Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
File: knp_OqYbIkEYI14yAR7ey-P2pkk.mft (raw, json)
Hash identifier: xwHpDHbohg3ZPcsu0IW078XwStcUJuKOWFxhvwDuky4=
Subject key identifier: 95:A1:C8:8A:74:0D:FB:9E:5D:41:31:AF:C3:2E:F9:4B:BB:6E:25:04
Authority key identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
Certificate issuer: /CN=927a7f3aa61b224118235e32011edecbe3f6a649
Certificate serial: 019D26CCEA7E8A1BD3E7FEA935EF821DABAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
Manifest number: 042F
Signing time: Wed 25 Mar 2026 21:00:56 +0000
Manifest this update: Wed 25 Mar 2026 21:00:56 +0000
Manifest next update: Thu 26 Mar 2026 21:00:56 +0000
Files and hashes: 1: BiFpl804Ndey4H04LmNJRdnfX6k.roa (hash: 2/XmjSjnhl4SdL3k8clQIxw4cK5D7eJ8h4bc9jwN4r8=)
2: ZebVXiZ_5iveVdl-WgUjGaxkTyo.roa (hash: WKn7Us0SMkzmljz2By5N09RI+5/h4IGHBFwWlJQQPqQ=)
3: knp_OqYbIkEYI14yAR7ey-P2pkk.crl (hash: pF98/HOuZ0P/bSvy2y/nxEpiyX590+ngfhr2EnmrbtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ea:7e:8a:1b:d3:e7:fe:a9:35:ef:82:1d:ab:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a7f3aa61b224118235e32011edecbe3f6a649
Validity
Not Before: Mar 25 21:00:56 2026 GMT
Not After : Mar 26 21:00:56 2026 GMT
Subject: CN=95a1c88a740dfb9e5d4131afc32ef94bbb6e2504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1a:cb:c5:6c:66:cc:ff:77:75:e1:63:29:2a:
b1:15:2b:c2:35:7d:11:c6:55:1b:48:09:74:d5:b8:
b0:c3:d4:d5:96:b0:a6:9d:73:1f:a8:a4:81:8e:23:
67:ed:69:fa:b7:72:63:41:61:f2:ed:1c:65:ae:c0:
8c:6d:e9:d2:ef:92:de:6c:96:41:66:ca:22:7d:b1:
16:5e:ef:13:86:93:d4:03:49:e1:84:96:8f:81:93:
77:dc:05:8d:a4:3e:f8:65:38:38:3d:6a:5b:63:97:
8a:50:33:e2:50:14:42:5b:6d:3a:94:45:e6:d2:68:
94:58:3c:49:f2:68:92:4d:98:56:78:2a:4c:be:4d:
4d:94:bf:9f:8c:57:41:f9:82:50:74:2c:3c:a7:71:
69:00:7a:70:98:29:e7:65:f8:96:eb:fe:16:ad:9d:
bb:5b:eb:33:ef:e8:c4:6a:a7:fd:46:dc:b6:78:26:
53:49:7d:84:72:3a:19:50:78:d6:75:52:ae:0c:ec:
e8:ba:e0:be:62:4a:82:48:83:91:5a:b3:be:ce:6a:
3b:b1:73:d0:ca:8e:e0:be:c3:22:b6:a7:8b:75:2b:
72:23:76:3b:2d:fe:87:5a:46:78:c4:fa:09:f9:e6:
cd:61:74:62:ff:ae:31:85:ab:80:a4:f0:d4:8c:7c:
99:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A1:C8:8A:74:0D:FB:9E:5D:41:31:AF:C3:2E:F9:4B:BB:6E:25:04
X509v3 Authority Key Identifier:
keyid:92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:15:90:37:87:e4:f6:de:14:f4:2a:97:9e:8e:a7:c8:e7:c9:
45:97:55:1e:be:1e:f1:cf:59:a2:2c:b1:41:b9:be:52:37:ab:
fe:d5:e5:81:6c:b1:f6:55:a2:dc:da:33:25:90:4f:7f:3e:9a:
1f:a3:bb:75:e1:30:27:8b:0e:97:bf:e6:0c:49:5d:c2:e0:b2:
10:62:c2:42:55:13:c2:6e:17:d9:ec:9f:de:f2:ae:0b:70:77:
b6:b9:a6:6d:33:13:0e:a1:cf:45:7f:51:ce:c5:48:a8:10:a3:
57:87:4f:a5:9a:16:1c:37:7a:5e:f1:4b:41:80:c9:2a:ef:7e:
36:6f:23:d1:1e:68:f3:fb:38:9b:60:8c:c0:12:8c:1f:d9:03:
f6:ca:a3:1e:06:e1:56:4f:05:25:5e:fe:5a:bd:a4:8f:af:cf:
42:c6:b9:32:6c:44:25:fe:20:03:83:3f:59:0b:05:26:bf:4e:
7d:5e:a5:75:ab:72:fa:31:d5:31:90:b7:e3:14:94:d4:45:97:
ef:c1:4f:8b:f5:e4:63:8c:b2:e7:fc:90:45:20:c7:cc:c0:72:
5b:8e:0d:d7:30:b2:c4:59:36:ab:54:45:c1:1a:fa:dd:79:dd:
2c:09:80:c8:84:13:a5:e0:1c:38:4a:fd:bc:77:e2:f6:77:5f:
d3:3c:78:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:22 2026 by rpki-client