Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json)
Hash identifier: W+IKLH4q1/0mZ8lfT0G9y1ocSvBTgUXUPmxmlAq+qJE=
Subject key identifier: C0:C1:FC:78:E7:50:CA:42:EC:58:A7:73:A5:21:8A:07:23:8D:25:AB
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 019F93C888A17842D7540E7FD51CF434968C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
Manifest number: 0EC0
Signing time: Fri 24 Jul 2026 11:00:20 +0000
Manifest this update: Fri 24 Jul 2026 11:00:20 +0000
Manifest next update: Sat 25 Jul 2026 11:00:20 +0000
Files and hashes: 1: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: swHJoe6D94uizZoCoEQmXf1kLlRvsD0BR5A/GD8dF44=)
2: zpeTK5PwMk-4Xj5vBZGegdo8ck8.roa (hash: CqrBs9z5utywXd/u1L7nQWwUGdydAl74Sn0Il70tRPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:88:a1:78:42:d7:54:0e:7f:d5:1c:f4:34:96:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: Jul 24 11:00:20 2026 GMT
Not After : Jul 25 11:00:20 2026 GMT
Subject: CN=c0c1fc78e750ca42ec58a773a5218a07238d25ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:30:e7:a7:14:35:4a:fd:3d:5f:8c:d5:d7:91:
f8:a0:0f:5f:58:71:92:10:5d:98:f4:ec:d2:67:26:
2a:ca:b5:44:18:58:e2:17:b5:a1:4d:46:4d:67:bf:
21:c1:ef:cc:78:a9:25:a1:a7:93:95:07:ed:bd:f3:
88:c0:c6:33:75:e9:ab:6d:4c:66:83:b6:68:01:2f:
c4:a7:2c:52:68:82:f9:66:b7:fb:ca:39:bf:57:5a:
f5:86:27:9d:b6:0c:f7:d3:70:12:47:cd:ed:28:89:
ce:11:a0:bf:1e:67:07:1b:c9:81:b6:a9:9e:c4:46:
3c:6b:01:36:e8:70:63:2b:a0:c6:c8:11:9e:6f:3a:
29:e7:ee:6e:b8:cc:7e:be:d3:e3:ff:e5:a8:51:e1:
cc:81:da:15:2d:da:51:30:58:12:a3:5a:98:ad:54:
1c:eb:85:3a:12:bc:2e:65:a1:77:1d:70:83:3b:32:
2f:89:73:df:e6:69:d6:70:28:ed:6e:87:95:7b:ed:
5a:50:7e:4d:57:04:7c:0f:51:e2:34:60:af:5b:17:
0c:8b:0a:91:7f:5b:10:7b:cd:f7:e0:22:9a:92:ac:
af:c1:07:b9:80:be:88:ce:a1:cc:59:c9:c8:dc:f8:
bb:43:e1:0d:0c:5a:a0:48:de:4d:71:62:a1:5a:0e:
a4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C1:FC:78:E7:50:CA:42:EC:58:A7:73:A5:21:8A:07:23:8D:25:AB
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:43:dd:37:33:bc:c8:68:49:0d:22:63:e4:96:f5:05:ef:a9:
cd:29:b6:8d:4b:02:fd:1d:47:17:1a:02:d8:2c:b0:7a:86:13:
a9:21:bd:9b:23:48:6f:8d:30:6a:02:ef:3e:ef:36:30:7a:3f:
5e:95:2e:02:c6:d9:94:3d:0e:3e:44:00:9e:5d:d4:43:b0:8d:
6b:35:46:48:19:8b:4b:c6:00:1f:fe:62:da:a4:a9:75:1c:d2:
6d:cb:6c:59:68:21:96:82:d8:40:42:33:7d:e0:a7:95:66:7c:
a5:7f:99:bb:98:24:1f:02:03:f0:c2:05:e3:ce:f6:fc:ab:0f:
ca:bd:dd:90:1a:c7:96:c2:00:cd:fb:eb:79:af:7e:78:db:4a:
40:c5:db:36:c6:72:62:a3:51:c5:d3:ac:dd:34:9e:42:64:37:
90:45:44:ec:f3:6e:3c:14:b7:c9:b1:f7:f8:00:0c:ef:d5:9a:
58:48:c4:e6:31:71:63:5a:27:ff:dc:af:3d:6b:f6:61:92:32:
3b:14:fb:a8:c1:00:e4:13:a4:3c:b6:04:12:7e:c0:b5:e8:87:
4c:7b:0d:dd:13:61:dd:48:5b:b7:4b:c7:04:49:0c:3b:9c:61:
74:94:60:4e:e4:fe:75:81:92:3b:ef:a6:a3:a6:2e:a0:a9:f2:
7f:e7:84:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:57:17 2026 by rpki-client