Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
File: 5KnudPLZhMiKs7ma5x0LfHuvgVA.mft (raw, json)
Hash identifier: C5lh6rmfL8kT7EuPzEw5tjuZMDhgTVZslNfF7o1z37I=
Subject key identifier: CB:A1:53:2B:0A:73:3E:DB:C6:47:AF:D3:F6:DA:31:94:90:DA:CF:19
Authority key identifier: E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
Certificate issuer: /CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Certificate serial: 019FA9AC0A69A13D2DDBED37E85008A32800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 17:00:51 +0000
Manifest this update: Tue 28 Jul 2026 17:00:51 +0000
Manifest next update: Wed 29 Jul 2026 17:00:51 +0000
Files and hashes: 1: 5KnudPLZhMiKs7ma5x0LfHuvgVA.crl (hash: 8zKQCixdI4qrr+4BAuY9D3KJasEfU3SYaIxL5RnOgF8=)
2: gfETidL48OMQzoqlTVHEhuxjkn8.roa (hash: OMLRfX7UIp8nzj3et4p8Hhvdqe+GP/Oa+B08VXrWwwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:0a:69:a1:3d:2d:db:ed:37:e8:50:08:a3:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Validity
Not Before: Jul 28 17:00:51 2026 GMT
Not After : Jul 29 17:00:51 2026 GMT
Subject: CN=cba1532b0a733edbc647afd3f6da319490dacf19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:ed:2c:a6:2f:29:78:3b:44:0d:fc:2e:d2:
15:08:06:c0:8d:a5:0f:3b:5c:1e:fb:c0:6f:0e:29:
2e:89:d2:b7:c8:a5:f8:bc:ca:f7:36:df:a4:1f:b3:
db:09:8f:ff:4f:34:8b:1a:bf:10:6d:2d:7d:78:48:
ea:a9:16:df:3a:3b:ee:69:c1:e7:59:33:08:eb:0d:
07:8c:88:21:82:18:22:9b:fc:1d:fe:43:33:93:56:
2b:57:48:67:e5:33:73:ec:da:d7:3b:c1:dd:91:61:
7d:92:03:eb:0a:26:4b:08:98:71:c8:39:32:f9:9e:
9c:ab:61:84:a8:49:19:8b:d9:d1:80:e6:00:1f:14:
e5:63:c6:d2:71:98:cf:e2:89:43:fb:0b:45:00:9b:
85:1c:d1:b3:6f:20:5a:b4:7a:00:22:ea:17:ae:66:
c8:8e:e5:44:8c:17:84:81:f6:26:0e:a8:91:7c:3c:
95:db:c6:ff:0d:70:d3:40:d2:84:1d:1c:30:ce:88:
fb:a9:5d:f0:21:e0:b3:8b:65:4f:92:d9:3d:c9:cb:
f7:f8:0c:86:a2:2b:ba:e7:02:a8:2f:df:3d:61:6d:
08:04:7c:1b:55:32:ed:78:73:a8:cd:08:b9:05:a8:
53:d9:bd:b6:28:0f:be:1f:5f:37:dd:8d:88:b7:49:
59:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A1:53:2B:0A:73:3E:DB:C6:47:AF:D3:F6:DA:31:94:90:DA:CF:19
X509v3 Authority Key Identifier:
keyid:E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e8:9e:86:42:1c:a6:4c:22:ab:c4:e7:8f:81:a4:30:fd:fa:
50:ab:33:8b:bb:5b:7e:8c:6c:17:c1:4c:b6:30:c2:41:32:79:
fe:12:de:9b:53:46:ab:95:6a:02:de:05:6b:21:7d:ed:b3:3b:
66:25:a9:52:cf:9d:e8:ee:53:14:fc:91:a3:b3:2d:13:ed:f9:
b8:e9:7d:db:20:ac:4c:cc:cc:be:ee:b8:f6:83:a2:fd:05:cb:
31:d7:6b:59:54:9f:38:71:c6:b0:22:9c:20:b2:c5:b4:51:de:
ea:3f:6a:5f:65:51:cd:78:c8:4d:86:dc:98:59:27:3b:f2:81:
02:ff:90:c3:9b:31:46:9b:a1:bb:63:50:88:cb:d4:08:10:bb:
fb:25:04:cc:48:04:6e:a3:b7:2a:99:f3:c4:9d:5c:07:12:13:
f3:94:bc:e4:41:fa:0c:15:ba:85:08:c6:7b:68:26:f3:0a:b8:
05:64:6e:8c:b6:a6:b8:89:37:ad:59:cb:ba:ed:23:c0:b0:61:
3b:04:d8:fd:92:74:24:e6:da:af:0d:87:59:bb:f3:f0:c4:98:
21:d6:f0:71:87:d3:a5:5f:dc:c4:64:16:5f:6e:4a:e1:05:b4:
d7:f7:fb:42:44:68:75:24:f8:58:d8:2d:20:d6:c1:c3:b1:6c:
fa:91:e3:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prAppoT0t2+036FAIoygAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTllZTc0ZjJkOTg0Yzg4YWIzYjk5YWU3MWQwYjdjN2Jh
ZjgxNTAwHhcNMjYwNzI4MTcwMDUxWhcNMjYwNzI5MTcwMDUxWjAzMTEwLwYDVQQD
EyhjYmExNTMyYjBhNzMzZWRiYzY0N2FmZDNmNmRhMzE5NDkwZGFjZjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3XtLKYvKXg7RA38LtIVCAbAjaUP
O1we+8BvDikuidK3yKX4vMr3Nt+kH7PbCY//TzSLGr8QbS19eEjqqRbfOjvuacHn
WTMI6w0HjIghghgim/wd/kMzk1YrV0hn5TNz7NrXO8HdkWF9kgPrCiZLCJhxyDky
+Z6cq2GEqEkZi9nRgOYAHxTlY8bScZjP4olD+wtFAJuFHNGzbyBatHoAIuoXrmbI
juVEjBeEgfYmDqiRfDyV28b/DXDTQNKEHRwwzoj7qV3wIeCzi2VPktk9ycv3+AyG
oiu65wKoL989YW0IBHwbVTLteHOozQi5BahT2b22KA++H1833Y2It0lZ6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuhUysKcz7bxkev0/baMZSQ2s8ZMB8GA1UdIwQY
MBaAFOSp7nTy2YTIirO5mucdC3x7r4FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtudWRQTFpoTWlLczdtYTV4MExmSHV2Z1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lYWRjOTUtZGFhZi00Nzc2LTliZTgt
ZDJjMGJlNDQ4NTYxLzEvNUtudWRQTFpoTWlLczdtYTV4MExmSHV2Z1ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9lYWRjOTUtZGFhZi00Nzc2LTliZTgtZDJjMGJlNDQ4NTYx
LzEvNUtudWRQTFpoTWlLczdtYTV4MExmSHV2Z1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+iehkIc
pkwiq8Tnj4GkMP36UKszi7tbfoxsF8FMtjDCQTJ5/hLem1NGq5VqAt4FayF97bM7
ZiWpUs+d6O5TFPyRo7MtE+35uOl92yCsTMzMvu649oOi/QXLMddrWVSfOHHGsCKc
ILLFtFHe6j9qX2VRzXjITYbcmFknO/KBAv+Qw5sxRpuhu2NQiMvUCBC7+yUEzEgE
bqO3KpnzxJ1cBxIT85S85EH6DBW6hQjGe2gm8wq4BWRujLamuIk3rVnLuu0jwLBh
OwTY/ZJ0JObarw2HWbvz8MSYIdbwcYfTpV/cxGQWX25K4QW01/f7QkRodST4WNgt
INbBw7Fs+pHjIQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:29 2026 by rpki-client