Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
File: knaysJMpLF-nXm4UwqSZrIR-QWs.mft (raw, json)
Hash identifier: oGpDyTzQZDUA8CcHRRUppmbOJoprMvar1P5p56gVc/w=
Subject key identifier: CA:12:FD:38:4B:ED:76:CF:A3:1F:A1:08:0F:68:F2:1B:30:A9:52:2E
Authority key identifier: 92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B
Certificate issuer: /CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
Certificate serial: 019D2AE10A0EBD34D16E880905BAE01DDF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
Manifest number: 1658
Signing time: Thu 26 Mar 2026 16:01:24 +0000
Manifest this update: Thu 26 Mar 2026 16:01:24 +0000
Manifest next update: Fri 27 Mar 2026 16:01:24 +0000
Files and hashes: 1: knaysJMpLF-nXm4UwqSZrIR-QWs.crl (hash: uDdWUjRO9wT4jUnk4SEvx2Rok8MlmYc4GzBKpD/tDBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:0a:0e:bd:34:d1:6e:88:09:05:ba:e0:1d:df:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
Validity
Not Before: Mar 26 16:01:24 2026 GMT
Not After : Mar 27 16:01:24 2026 GMT
Subject: CN=ca12fd384bed76cfa31fa1080f68f21b30a9522e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:f9:d5:a7:68:90:45:80:9b:88:03:ff:5f:
fb:ee:05:90:ec:f8:00:c2:fc:b9:23:97:0c:e9:10:
26:a0:bf:f0:c9:cb:7b:f9:ec:b7:03:2f:a1:a0:b8:
c7:a5:d6:28:72:59:62:fd:ca:62:bf:cb:9f:ad:39:
59:d8:2b:05:a5:79:d4:15:89:0f:66:cb:3b:36:aa:
a5:4c:75:32:17:6d:1f:a6:73:0a:24:cd:5c:37:b7:
68:97:06:77:26:f4:60:fb:96:f6:d4:fa:2d:9c:dd:
9d:e0:ae:9a:1b:4a:a0:ce:5d:c0:67:49:3b:c3:10:
e6:82:0e:48:08:93:eb:53:13:98:f4:79:f5:4e:25:
cd:0d:b3:9a:c2:02:da:4d:09:49:91:5f:98:3e:dd:
eb:15:c4:2b:8f:90:9a:77:d4:5c:5e:40:12:8d:df:
45:2c:20:f4:93:6e:aa:36:15:43:4f:e9:28:33:ca:
2a:65:75:7a:78:44:ad:9a:2e:91:fc:d4:6c:c2:9a:
4a:0b:d1:53:2a:91:5a:a5:64:96:50:36:d0:a3:3d:
10:02:f7:fe:74:6a:39:cf:c4:eb:e8:02:ac:07:42:
0e:fa:c6:b3:d2:9a:44:dd:f2:3d:58:1f:90:c6:11:
17:e1:f8:0d:03:cf:b1:d7:6f:47:92:c4:84:cb:4d:
5c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:12:FD:38:4B:ED:76:CF:A3:1F:A1:08:0F:68:F2:1B:30:A9:52:2E
X509v3 Authority Key Identifier:
keyid:92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6d:26:7c:2e:0c:68:31:c6:fe:74:97:cc:af:47:b0:92:85:
68:9a:74:f5:a9:29:67:d5:da:86:9c:c9:30:43:eb:79:53:81:
f5:91:f7:44:00:e2:c4:5b:42:7c:5e:b0:f0:c8:d1:d9:74:64:
ba:2d:32:53:57:c4:7a:eb:6c:61:ca:94:7a:11:9d:55:f9:88:
74:ca:79:6a:cc:5d:91:66:f4:c0:90:88:66:f5:12:34:8b:bc:
ee:4e:bd:e0:60:1b:88:50:35:d2:e9:0a:43:ba:5c:9d:cb:21:
ed:dd:f6:57:15:7b:b4:b7:bc:4b:e2:5c:b8:4c:ed:6c:4b:4c:
c4:3c:e3:4e:6a:62:b3:cd:fe:ea:40:d8:bb:1d:40:24:73:7f:
b9:e6:34:45:b1:1b:3d:4d:59:54:c9:c9:8b:a0:f9:31:e8:e2:
7e:b0:d4:5d:8b:22:ba:d3:38:34:63:fd:f1:e9:e6:a8:c5:06:
4f:0a:02:6e:13:12:d7:b5:42:92:4d:46:cb:15:03:0e:8b:12:
17:03:0f:f4:85:ef:92:54:ca:60:53:19:f7:3a:f4:b3:7a:6a:
3e:f4:31:2a:69:85:13:aa:dc:89:fa:f9:af:19:d2:8e:db:0f:
47:73:5d:f1:f9:94:53:c6:cd:07:f4:d5:11:9d:7d:67:7e:0e:
19:72:20:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:51 2026 by rpki-client