Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json)
Hash identifier: wRQL5ZMcXCbEMFVEZJHfGmjnb/s+itFC2spb66wkQz4=
Subject key identifier: 4D:F4:FC:40:54:9C:74:49:87:2A:15:8C:48:24:E4:C9:80:D7:FA:66
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 019D27E0722218991C2FB9DADDB5582469D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
Manifest number: 0D7F
Signing time: Thu 26 Mar 2026 02:01:53 +0000
Manifest this update: Thu 26 Mar 2026 02:01:53 +0000
Manifest next update: Fri 27 Mar 2026 02:01:53 +0000
Files and hashes: 1: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: 5m4xAfeXbNvXvoIqCkfV5/xqXnc272r7npws4n8FOMM=)
2: zpeTK5PwMk-4Xj5vBZGegdo8ck8.roa (hash: CqrBs9z5utywXd/u1L7nQWwUGdydAl74Sn0Il70tRPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:72:22:18:99:1c:2f:b9:da:dd:b5:58:24:69:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: Mar 26 02:01:53 2026 GMT
Not After : Mar 27 02:01:53 2026 GMT
Subject: CN=4df4fc40549c7449872a158c4824e4c980d7fa66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:95:d9:57:22:23:f1:c5:e7:4d:99:19:b4:9b:
e4:a7:7c:71:8a:70:5c:6f:5e:f3:68:fd:2b:d9:e0:
67:fc:b0:f7:b2:46:62:fe:05:ae:49:78:33:e1:e9:
a5:6e:b8:67:82:93:c6:a5:c2:a3:d9:ff:08:b7:94:
e5:ec:51:bc:a4:09:86:34:ab:9e:5f:9d:e7:be:51:
03:e8:96:8e:8f:ea:e0:5c:1d:f1:ce:fa:41:c4:1d:
7d:54:3a:02:96:ab:45:7c:fd:27:73:44:e7:38:ea:
d6:5f:f2:5f:63:7a:c9:ab:71:74:0d:b4:dc:ab:92:
19:15:70:22:1f:9a:4e:20:80:a9:43:20:45:0d:6e:
c9:8c:40:8b:fb:c1:1d:2b:65:2b:76:1c:50:71:54:
3c:50:8e:0c:bb:16:ec:88:29:8c:85:3d:c1:3c:11:
02:c5:31:ed:11:bb:16:b0:22:68:d7:8c:df:07:27:
2d:c7:57:f8:ab:5c:ea:85:3f:d8:dd:57:c3:bd:06:
94:b7:c7:20:88:b9:12:bb:01:af:92:e3:23:53:78:
1e:87:3f:ee:98:cf:c4:1c:98:c3:b1:9b:b9:46:f8:
ce:03:83:9e:e1:84:11:18:61:a1:94:22:7a:df:a1:
76:9a:a5:c0:db:82:29:d6:c3:f6:3c:1e:3b:ae:7b:
86:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F4:FC:40:54:9C:74:49:87:2A:15:8C:48:24:E4:C9:80:D7:FA:66
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:20:a3:8d:91:37:93:ac:67:20:ab:fc:04:b7:f6:c0:ed:a3:
85:9a:a3:48:be:a8:e8:2c:42:d5:f1:bc:e3:d5:42:d6:20:43:
03:f9:e8:30:56:74:0d:ae:79:ba:46:de:4a:60:1f:ed:51:04:
d0:a6:6a:b5:03:8c:25:cf:82:12:8e:06:ef:10:1b:20:4a:88:
5a:f0:ec:e1:26:70:04:e8:35:fd:0f:11:db:71:71:1c:85:1f:
b7:73:a4:da:d5:ac:74:f0:ae:85:99:9b:94:b6:a6:e5:2d:40:
b1:4c:bb:ee:3a:38:e0:58:86:a0:41:ea:70:ff:96:53:c6:61:
4f:7e:c0:65:54:3a:66:70:99:b7:b1:7a:4f:60:8a:e5:72:b5:
39:7e:73:a9:97:af:ce:57:78:7c:c9:27:dc:b3:1f:1d:87:a1:
fb:88:3d:4a:59:41:6d:32:7e:49:a9:63:50:be:15:9d:58:8a:
8b:94:69:c5:3c:fd:42:53:2c:d4:04:00:b9:1b:9e:b7:c0:2c:
cb:92:57:a5:45:7b:9f:cd:01:a4:05:40:ef:b0:05:60:dc:90:
31:a3:99:19:86:ab:91:e8:22:69:d9:0e:aa:3c:e0:8b:79:18:
70:a0:40:df:bc:2b:d8:ee:6f:29:a9:41:b6:be:de:b3:5e:73:
7c:69:b3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:13:08 2026 by rpki-client