7:ed:40:c7:d0:f9:1a:
71:ac:87:37:60:19:16:3d:df:b8:a3:c3:05:3b:c0:8e:95:a4:
be:99:6a:40:d9:ea:4e:80:f3:eb:66:ae:44:b0:21:ec:9b:a5:
8b:0a:c5:4e:f6:7b:b8:75:dd:32:47:63:e0:b7:d1:75:63:e2:
7e:8f:30:84:74:4f:fc:07:cc:bc:77:10:65:f3:eb:b0:df:3a:
46:93:a7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:40 2026 by rpki-client