
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
File: a-5EwhI0JTYYsNeza5Djy1xA3tE.mft (raw, json)
Hash identifier: O+SyqAoR1jehALvV686myOVr6MisiM37JxtDNmFsXp4=
Subject key identifier: 50:F9:73:57:B0:59:9A:18:E7:3B:60:F6:51:3B:A4:3F:BB:76:4A:FB
Authority key identifier: 6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
Certificate issuer: /CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Certificate serial: 019CA9B3EABFAA8D57A450A99058F96A7549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 14:01:06 +0000
Manifest this update: Sun 01 Mar 2026 14:01:06 +0000
Manifest next update: Mon 02 Mar 2026 14:01:06 +0000
Files and hashes: 1: a-5EwhI0JTYYsNeza5Djy1xA3tE.crl (hash: k2qz4a/lUj+2vt7CHJQKBUlTq6/0PiC6wp1Dl87HVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:ea:bf:aa:8d:57:a4:50:a9:90:58:f9:6a:75:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Validity
Not Before: Mar 1 14:01:06 2026 GMT
Not After : Mar 2 14:01:06 2026 GMT
Subject: CN=50f97357b0599a18e73b60f6513ba43fbb764afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0a:3f:58:a2:41:9e:78:74:d1:24:a9:f0:66:
5b:bf:e3:1e:a0:b6:40:c6:19:27:a3:e3:6d:b9:6e:
61:8b:45:c2:14:96:f8:f2:ee:d4:7a:e2:eb:88:73:
bf:59:96:64:f7:1c:d3:41:7b:05:33:2f:2e:51:61:
29:42:09:58:14:3b:5a:70:f1:32:7e:35:d1:08:25:
5f:95:02:8c:c0:19:96:10:f6:ac:71:af:4d:ed:3c:
06:45:3d:14:6d:af:0b:a7:6e:f2:0b:3c:79:2d:6d:
f2:d9:7a:48:bc:e8:a5:ce:fe:8e:62:30:94:57:73:
61:c4:bd:00:26:7f:f8:54:c1:17:64:52:16:b4:ce:
bd:e1:d3:0c:f8:dd:d0:f6:5d:57:23:24:ea:2d:1e:
02:2b:3b:81:f1:d9:91:7c:42:7d:94:e8:5f:99:f7:
d6:6a:03:67:7b:0b:4c:12:0d:a1:eb:e7:ff:08:f2:
87:ad:4a:07:30:40:38:c9:86:75:ec:9e:c1:a0:0f:
77:95:28:0d:ad:a2:c8:4c:59:dc:12:9b:40:37:57:
86:24:e6:d2:89:b9:7a:78:ca:c6:68:8b:d7:77:46:
eb:88:60:62:b9:ec:6a:a2:e3:99:6c:3c:ff:11:5f:
b7:4a:a0:25:6a:38:32:6e:06:d3:5a:c3:3a:42:7b:
df:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F9:73:57:B0:59:9A:18:E7:3B:60:F6:51:3B:A4:3F:BB:76:4A:FB
X509v3 Authority Key Identifier:
keyid:6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:01:00:3c:43:30:ab:7d:ed:39:98:8c:2b:7b:d9:ac:51:90:
96:e7:44:4e:1b:e1:82:2c:d8:9c:6c:55:67:00:c5:46:90:29:
8e:ce:7f:bf:8f:56:6b:ad:33:03:fe:4a:13:b5:61:6b:8b:61:
68:30:9d:86:79:93:27:ad:52:4b:68:38:0c:45:4f:b1:ce:55:
30:93:47:8a:93:a2:41:d8:d2:75:f5:d7:a1:43:28:9c:02:1b:
9e:88:66:5d:cb:c7:5d:96:2b:16:43:5b:38:f6:c3:6b:b1:db:
5b:96:b4:7b:83:83:d4:5f:91:b9:41:0b:82:27:1a:2f:a4:09:
23:64:1b:38:a8:da:c4:51:1f:7a:7f:6a:42:9d:ac:a5:6a:04:
42:a9:d2:a0:44:e8:00:9f:ea:89:09:51:f1:af:a7:59:89:7e:
53:3f:a1:f1:b8:58:7e:d3:5f:2f:22:85:9c:f4:9c:95:24:a9:
6a:ff:a5:76:d1:89:12:cd:e0:cd:47:9f:80:f5:4c:04:29:b5:
a3:1c:02:7e:28:e7:5b:5b:b4:7d:d6:5a:8d:d7:8e:2e:08:99:
85:71:74:23:9f:b0:7f:93:70:93:f8:ea:ab:cf:e0:5e:07:44:
f8:4b:ca:99:cb:59:e6:93:f8:cd:95:6e:82:d6:a5:0f:34:c7:
a8:06:94:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps+q/qo1XpFCpkFj5anVJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWU0NGMyMTIzNDI1MzYxOGIwZDdiMzZiOTBlM2NiNWM0
MGRlZDEwHhcNMjYwMzAxMTQwMTA2WhcNMjYwMzAyMTQwMTA2WjAzMTEwLwYDVQQD
Eyg1MGY5NzM1N2IwNTk5YTE4ZTczYjYwZjY1MTNiYTQzZmJiNzY0YWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggo/WKJBnnh00SSp8GZbv+MeoLZA
xhkno+NtuW5hi0XCFJb48u7UeuLriHO/WZZk9xzTQXsFMy8uUWEpQglYFDtacPEy
fjXRCCVflQKMwBmWEPasca9N7TwGRT0Uba8Lp27yCzx5LW3y2XpIvOilzv6OYjCU
V3NhxL0AJn/4VMEXZFIWtM694dMM+N3Q9l1XIyTqLR4CKzuB8dmRfEJ9lOhfmffW
agNnewtMEg2h6+f/CPKHrUoHMEA4yYZ17J7BoA93lSgNraLITFncEptAN1eGJObS
ibl6eMrGaIvXd0briGBiuexqouOZbDz/EV+3SqAlajgybgbTWsM6QnvfVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFD5c1ewWZoY5ztg9lE7pD+7dkr7MB8GA1UdIwQY
MBaAFGvuRMISNCU2GLDXs2uQ48tcQN7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS01RXdoSTBKVFlZc05lemE1RGp5MXhBM3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wYTcxMGEtYzgwMC00ZWFlLWEzNWIt
NzY5YjNmYzI2NjRiLzEvYS01RXdoSTBKVFlZc05lemE1RGp5MXhBM3RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8wYTcxMGEtYzgwMC00ZWFlLWEzNWItNzY5YjNmYzI2NjRi
LzEvYS01RXdoSTBKVFlZc05lemE1RGp5MXhBM3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwEAPEMw
q33tOZiMK3vZrFGQludEThvhgizYnGxVZwDFRpApjs5/v49Wa60zA/5KE7Vha4th
aDCdhnmTJ61SS2g4DEVPsc5VMJNHipOiQdjSdfXXoUMonAIbnohmXcvHXZYrFkNb
OPbDa7HbW5a0e4OD1F+RuUELgicaL6QJI2QbOKjaxFEfen9qQp2spWoEQqnSoETo
AJ/qiQlR8a+nWYl+Uz+h8bhYftNfLyKFnPSclSSpav+ldtGJEs3gzUefgPVMBCm1
oxwCfijnW1u0fdZajdeOLgiZhXF0I5+wf5Nwk/jqq8/gXgdE+EvKmctZ5pP4zZVu
gtalDzTHqAaUxg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:30 2026 by rpki-client