Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
File: a-5EwhI0JTYYsNeza5Djy1xA3tE.mft (raw, json)
Hash identifier: IBYTIodhD0PLKoiYTJW2ake+BKxrKChZFxi62+PVSI8=
Subject key identifier: 56:EB:8A:49:BC:81:73:5F:37:DA:07:09:C3:C5:66:95:BD:8C:BF:0D
Authority key identifier: 6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
Certificate issuer: /CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Certificate serial: 019D273B1FAF1CE38B5AA12BD8DE79BF9C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 23:01:19 +0000
Manifest this update: Wed 25 Mar 2026 23:01:19 +0000
Manifest next update: Thu 26 Mar 2026 23:01:19 +0000
Files and hashes: 1: a-5EwhI0JTYYsNeza5Djy1xA3tE.crl (hash: kAxGtIvZjZFSB69BpE+TWsZdlAirih8kCGoZ1ZBkiVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:1f:af:1c:e3:8b:5a:a1:2b:d8:de:79:bf:9c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Validity
Not Before: Mar 25 23:01:19 2026 GMT
Not After : Mar 26 23:01:19 2026 GMT
Subject: CN=56eb8a49bc81735f37da0709c3c56695bd8cbf0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:09:1a:ca:0d:dd:3b:52:47:b7:e1:ca:8a:a0:
a3:12:7a:8f:f4:c4:4a:ac:ff:18:72:67:28:42:16:
00:4c:5b:a2:7b:2b:b3:d7:ff:54:6d:36:2a:a8:a5:
56:09:4a:cd:96:34:01:36:33:52:aa:fe:6b:08:dd:
8d:28:8c:e8:48:af:5f:d9:78:34:85:34:91:55:a4:
10:11:2a:56:0f:a7:37:02:1e:3a:a3:d1:44:f6:24:
c3:c5:aa:8a:f9:77:11:d3:4d:50:72:77:db:da:0d:
36:2a:b7:46:4a:d7:cc:6e:1f:85:6d:b5:c2:4a:c7:
88:f0:ee:fc:65:00:cc:c1:35:34:19:a3:8c:dd:9b:
40:24:e7:1c:38:9a:b7:1a:63:d8:5d:45:58:95:18:
0b:b2:3f:47:3e:b2:48:c1:d9:63:fe:8a:e7:ef:9d:
10:13:3d:63:73:eb:05:88:4f:3d:79:db:a3:25:38:
dc:3d:99:59:23:3a:ff:9b:4e:3b:fe:9b:ae:bb:58:
2d:d0:86:37:1d:9b:32:de:b8:7b:04:95:d1:bd:90:
e2:35:47:4c:18:a6:07:84:c9:68:a8:a4:b7:4a:89:
38:50:df:b9:26:90:2f:68:8c:65:1a:7b:c4:7b:59:
56:c1:24:03:44:cc:a4:45:ff:ae:2e:46:23:08:3c:
6f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EB:8A:49:BC:81:73:5F:37:DA:07:09:C3:C5:66:95:BD:8C:BF:0D
X509v3 Authority Key Identifier:
keyid:6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:3e:dc:92:f8:45:85:ee:2d:39:aa:c5:9d:2c:41:72:4d:66:
b6:be:53:ee:88:00:1d:bd:a6:c1:75:a1:55:ac:c2:ac:ef:2a:
f9:ba:c9:4e:42:a2:23:22:38:95:ed:e5:d9:40:04:08:03:ab:
31:cb:b7:02:94:a9:49:7d:82:c6:03:eb:3d:c1:b3:6b:fe:01:
26:c9:cc:06:7b:43:e5:fd:c5:af:29:46:bc:c2:1d:05:df:5b:
c4:fd:75:f8:2d:f8:28:9d:c5:7c:85:99:fd:1f:19:20:8e:3b:
08:df:9c:c6:86:d9:d6:d5:77:ee:a5:4a:cf:31:68:68:80:90:
0f:09:17:e9:98:d6:ac:09:de:78:a9:bc:a9:eb:a7:80:1c:75:
d0:de:bc:93:e6:85:0c:ef:51:25:e6:f3:ac:10:dc:45:53:9a:
80:6e:93:f6:c9:84:6e:aa:91:c6:59:e9:86:f4:8f:99:6e:6a:
94:1a:61:3c:01:7d:4f:0d:f1:db:cc:b5:38:58:4f:40:4a:cd:
f9:a9:8e:50:a5:71:ee:f2:22:34:da:3d:ba:79:65:70:6c:33:
aa:7f:74:0c:bb:3b:ce:28:53:c8:96:36:95:d1:67:50:a6:fd:
44:09:09:39:64:6f:94:9d:76:78:db:2d:a3:e7:02:d8:41:cc:
dd:cd:fb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:36 2026 by rpki-client