Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
File: 5QwixmuF-smN6D12HvQkNDerA5M.mft (raw, json)
Hash identifier: Qitrkh54FWRapTkNTElaBjXOCR2LADQRO+dbsKbAwm0=
Subject key identifier: FF:40:A3:C8:23:F9:39:9F:6E:E3:E5:B1:2D:32:2E:CA:44:02:DF:C8
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial: 019D38667A453B706D29FE9AAA96017A5CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
Manifest number: 152C
Signing time: Sun 29 Mar 2026 07:02:13 +0000
Manifest this update: Sun 29 Mar 2026 07:02:13 +0000
Manifest next update: Mon 30 Mar 2026 07:02:13 +0000
Files and hashes: 1: 3_hfFDS7edlldv387Ibuhej6dF0.roa (hash: gnG2OhlolS2lCXusOxQspiG1poLsx9jOsN1iE3+1PLg=)
2: 5QwixmuF-smN6D12HvQkNDerA5M.crl (hash: AEy+lF8ENoorfAvqgfg1YxhKfmv4oPLtTCF+p3vDX7Y=)
3: ahD0iaW_0ThtBThvoZxxwuKgJjg.roa (hash: U0W4C4rh5x5idCXkv/t66E/4Ep/GgVtjWoxIgE8QXiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:7a:45:3b:70:6d:29:fe:9a:aa:96:01:7a:5c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
Validity
Not Before: Mar 29 07:02:13 2026 GMT
Not After : Mar 30 07:02:13 2026 GMT
Subject: CN=ff40a3c823f9399f6ee3e5b12d322eca4402dfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:f7:79:76:f0:46:a2:37:ff:a7:45:c5:79:
0a:fb:93:96:5c:99:2a:d3:21:68:46:48:b1:c1:30:
ff:83:cc:85:65:50:65:02:1e:b4:2e:c8:47:6d:36:
59:16:de:17:03:d5:8c:a5:c4:77:8c:9c:c5:4b:20:
54:ef:06:64:0b:12:33:17:56:84:de:ef:7c:c9:28:
0f:05:b8:a4:95:75:c9:19:7f:a3:fa:0c:8f:59:80:
da:95:6b:1d:89:39:93:eb:d7:41:34:0b:bc:1e:fa:
a1:c8:1b:3c:20:4f:ca:e5:dc:9c:43:d3:4d:e6:6e:
f0:fb:6e:f7:1a:3a:c3:48:a2:54:d6:bc:b9:73:47:
db:bd:47:42:7d:e2:52:f7:a0:68:6a:6e:81:66:1c:
22:6b:04:81:08:71:88:77:a1:95:8b:4d:39:6a:2b:
a9:c0:8c:0b:9c:b9:42:d9:62:06:ea:12:97:57:a7:
4a:fd:0e:9f:21:e4:14:f9:4a:89:8f:ef:a8:5a:6d:
21:76:c2:2a:39:28:0e:57:6e:21:e0:46:52:79:44:
f3:46:c3:4a:ff:22:9b:31:d3:d5:c4:57:4b:31:d2:
42:11:c4:30:96:47:34:95:dd:0e:a4:25:ad:10:92:
21:9d:b4:19:1d:1e:30:23:8e:01:a7:36:59:f5:50:
e1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:40:A3:C8:23:F9:39:9F:6E:E3:E5:B1:2D:32:2E:CA:44:02:DF:C8
X509v3 Authority Key Identifier:
keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ac:78:03:b7:73:5c:ec:73:0c:79:4e:68:ed:be:ac:54:82:
4b:06:b2:91:d8:b6:e9:3f:3b:eb:a6:c1:b1:3c:2c:de:82:8b:
0d:7a:f1:68:ed:98:19:74:69:12:5f:a3:99:ac:25:f7:70:ea:
85:e5:35:bf:c0:e7:93:84:a0:9d:3d:56:f6:c5:e5:c3:54:fd:
75:43:04:64:30:d1:06:a4:dc:99:0c:64:36:80:18:5d:c1:8a:
3b:a3:b5:92:66:d2:04:e5:aa:22:47:0d:9b:84:56:69:d1:9c:
3a:31:ca:a7:94:32:07:5b:88:5b:50:65:7f:71:b6:95:f6:d4:
ba:d3:5c:93:28:56:dd:03:c1:d2:27:9b:4f:7c:9e:4c:59:b4:
91:05:41:b0:ce:c8:f0:29:6f:71:12:41:ca:f4:32:d4:20:db:
47:c2:15:04:9d:4b:ba:3b:fe:c2:c7:59:0a:65:32:3c:87:64:
4e:ea:3d:af:fb:23:b1:ea:1f:50:21:a5:97:c7:fc:74:9d:85:
94:dd:bc:a7:7b:cd:24:1b:62:43:4d:57:5c:00:a9:46:5b:64:
a1:3a:01:8d:88:92:62:99:bc:68:80:b0:16:e5:82:40:54:99:
c0:23:ac:bc:16:bb:e1:de:29:4f:d8:c2:6a:66:8f:cb:ec:fa:
3b:e5:e3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:20 2026 by rpki-client