Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
File: KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft (raw, json)
Hash identifier: Ae0iYjJVYkscXXMnDPH9EVqCGLIRmYqFCoUMuF17ba0=
Subject key identifier: F0:ED:87:8C:54:77:69:45:FF:77:29:A5:6C:31:E4:1D:4D:5E:67:EC
Authority key identifier: 2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D
Certificate issuer: /CN=2a7148c461f5e77e107af73566a27e343561dc1d
Certificate serial: 019D273AC9399E791CA19B963D5ED5335882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 23:00:57 +0000
Manifest this update: Wed 25 Mar 2026 23:00:57 +0000
Manifest next update: Thu 26 Mar 2026 23:00:57 +0000
Files and hashes: 1: KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl (hash: d9mOSx1/0SBATG6j/HpcpKfWa2vfGxXGttPW5ZBZN8A=)
2: UEd4i0yJoTMMf_ouShVkmXg-2aA.roa (hash: 4zGbYGb6JFtW5tegW+z/MuiLQzGa6F+tvz4cx0GU1lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c9:39:9e:79:1c:a1:9b:96:3d:5e:d5:33:58:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7148c461f5e77e107af73566a27e343561dc1d
Validity
Not Before: Mar 25 23:00:57 2026 GMT
Not After : Mar 26 23:00:57 2026 GMT
Subject: CN=f0ed878c54776945ff7729a56c31e41d4d5e67ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:f0:7c:2c:c5:92:3e:0e:49:62:1f:d1:3a:
ff:02:81:9a:5b:0c:fe:6b:4e:d4:b4:06:13:65:78:
8e:95:b2:ea:88:1a:77:ec:54:69:98:54:8e:52:e9:
62:7c:8a:8c:95:2a:db:3c:07:bc:fe:d7:61:3d:c3:
15:ca:74:0c:0b:65:5e:14:4e:e0:e9:2a:36:38:11:
5b:a7:9a:1b:9f:c1:ed:a8:7c:5b:8e:8d:55:69:b4:
03:ae:fe:46:00:27:5b:a6:1e:83:33:3a:20:fa:8d:
e8:ef:5a:0c:78:6f:48:18:bb:9b:99:94:04:1b:62:
42:3f:fe:fb:f5:f0:26:65:90:4b:04:10:d7:4f:cc:
95:6a:62:49:54:48:3b:ec:79:ff:71:30:fb:4e:4d:
6a:52:1e:1b:bb:c8:f4:cd:95:39:1f:9b:eb:cd:bc:
17:2a:db:55:7f:07:6c:83:db:d4:42:8d:a3:08:4d:
8e:b0:0c:9e:03:4c:f7:d1:63:ce:19:86:36:00:67:
12:60:f1:d0:91:6d:75:33:21:68:83:fb:12:0c:74:
e9:a7:06:85:22:6f:db:ba:4a:46:60:fe:b2:fa:33:
dc:61:d8:00:33:0d:64:4e:57:16:91:02:ec:75:bd:
35:f6:c5:98:c6:1b:b1:2b:48:6a:43:ea:d3:72:68:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:ED:87:8C:54:77:69:45:FF:77:29:A5:6C:31:E4:1D:4D:5E:67:EC
X509v3 Authority Key Identifier:
keyid:2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f5:a0:83:42:a9:b3:11:db:e4:bd:70:37:91:0f:df:fb:a8:
3f:b8:70:49:6e:97:a8:b9:be:e5:c6:74:2b:01:b0:73:e0:bd:
47:69:76:fc:63:45:3c:78:28:94:b7:8b:77:4e:76:5a:16:00:
57:b0:1b:4f:c7:2e:0d:29:66:47:92:8e:a9:60:20:f7:49:20:
1e:22:a6:90:67:5c:b5:8e:aa:b3:fe:cd:71:39:1f:97:47:6a:
89:0e:fb:e6:65:fc:92:8c:ed:4a:f5:bf:fc:e5:ae:46:dd:75:
3e:e7:48:e0:29:21:af:40:0d:24:cf:55:53:1c:3f:36:11:2a:
8f:89:3b:0b:8c:d3:3e:e0:94:b0:eb:4e:3c:28:fb:cc:2f:33:
e3:ce:74:2c:0f:e4:8b:68:eb:0c:e1:5d:db:34:d3:4b:a9:02:
40:1e:05:1b:b2:1b:47:e1:bc:e8:32:d3:eb:56:37:c2:9f:72:
1e:ab:dc:5c:0b:71:42:57:64:35:92:9d:fd:35:79:6b:58:85:
5c:67:be:d9:6e:d1:90:62:ca:72:3e:18:9a:90:6f:09:2b:bf:
03:a1:69:3e:03:24:61:84:2b:9e:46:c1:53:8f:10:78:04:b9:
58:2e:c9:62:fc:1e:02:1d:83:6f:86:47:6f:14:61:69:fd:35:
90:41:df:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:51 2026 by rpki-client