Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
File: 5KnudPLZhMiKs7ma5x0LfHuvgVA.mft (raw, json)
Hash identifier: vnqRAgdYLjDYuDARFRVCGJeI2hOuR3WdfgsDZ33Up5E=
Subject key identifier: 97:88:CE:5C:3E:C2:B4:81:75:13:F3:E9:69:7A:8A:35:5E:BA:5C:DC
Authority key identifier: E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
Certificate issuer: /CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Certificate serial: 019D37F7363725528D39CC291CFA43D4187E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 05:00:41 +0000
Manifest this update: Sun 29 Mar 2026 05:00:41 +0000
Manifest next update: Mon 30 Mar 2026 05:00:41 +0000
Files and hashes: 1: 5KnudPLZhMiKs7ma5x0LfHuvgVA.crl (hash: SyDWsUO0iiYeZoEXZc/q9GjwRqL7aoXQ91o56INxW0I=)
2: thh1OM4lsFyzTf1SS98D2NKoCSE.roa (hash: oxxghEjHibaYZKGUuvnL5JvUvMs1tKy3he9xg0XR7pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:36:37:25:52:8d:39:cc:29:1c:fa:43:d4:18:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Validity
Not Before: Mar 29 05:00:41 2026 GMT
Not After : Mar 30 05:00:41 2026 GMT
Subject: CN=9788ce5c3ec2b4817513f3e9697a8a355eba5cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:56:61:7b:4f:05:72:ec:1f:95:33:9f:12:
dd:f7:1e:54:98:89:0e:6e:71:71:44:e1:87:41:78:
a9:53:67:3d:74:7e:f4:47:d1:67:71:e6:b3:68:e3:
db:44:47:32:0d:39:2c:69:90:0d:02:16:fb:58:10:
b8:8c:1b:aa:3c:5f:fe:fb:63:c7:d5:8d:4e:b1:77:
23:bd:ea:e6:ac:de:c2:e2:d9:7e:ad:16:5f:a0:01:
63:e1:c3:5a:b2:ea:e4:be:d1:44:26:c5:ef:af:db:
b4:dd:4d:98:84:fd:60:a7:d4:3c:8b:04:c1:77:b7:
c3:be:c5:a9:5a:39:e6:27:91:1b:bd:fc:64:0b:45:
b7:95:53:df:2c:7b:96:88:52:65:8d:27:8a:76:f6:
65:ef:ef:5d:01:af:12:5f:91:c0:1e:2f:89:f2:fa:
85:e7:0a:4c:99:7a:48:14:11:32:59:06:22:34:9d:
cf:a4:4d:28:03:5b:d7:dc:cb:ce:32:96:cf:c8:1b:
7e:36:7f:ba:75:be:3e:3a:1c:c2:3d:0c:c4:4c:a6:
f0:53:ef:b2:75:59:d8:ab:90:af:ee:20:db:1f:3f:
7b:97:76:2c:9e:ca:06:b2:38:66:29:35:ac:a8:bc:
db:f5:c8:a5:07:db:cb:0e:24:6a:6e:64:a4:ab:0d:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:88:CE:5C:3E:C2:B4:81:75:13:F3:E9:69:7A:8A:35:5E:BA:5C:DC
X509v3 Authority Key Identifier:
keyid:E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:da:14:4a:9c:9e:02:7f:db:a8:76:4a:7f:6b:e0:85:e2:6c:
e1:f0:3c:08:96:a6:64:cd:ab:49:db:27:09:39:a4:f9:d7:93:
1a:71:d0:2a:31:65:57:7f:ab:ce:44:77:a0:d3:d9:8e:03:5d:
4e:31:ed:63:71:12:17:5e:ac:a3:bd:69:65:81:8f:de:ba:33:
5b:cf:1d:8d:af:9c:e2:cf:0a:59:4f:c4:a2:68:e1:29:48:76:
35:24:cb:93:19:a2:bd:6a:91:dd:52:44:e3:a3:c9:71:75:8b:
5a:f3:44:8b:13:ac:59:6d:bf:34:25:1b:11:51:22:06:b7:9c:
0f:ca:a7:6c:d1:99:a2:b0:59:2f:c8:0b:0c:8b:bf:b7:26:c3:
ac:c0:11:54:b2:cb:d0:fa:33:ff:0c:83:93:ba:e7:dc:90:6e:
36:58:7e:23:71:bb:c4:07:8b:ba:78:d0:63:41:71:31:74:45:
ae:00:99:b7:d9:78:79:23:36:36:d3:76:02:85:af:92:57:90:
88:92:0f:9f:98:b7:83:fb:46:fb:b8:a9:84:a2:a4:1e:38:3f:
b8:07:73:12:1b:fd:1f:c3:39:08:25:57:3c:28:d7:ba:59:76:
fd:fe:cd:02:aa:7d:f2:57:62:74:3a:2b:c1:3e:66:11:00:8d:
13:f9:20:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:17 2026 by rpki-client