Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
File: a-5EwhI0JTYYsNeza5Djy1xA3tE.mft (raw, json)
Hash identifier: jdjCUxrHVC8mXmzQP8kvCqBbfAGJidvutmM9QjJ5ZT4=
Subject key identifier: 1C:62:05:2A:33:93:76:0B:F0:85:F9:9A:CD:64:0F:C0:51:F0:F6:03
Authority key identifier: 6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
Certificate issuer: /CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Certificate serial: 019DA2D35E51FB4343280B3D1BABBDACB7D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
Manifest number: 18C3
Signing time: Sat 18 Apr 2026 23:00:54 +0000
Manifest this update: Sat 18 Apr 2026 23:00:54 +0000
Manifest next update: Sun 19 Apr 2026 23:00:54 +0000
Files and hashes: 1: a-5EwhI0JTYYsNeza5Djy1xA3tE.crl (hash: bjBvb8JXYJ01inhRtat4qODBphmOEVJgxA6kjjtD3Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:5e:51:fb:43:43:28:0b:3d:1b:ab:bd:ac:b7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Validity
Not Before: Apr 18 23:00:54 2026 GMT
Not After : Apr 19 23:00:54 2026 GMT
Subject: CN=1c62052a3393760bf085f99acd640fc051f0f603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:06:6c:69:82:17:9f:a3:d0:9d:0b:8f:32:cc:
89:43:83:3c:7b:93:f3:43:b8:ee:c2:ea:b4:a1:1e:
25:50:9e:e1:63:67:1d:4e:a1:71:b5:c3:ed:e4:de:
54:db:88:21:6b:a6:e6:61:0a:ec:8c:ec:08:24:e9:
c1:ba:49:4e:ff:4b:9c:2b:28:44:64:99:df:65:89:
71:ad:93:b1:cd:16:e5:d6:1b:4e:3f:11:16:c4:be:
2c:73:6f:0f:cf:48:f4:7c:34:ed:de:a2:de:a3:52:
98:e0:e4:7d:b5:43:be:77:38:53:c3:e1:ce:21:62:
cd:4e:c5:85:14:7b:9a:22:7a:96:9b:c4:0e:61:b6:
2b:2d:40:33:7e:fa:8c:b3:55:b3:34:85:ac:26:e0:
a8:ad:50:83:36:f8:56:88:bd:57:ab:03:69:a5:52:
20:a9:2c:75:09:cc:2f:89:38:bd:2f:f8:ef:6a:44:
d5:68:d4:f9:1d:43:2e:8d:4d:b6:a9:a9:30:bf:5f:
f9:a8:9d:c1:3e:9a:31:8e:1d:41:67:62:ae:bc:e0:
50:c9:99:41:0a:58:84:91:9c:ec:37:ae:84:a6:c7:
ae:f1:dd:de:93:80:b6:8d:f0:6e:d2:47:d8:86:42:
c0:63:4e:23:a8:a8:e9:60:7a:10:dd:21:81:f6:e6:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:62:05:2A:33:93:76:0B:F0:85:F9:9A:CD:64:0F:C0:51:F0:F6:03
X509v3 Authority Key Identifier:
keyid:6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0f:60:19:a8:40:c1:d5:97:48:0b:07:59:68:b3:e0:25:a3:
ac:ac:53:ae:6f:7c:6d:5a:26:dd:27:16:cc:33:22:b3:77:8d:
12:fc:3f:c9:b4:a6:5e:b9:6c:22:ae:d4:db:61:ba:79:25:db:
a9:7d:b2:8f:8a:9a:ad:ae:c5:43:1d:64:f5:7f:31:67:03:bb:
5b:b1:9e:38:dd:87:5f:f4:42:c7:96:06:36:ff:52:8f:b1:c6:
90:b2:17:3c:c1:93:e4:84:2f:c2:24:69:13:d0:7d:2f:ea:68:
4e:e5:36:27:70:42:4d:0e:62:8d:70:4e:31:1d:a9:76:51:7f:
33:f2:4d:fe:c2:28:2f:8a:45:4e:aa:95:e0:24:64:f8:62:c3:
a2:b3:99:90:bb:c8:20:45:67:29:dd:b4:30:4c:b3:bf:60:a8:
72:bd:ce:59:bd:ee:4e:90:b2:86:df:70:1e:f0:69:79:b2:13:
82:52:15:e0:e6:b1:c8:27:1c:00:a2:c0:46:02:e3:1f:c0:0a:
18:53:9c:de:38:bf:f1:32:1d:0e:3d:40:0e:e3:ce:a8:31:bc:
f3:b7:25:88:61:b1:40:9a:43:e0:f7:71:c7:86:36:fc:fd:f7:
72:39:0c:31:3f:8f:89:3b:e8:d5:3f:13:a1:dd:d8:6b:af:a9:
c1:1f:d6:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2i015R+0NDKAs9G6u9rLfTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWU0NGMyMTIzNDI1MzYxOGIwZDdiMzZiOTBlM2NiNWM0
MGRlZDEwHhcNMjYwNDE4MjMwMDU0WhcNMjYwNDE5MjMwMDU0WjAzMTEwLwYDVQQD
EygxYzYyMDUyYTMzOTM3NjBiZjA4NWY5OWFjZDY0MGZjMDUxZjBmNjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwZsaYIXn6PQnQuPMsyJQ4M8e5Pz
Q7juwuq0oR4lUJ7hY2cdTqFxtcPt5N5U24gha6bmYQrsjOwIJOnBuklO/0ucKyhE
ZJnfZYlxrZOxzRbl1htOPxEWxL4sc28Pz0j0fDTt3qLeo1KY4OR9tUO+dzhTw+HO
IWLNTsWFFHuaInqWm8QOYbYrLUAzfvqMs1WzNIWsJuCorVCDNvhWiL1XqwNppVIg
qSx1CcwviTi9L/jvakTVaNT5HUMujU22qakwv1/5qJ3BPpoxjh1BZ2KuvOBQyZlB
CliEkZzsN66Epseu8d3ek4C2jfBu0kfYhkLAY04jqKjpYHoQ3SGB9uYrdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxiBSozk3YL8IX5ms1kD8BR8PYDMB8GA1UdIwQY
MBaAFGvuRMISNCU2GLDXs2uQ48tcQN7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS01RXdoSTBKVFlZc05lemE1RGp5MXhBM3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wYTcxMGEtYzgwMC00ZWFlLWEzNWIt
NzY5YjNmYzI2NjRiLzEvYS01RXdoSTBKVFlZc05lemE1RGp5MXhBM3RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8wYTcxMGEtYzgwMC00ZWFlLWEzNWItNzY5YjNmYzI2NjRi
LzEvYS01RXdoSTBKVFlZc05lemE1RGp5MXhBM3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOw9gGahA
wdWXSAsHWWiz4CWjrKxTrm98bVom3ScWzDMis3eNEvw/ybSmXrlsIq7U22G6eSXb
qX2yj4qara7FQx1k9X8xZwO7W7GeON2HX/RCx5YGNv9Sj7HGkLIXPMGT5IQvwiRp
E9B9L+poTuU2J3BCTQ5ijXBOMR2pdlF/M/JN/sIoL4pFTqqV4CRk+GLDorOZkLvI
IEVnKd20MEyzv2Cocr3OWb3uTpCyht9wHvBpebITglIV4OaxyCccAKLARgLjH8AK
GFOc3ji/8TIdDj1ADuPOqDG887cliGGxQJpD4Pdxx4Y2/P33cjkMMT+PiTvo1T8T
od3Ya6+pwR/WTQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:17 2026 by rpki-client