Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
File: 5KnudPLZhMiKs7ma5x0LfHuvgVA.mft (raw, json)
Hash identifier: kTdZBPj9XsVbrph4WShhJf4uQDZUdrUoeOg356jZxsQ=
Subject key identifier: 35:AA:40:1E:DC:ED:38:A7:F7:E6:C4:1D:8C:9E:C6:42:32:F7:AC:B7
Authority key identifier: E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
Certificate issuer: /CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Certificate serial: 019D9A75067B9986E3BC186AED3E07EF03C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 08:00:53 +0000
Manifest this update: Fri 17 Apr 2026 08:00:53 +0000
Manifest next update: Sat 18 Apr 2026 08:00:53 +0000
Files and hashes: 1: 5KnudPLZhMiKs7ma5x0LfHuvgVA.crl (hash: x+dR3AqaTaCbcjUcegSiDf2v1kvfHQuB2ftGIxCreRE=)
2: thh1OM4lsFyzTf1SS98D2NKoCSE.roa (hash: oxxghEjHibaYZKGUuvnL5JvUvMs1tKy3he9xg0XR7pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:06:7b:99:86:e3:bc:18:6a:ed:3e:07:ef:03:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Validity
Not Before: Apr 17 08:00:53 2026 GMT
Not After : Apr 18 08:00:53 2026 GMT
Subject: CN=35aa401edced38a7f7e6c41d8c9ec64232f7acb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:17:7a:0d:79:a4:59:a0:87:f6:c1:c2:3d:
d4:ef:e8:2c:73:db:22:04:34:9f:25:3c:cb:4f:97:
9d:34:0a:f3:99:54:05:96:4c:6f:f7:fc:c2:ec:b9:
c5:ef:21:3e:36:89:7c:ca:ab:8e:80:4d:ab:e4:f4:
74:c5:60:25:ec:1f:c2:2c:75:e6:3a:83:e8:33:f0:
81:d0:90:f1:14:01:b4:35:15:2c:00:a4:f8:63:20:
c4:a4:5f:a9:49:ff:e9:66:90:64:8c:13:96:a0:e3:
d8:97:f2:37:d3:45:5a:ee:96:28:c9:ef:b8:2e:59:
d2:a6:29:9f:7b:f3:66:55:bf:fb:0b:2c:7b:77:f9:
57:9f:82:cb:fa:93:48:fb:a1:61:90:04:ce:0a:49:
db:3f:6b:37:19:1f:f4:61:12:a1:11:0d:47:7a:9a:
b1:31:3e:ed:97:f2:a3:d2:0d:93:ea:80:6e:8e:69:
a7:94:64:7d:06:6b:40:5c:79:35:b5:c4:7d:28:7e:
ab:d7:3a:66:07:11:ed:ab:70:0f:c8:8c:d9:a4:92:
42:16:b4:92:6e:12:2d:bd:98:35:0c:1a:0d:39:e1:
35:c7:d6:50:ac:d4:b1:07:a5:13:cb:4e:99:9a:14:
59:f7:d4:76:41:b1:24:ea:9e:2b:55:58:2f:19:a6:
91:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AA:40:1E:DC:ED:38:A7:F7:E6:C4:1D:8C:9E:C6:42:32:F7:AC:B7
X509v3 Authority Key Identifier:
keyid:E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6b:46:62:7a:54:c7:90:1d:4a:bc:fe:85:0e:08:c8:18:68:
28:fb:39:5c:9a:ed:af:b7:64:48:90:55:e3:46:4c:f3:95:b4:
8b:d6:1a:e7:7c:5f:fc:5c:e9:7c:66:5c:da:cc:65:d4:59:07:
b5:80:71:cf:97:a0:06:47:7e:8f:5d:3b:0f:9c:2d:33:bd:1d:
2b:0e:50:81:6d:5f:9a:1b:e9:b8:f7:d9:9d:f7:91:e1:20:21:
9a:c3:5f:6c:bf:4b:f9:4c:67:12:89:46:02:af:26:cf:fa:7b:
bc:00:3e:fc:f0:f6:51:69:97:6b:f9:3f:45:b0:9c:60:de:d4:
86:eb:0d:4d:96:3f:19:31:1c:53:a8:0d:d9:cb:4f:55:2e:24:
96:9b:4d:d4:59:cb:0d:ca:c7:e0:bb:5d:d1:c4:0f:5d:e2:96:
f2:f0:ba:23:57:00:75:2b:7c:46:03:df:9e:ae:6f:76:a8:4d:
48:ee:6e:66:5d:66:ec:ba:bf:36:4b:df:8c:22:bb:2a:b7:55:
b6:ed:20:64:f1:44:b2:c8:17:8f:51:51:f0:e0:1b:8b:03:10:
8d:7e:d1:d3:eb:5a:92:ef:0c:af:c3:3d:24:dc:b6:8e:fe:32:
b4:67:b0:8f:dd:96:1e:c1:9b:7a:54:80:15:dc:ad:4b:c5:a8:
a2:cf:88:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:13:10 2026 by rpki-client