Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
File: 5KnudPLZhMiKs7ma5x0LfHuvgVA.mft (raw, json)
Hash identifier: G9w2qACk/5yCjksBUFyXMJk6dm0/tCrw4aaBdnvNDRI=
Subject key identifier: BE:5F:AC:BD:D2:20:0E:5E:09:3E:8E:3F:6C:89:70:86:06:AD:78:02
Authority key identifier: E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
Certificate issuer: /CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Certificate serial: 019CAAFD36FAC50590955FFFC8ED3ED3C0F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 20:00:47 +0000
Manifest this update: Sun 01 Mar 2026 20:00:47 +0000
Manifest next update: Mon 02 Mar 2026 20:00:47 +0000
Files and hashes: 1: 5KnudPLZhMiKs7ma5x0LfHuvgVA.crl (hash: e+sNGMlc2UdM+AsCQy+2KnmwcLbWLC1GQrAaM/c9fK0=)
2: thh1OM4lsFyzTf1SS98D2NKoCSE.roa (hash: oxxghEjHibaYZKGUuvnL5JvUvMs1tKy3he9xg0XR7pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:36:fa:c5:05:90:95:5f:ff:c8:ed:3e:d3:c0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Validity
Not Before: Mar 1 20:00:47 2026 GMT
Not After : Mar 2 20:00:47 2026 GMT
Subject: CN=be5facbdd2200e5e093e8e3f6c89708606ad7802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:8d:fb:08:ef:20:05:0f:60:e7:33:4e:52:
fc:d1:2b:4b:f9:0f:75:b2:0d:84:aa:dd:f2:50:d7:
c1:a5:76:67:36:f7:0a:39:9a:1b:83:8f:26:3f:f5:
fa:ba:01:06:7c:86:ed:ec:02:ad:d1:f5:f6:a9:fc:
4d:c5:7b:fc:00:5e:5d:2c:2b:61:47:f9:9e:5c:a6:
30:6f:a6:68:ea:00:09:c3:eb:ce:06:5e:7f:9b:84:
0d:3a:93:4f:48:0e:fa:25:c8:70:7b:8d:77:35:3f:
42:49:6a:f6:36:ce:7b:87:ab:dd:be:4d:fa:42:8a:
58:fc:b2:cd:42:c1:0f:22:0b:a6:11:67:dc:05:bd:
71:a5:e4:b5:3c:5f:20:11:23:b7:c5:21:07:02:c4:
be:8e:6e:74:22:e1:14:d3:f6:3c:a7:78:06:37:e1:
ce:0d:e0:08:38:8e:63:8f:c0:a3:d6:15:ed:e6:a6:
6f:29:f4:88:37:e6:5f:dc:e7:f5:96:6e:f4:8c:6d:
d2:11:c7:38:f8:62:f5:82:12:77:38:81:da:25:29:
78:1e:7a:c1:ac:b8:70:74:d2:56:19:8e:b9:71:fc:
f4:61:18:56:d7:6d:ae:27:fe:3f:72:e8:3e:2f:2a:
03:a2:da:71:25:18:fc:8f:8c:85:53:a9:88:3e:e9:
53:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5F:AC:BD:D2:20:0E:5E:09:3E:8E:3F:6C:89:70:86:06:AD:78:02
X509v3 Authority Key Identifier:
keyid:E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:81:77:6a:4e:5b:9d:80:f6:bd:e8:28:f0:0e:26:31:93:10:
89:fb:19:12:2f:70:b7:d3:1e:16:27:5f:cf:84:16:10:ee:85:
6a:c4:5b:85:a0:1c:1f:3d:cc:aa:b0:83:f1:b2:63:29:3b:da:
2a:50:66:f8:cc:eb:e9:16:c3:a0:52:23:57:05:a2:5e:b4:e2:
69:4a:1d:9c:2d:aa:61:a7:0b:f4:87:fc:c6:5e:f0:a2:93:25:
9e:4d:fa:71:82:a0:6a:d0:63:80:20:54:50:3b:48:91:c3:07:
6b:5e:1f:d1:c6:8f:22:80:a8:c2:8f:50:ff:62:13:87:31:2e:
e4:fc:27:d4:71:7b:a7:6a:d1:d0:3e:85:11:6e:e0:bd:f3:55:
31:fb:44:33:df:36:a5:69:b8:8a:ef:2f:43:5c:e0:fe:4b:cc:
aa:69:45:ff:b9:60:ad:50:21:df:d7:a5:b4:31:37:cc:5b:87:
7f:b3:fb:d6:10:86:52:45:c8:61:32:c6:aa:4d:8a:50:e3:9e:
51:60:cf:1a:2e:80:65:d4:0f:e5:15:8f:61:bc:70:c4:ef:ca:
fd:9b:73:70:8a:b1:09:31:3a:a2:e8:f0:08:f9:53:0d:e8:1e:
aa:19:b1:19:fa:d3:f6:f7:ce:f9:c8:63:e6:3c:c1:f9:d7:71:
c1:6b:72:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:35 2026 by rpki-client