Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
File: 5KnudPLZhMiKs7ma5x0LfHuvgVA.mft (raw, json)
Hash identifier: c9lVoVyBaNco8nSHw/C2+5swkPStze6vw8+n1AUdOdw=
Subject key identifier: 8D:A0:B3:7A:13:3F:F6:1A:41:0D:FA:47:C6:7C:1A:09:13:2B:49:5C
Authority key identifier: E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
Certificate issuer: /CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Certificate serial: 019E3117CFF3267C52CC190D5A685A731001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 14:01:44 +0000
Manifest this update: Sat 16 May 2026 14:01:44 +0000
Manifest next update: Sun 17 May 2026 14:01:44 +0000
Files and hashes: 1: 5KnudPLZhMiKs7ma5x0LfHuvgVA.crl (hash: KqGDPN6lWKD92LdoHunPJGnzJ/5xymVTxnKFzNjvx4E=)
2: thh1OM4lsFyzTf1SS98D2NKoCSE.roa (hash: oxxghEjHibaYZKGUuvnL5JvUvMs1tKy3he9xg0XR7pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:cf:f3:26:7c:52:cc:19:0d:5a:68:5a:73:10:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Validity
Not Before: May 16 14:01:44 2026 GMT
Not After : May 17 14:01:44 2026 GMT
Subject: CN=8da0b37a133ff61a410dfa47c67c1a09132b495c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:d4:f2:59:d9:14:92:ea:33:1b:59:a1:63:
22:05:a3:14:d7:e3:fd:e6:5f:8e:89:81:33:0c:d8:
2f:61:cf:1b:f8:f6:46:0a:c5:23:e4:5b:da:bc:ec:
92:10:15:fd:f5:9b:fe:c1:19:8f:21:b6:8d:aa:82:
b3:15:48:ba:48:2c:43:08:e2:2d:ad:a0:15:e4:2a:
87:91:28:4d:bc:a1:82:67:8f:6d:b5:2f:16:2b:af:
8e:49:11:4e:48:27:22:0f:48:96:33:8b:f7:15:f4:
58:16:38:c2:db:de:54:ec:d5:af:8a:eb:9a:e5:c2:
a9:5a:6f:24:08:60:a1:3c:cb:9e:2c:94:f5:73:02:
31:c5:13:d9:42:1f:d2:52:c2:9d:94:c3:41:40:4c:
0a:8e:11:3d:eb:79:e5:a3:8e:7b:6a:1f:21:43:7f:
65:a5:6d:23:6e:8b:41:b9:1d:bb:a8:e0:16:ef:ae:
17:ae:04:18:ea:a3:16:20:3a:bf:eb:14:fa:33:4b:
8a:c7:b2:a8:a9:a9:17:0c:00:08:77:92:a2:67:a4:
a5:d0:9a:14:30:55:51:be:96:d1:42:9a:e5:78:05:
da:84:14:99:17:1e:04:2c:fd:e3:c1:76:7f:b3:6d:
db:35:76:be:54:a6:e9:4a:8e:7b:59:e0:a9:5a:48:
d9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A0:B3:7A:13:3F:F6:1A:41:0D:FA:47:C6:7C:1A:09:13:2B:49:5C
X509v3 Authority Key Identifier:
keyid:E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d6:8d:8c:15:6b:2d:1e:fc:41:cf:01:77:e9:11:e9:9e:14:
7c:e7:6c:48:39:8a:09:9d:d0:82:be:3f:fc:23:1a:b1:b4:9a:
6f:e7:d5:cf:50:44:b0:00:b8:31:14:9f:88:9a:2b:e2:85:b0:
17:09:cb:30:52:1f:d5:55:89:d8:1d:be:69:f1:5f:89:54:f7:
79:f0:2f:03:a3:4f:3a:6d:b8:a0:f8:5f:bc:ab:99:e9:d2:4f:
38:14:11:18:ca:32:c0:aa:63:72:c1:e8:a0:64:b4:7d:cf:50:
33:cf:7f:74:41:15:d7:ae:7c:8d:d1:56:a9:d3:47:8c:a0:91:
8e:9e:e9:ac:04:6e:c8:de:6a:d5:21:b7:92:d3:0e:a3:0a:22:
e6:27:14:86:d7:64:20:cf:b9:ae:af:2b:00:16:f3:6b:5c:f1:
69:2f:4b:c8:3f:5c:81:15:2c:4e:54:09:8c:29:18:d7:21:71:
ab:f4:9f:ac:21:7e:cf:0a:19:53:42:8d:2f:0b:27:3e:86:c2:
34:e1:7b:3c:4a:05:72:de:8e:98:a1:61:05:fe:4e:cf:88:20:
db:7b:c2:c8:33:59:79:bc:19:70:75:16:b2:0a:2a:31:db:d0:
fd:e3:31:93:da:db:1b:17:ce:e5:18:55:4d:3e:d3:59:28:e7:
6d:4b:a7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:19 2026 by rpki-client