Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json)
Hash identifier: V3rjhpCvOt0iP2yOUcZzt68/kxANvfoIqcOGe4XEa2c=
Subject key identifier: 44:D6:B9:57:52:71:39:E5:E1:29:C2:8A:19:32:D8:A9:AA:2B:D6:25
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 019E1F1103F2173D56ACCBA40C8675886ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
Manifest number: 0DFF
Signing time: Wed 13 May 2026 02:01:09 +0000
Manifest this update: Wed 13 May 2026 02:01:09 +0000
Manifest next update: Thu 14 May 2026 02:01:09 +0000
Files and hashes: 1: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: q4hi85jVZYRm3Ta3LBuAWe7U2MULeRpmVRevESkG8mI=)
2: zpeTK5PwMk-4Xj5vBZGegdo8ck8.roa (hash: CqrBs9z5utywXd/u1L7nQWwUGdydAl74Sn0Il70tRPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:03:f2:17:3d:56:ac:cb:a4:0c:86:75:88:6e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: May 13 02:01:09 2026 GMT
Not After : May 14 02:01:09 2026 GMT
Subject: CN=44d6b957527139e5e129c28a1932d8a9aa2bd625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:67:e2:f9:50:d5:52:29:4b:df:b7:1e:76:0a:
37:56:c2:84:50:ce:bf:91:4c:64:e7:b7:23:ed:9d:
c5:7b:d8:7c:e9:5d:89:da:85:21:c7:72:7c:d4:bd:
f1:5a:fe:36:8d:1e:e2:d0:2c:4f:4d:85:75:31:9a:
74:04:e3:b8:7e:22:d7:0a:87:c1:f8:55:9c:cc:76:
a8:a3:68:64:e3:6b:3c:1b:00:c4:37:7c:66:a0:fb:
d6:50:28:17:f9:a7:f6:4b:2e:0f:26:c4:a9:00:78:
91:c1:cf:10:71:5c:02:ec:29:b2:7a:64:93:d5:58:
17:a9:f6:a1:d9:5a:4a:d3:20:c5:a9:7d:a5:27:9a:
2e:a4:43:5c:ea:a1:35:5e:71:f5:5d:01:3f:9d:50:
de:c3:9d:c9:4a:c1:2f:65:db:1c:32:60:cb:19:8e:
cd:5e:d9:1c:b5:59:2f:af:85:cc:b4:6f:c9:31:01:
f0:c8:39:41:22:f6:b0:2c:d4:32:5c:37:4d:2f:ad:
17:c7:0e:14:33:7c:d6:e2:31:b2:fd:4b:1a:0a:5c:
58:cb:8e:51:03:77:09:9d:28:95:d4:18:17:e4:07:
55:b2:71:d6:01:9b:a6:16:4f:da:74:58:50:d6:14:
76:71:4b:38:77:2c:9d:d5:b6:4b:46:0d:99:2b:53:
a5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D6:B9:57:52:71:39:E5:E1:29:C2:8A:19:32:D8:A9:AA:2B:D6:25
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f6:04:ae:e5:eb:ca:9b:37:24:11:1c:84:24:dc:58:78:39:
00:f3:bb:51:49:42:5a:18:70:e3:29:1e:34:a1:ae:49:f2:27:
d0:34:dc:9b:85:09:b0:0f:c0:05:b3:37:c5:94:95:1e:cd:3b:
f1:9c:e7:50:3f:7f:94:4f:25:83:a6:b9:79:ed:f9:5e:31:a9:
e7:af:36:48:bb:2c:3d:86:cb:88:d7:5a:6a:cd:d7:be:8a:50:
9a:b0:2b:56:4c:ba:47:de:7c:ef:1f:6d:d5:b2:6f:c7:02:92:
16:f3:60:08:44:f1:ee:71:bd:c0:5b:7e:83:a2:85:24:3d:54:
fa:c5:1f:e9:64:6d:8d:ac:43:14:a3:39:4e:16:a3:6b:20:26:
77:33:13:e3:19:11:de:60:7b:5e:14:b7:da:30:fa:ce:04:81:
6c:26:0f:b1:ae:1e:d9:81:a9:9c:b9:f2:66:44:cd:f0:4e:dd:
e7:5c:39:9f:ae:30:b3:7c:ef:fb:eb:87:71:ed:56:df:e9:13:
17:c9:44:0d:a5:01:67:8c:79:16:13:d7:0d:d6:68:4e:cc:cd:
aa:25:70:9d:a5:33:02:dd:6d:b2:9a:ee:c8:97:7b:52:92:1b:
56:c8:49:79:e3:e7:52:dc:d7:f6:b3:0f:ae:11:17:fe:5e:ab:
9f:0d:72:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:20:24 2026 by rpki-client