Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
File: KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft (raw, json)
Hash identifier: lRozFKJo864u/6vbt2KUNut00paK9ptFotJimgcaMUY=
Subject key identifier: 49:F8:0B:1D:0B:27:92:4A:21:F2:7B:B3:A0:0F:5B:41:91:BD:8F:AF
Authority key identifier: 2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D
Certificate issuer: /CN=2a7148c461f5e77e107af73566a27e343561dc1d
Certificate serial: 01A0D796BE4C6FF78328B104D60D1B86A3A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
Manifest number: 1A6D
Signing time: Fri 25 Sep 2026 08:02:55 +0000
Manifest this update: Fri 25 Sep 2026 08:02:55 +0000
Manifest next update: Sat 26 Sep 2026 08:02:55 +0000
Files and hashes: 1: KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl (hash: dZsxxycY3FaNj/NBgtLqL6Lbyp86z13l66+Gtab55Ew=)
2: UEd4i0yJoTMMf_ouShVkmXg-2aA.roa (hash: 4zGbYGb6JFtW5tegW+z/MuiLQzGa6F+tvz4cx0GU1lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:be:4c:6f:f7:83:28:b1:04:d6:0d:1b:86:a3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7148c461f5e77e107af73566a27e343561dc1d
Validity
Not Before: Sep 25 08:02:55 2026 GMT
Not After : Sep 26 08:02:55 2026 GMT
Subject: CN=49f80b1d0b27924a21f27bb3a00f5b4191bd8faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:62:6d:d0:48:0b:f7:cf:4c:ed:88:ae:1d:24:
8a:ff:56:4a:6b:20:2b:e7:ff:da:48:6b:f2:84:0e:
a3:21:cd:45:a1:b8:46:9b:a1:2f:79:ba:db:6a:ef:
aa:25:85:5d:f5:49:25:19:a1:f9:5b:db:92:0f:b1:
df:7c:e1:b1:43:d9:b9:7a:61:cb:07:26:0b:00:25:
bc:f4:ea:19:37:df:76:a6:6c:27:da:54:81:1a:db:
f6:23:33:19:db:26:60:a0:28:d7:09:2f:e4:15:8d:
d0:01:9c:fe:b3:b4:01:47:ab:09:8c:1f:b9:1c:fe:
42:cc:14:69:91:6d:3f:b4:13:04:63:b3:59:12:d5:
a4:e6:f4:32:38:1d:bb:07:ea:a7:9c:6b:d8:29:44:
eb:0b:9e:35:2b:52:3f:c6:cb:7e:ac:e3:6d:0d:fa:
6a:3c:1f:19:e3:26:bf:c1:78:26:29:76:65:85:9e:
81:f6:18:c1:33:73:b8:6d:07:97:54:1b:94:91:1c:
7b:06:ca:36:8f:f4:1c:b0:81:4e:ef:79:7a:a5:2d:
bd:ea:8b:a9:49:bc:ba:bc:02:34:c6:ef:42:9e:61:
32:eb:ce:8b:01:d1:67:46:e3:68:6f:83:4b:18:39:
ac:50:16:b7:a1:77:f3:04:2d:31:f5:1c:95:d4:a6:
85:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F8:0B:1D:0B:27:92:4A:21:F2:7B:B3:A0:0F:5B:41:91:BD:8F:AF
X509v3 Authority Key Identifier:
keyid:2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c2:f5:2d:f3:cb:46:c8:0a:d6:f2:dd:d1:99:c8:63:de:23:
d2:ff:d6:c8:01:54:60:72:14:4f:3a:60:1d:67:df:14:84:cb:
68:86:60:ec:a6:92:4a:4d:fa:10:09:a2:65:95:a8:15:ed:51:
17:08:2f:cd:7a:5e:29:2a:c9:7c:0a:c2:eb:80:48:ac:d4:8b:
bf:41:8b:db:e4:10:7e:ea:9f:69:ff:3c:f6:b0:5f:65:0a:e4:
b7:a4:bf:e3:32:bb:47:63:51:c0:40:a7:c7:1d:8e:09:dd:f5:
cd:80:48:31:d8:34:6e:65:24:f7:01:1a:dc:f4:ba:cb:7b:f8:
7e:d0:6a:c8:b7:db:eb:9c:1c:5e:4e:51:c0:3c:c4:ab:f3:75:
32:46:8a:c9:8f:87:3e:0f:30:d0:c5:d8:b0:b5:3f:3c:7a:5a:
cc:9f:16:86:b7:be:1e:7e:4f:ee:d0:7d:8c:4e:93:ca:2a:8f:
00:6a:bf:9c:49:22:02:8f:34:cd:d5:ac:27:74:ff:6c:eb:58:
1c:86:58:60:66:0b:75:b2:76:86:06:73:a3:13:b1:91:dd:74:
79:3b:d4:37:3f:85:45:43:7f:a0:ad:be:4d:cb:e8:f4:90:5e:
33:ef:63:59:ac:a2:14:1c:14:4c:d9:4f:fd:11:6c:0d:3a:50:
d1:a8:74:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:57:21 2026 by rpki-client