Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
File: 5QwixmuF-smN6D12HvQkNDerA5M.mft (raw, json)
Hash identifier: XpYXHHv3GRuD9n+7rdSPfRa2QezGJ0PZdhcL9NTZg6s=
Subject key identifier: EB:6B:73:2B:4A:3E:36:D4:59:75:FF:39:0D:C2:55:9D:F1:EE:FA:6E
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial: 019D270406D0B4C23D3D0A142E655EAA8A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
Manifest number: 1523
Signing time: Wed 25 Mar 2026 22:01:08 +0000
Manifest this update: Wed 25 Mar 2026 22:01:08 +0000
Manifest next update: Thu 26 Mar 2026 22:01:08 +0000
Files and hashes: 1: 3_hfFDS7edlldv387Ibuhej6dF0.roa (hash: gnG2OhlolS2lCXusOxQspiG1poLsx9jOsN1iE3+1PLg=)
2: 5QwixmuF-smN6D12HvQkNDerA5M.crl (hash: IHnrV4ZpWlQpT0F6cR+P8lBc/+s20QqOP9Yn7y3VmeU=)
3: ahD0iaW_0ThtBThvoZxxwuKgJjg.roa (hash: U0W4C4rh5x5idCXkv/t66E/4Ep/GgVtjWoxIgE8QXiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:06:d0:b4:c2:3d:3d:0a:14:2e:65:5e:aa:8a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
Validity
Not Before: Mar 25 22:01:08 2026 GMT
Not After : Mar 26 22:01:08 2026 GMT
Subject: CN=eb6b732b4a3e36d45975ff390dc2559df1eefa6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:55:b3:d1:8d:e3:b2:58:49:d6:e2:ba:07:
45:a8:05:63:b6:cb:84:0b:2f:45:19:58:f8:29:4a:
3e:f6:ba:78:ee:02:5a:d0:7e:46:83:4d:e0:47:9b:
a4:e7:c5:83:5b:2a:4b:31:57:42:5d:80:74:5e:b3:
83:4d:9d:ad:fe:09:c5:c1:60:b0:58:24:5f:18:b9:
2d:ad:98:b7:34:f4:6e:6e:63:79:c4:32:7c:3f:f7:
23:84:a3:33:88:62:1f:f7:2b:6d:fd:8c:69:26:c7:
86:4d:19:9d:95:ec:5f:8a:01:aa:35:8b:ae:aa:2f:
85:dc:00:33:84:c4:9b:b3:11:69:70:ea:7e:a8:0b:
c8:a8:30:e8:57:0d:92:ff:36:69:ad:4e:c4:41:c2:
b3:46:41:30:a3:84:e4:97:cb:8d:f0:fc:26:40:1e:
fe:5d:1c:1b:2c:47:4d:a1:1b:f2:ef:fb:c3:5f:ea:
8b:4d:05:77:de:09:2c:44:c3:56:8b:0d:95:e0:fa:
b7:75:9b:f8:fd:c8:c0:df:bf:dc:9c:a5:50:8e:30:
94:2f:c6:10:b3:a4:34:98:8f:0b:00:bd:28:ec:fa:
7c:f5:54:ad:9a:90:08:2a:7e:b5:10:80:05:e9:9c:
39:2a:a2:57:82:5b:25:3e:ac:82:17:3e:cd:73:3a:
da:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6B:73:2B:4A:3E:36:D4:59:75:FF:39:0D:C2:55:9D:F1:EE:FA:6E
X509v3 Authority Key Identifier:
keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:26:ee:29:ee:2e:a1:d6:72:b5:62:6a:d8:63:87:bb:70:b3:
3c:41:e5:a2:7e:f1:08:27:7e:2e:42:1b:c7:e4:72:87:3d:d7:
f2:e9:fb:67:88:a4:4d:b9:d1:d9:58:a4:a8:06:ed:ff:b5:91:
c8:cb:1b:01:84:05:0d:9a:59:a6:b9:2a:09:fd:f4:17:8b:65:
f6:77:8b:bd:4f:93:36:73:e3:a1:1e:f3:35:a0:27:f0:60:f5:
b1:3e:5b:27:21:89:9e:8d:b6:9c:d9:9b:76:da:56:48:80:44:
69:90:69:ac:44:2f:c1:c4:42:02:61:e9:0c:19:66:5a:04:1d:
0d:8b:e6:08:eb:87:98:2e:f2:f5:60:64:a7:8f:66:d7:87:41:
eb:1c:0b:81:82:be:03:39:fe:cb:f3:39:9d:b2:cb:46:e6:50:
b9:d2:f9:e4:a5:f0:6a:49:91:61:56:e7:d3:0f:64:24:1f:5a:
0f:69:71:c4:40:94:29:bc:ae:66:da:fe:e3:e2:eb:4c:61:e8:
ab:a5:b6:c4:b7:51:99:9c:f8:af:b8:5c:3b:64:3e:55:77:3c:
1f:db:ef:a2:ef:19:0f:60:41:a9:c7:6e:df:d4:a9:27:12:f5:
e5:ee:00:a5:ca:75:df:c3:95:cc:64:fc:98:fc:79:42:21:b4:
cf:28:55:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBAbQtMI9PQoULmVeqoo2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MGMyMmM2NmI4NWZhYzk4ZGU4M2Q3NjFlZjQyNDM0Mzdh
YjAzOTMwHhcNMjYwMzI1MjIwMTA4WhcNMjYwMzI2MjIwMTA4WjAzMTEwLwYDVQQD
EyhlYjZiNzMyYjRhM2UzNmQ0NTk3NWZmMzkwZGMyNTU5ZGYxZWVmYTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzFVs9GN47JYSdbiugdFqAVjtsuE
Cy9FGVj4KUo+9rp47gJa0H5Gg03gR5uk58WDWypLMVdCXYB0XrODTZ2t/gnFwWCw
WCRfGLktrZi3NPRubmN5xDJ8P/cjhKMziGIf9ytt/YxpJseGTRmdlexfigGqNYuu
qi+F3AAzhMSbsxFpcOp+qAvIqDDoVw2S/zZprU7EQcKzRkEwo4Tkl8uN8PwmQB7+
XRwbLEdNoRvy7/vDX+qLTQV33gksRMNWiw2V4Pq3dZv4/cjA37/cnKVQjjCUL8YQ
s6Q0mI8LAL0o7Pp89VStmpAIKn61EIAF6Zw5KqJXglslPqyCFz7Nczra4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtrcytKPjbUWXX/OQ3CVZ3x7vpuMB8GA1UdIwQY
MBaAFOUMIsZrhfrJjeg9dh70JDQ3qwOTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVF3aXhtdUYtc21ONkQxMkh2UWtORGVyQTVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yYjdmZTktMmE4Ny00YzU3LWIxMDgt
OTIxNDI3ODEwOGE4LzEvNVF3aXhtdUYtc21ONkQxMkh2UWtORGVyQTVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8yYjdmZTktMmE4Ny00YzU3LWIxMDgtOTIxNDI3ODEwOGE4
LzEvNVF3aXhtdUYtc21ONkQxMkh2UWtORGVyQTVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFybuKe4u
odZytWJq2GOHu3CzPEHlon7xCCd+LkIbx+Ryhz3X8un7Z4ikTbnR2VikqAbt/7WR
yMsbAYQFDZpZprkqCf30F4tl9neLvU+TNnPjoR7zNaAn8GD1sT5bJyGJno22nNmb
dtpWSIBEaZBprEQvwcRCAmHpDBlmWgQdDYvmCOuHmC7y9WBkp49m14dB6xwLgYK+
Azn+y/M5nbLLRuZQudL55KXwakmRYVbn0w9kJB9aD2lxxECUKbyuZtr+4+LrTGHo
q6W2xLdRmZz4r7hcO2Q+VXc8H9vvou8ZD2BBqcdu39SpJxL15e4Apcp138OVzGT8
mPx5QiG0zyhVsg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:08:07 2026 by rpki-client