Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
File: knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft (raw, json)
Hash identifier: ORg5lGU4bJCy7xk+9BUcVtHpebaGV/9pchSuo3l6UiE=
Subject key identifier: 31:BA:E9:DF:28:A9:9A:BB:03:DF:4E:3F:9D:3C:B9:C3:01:F4:B0:39
Authority key identifier: 92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
Certificate issuer: /CN=927b1e56ac7d07802c4567c4679435159b422096
Certificate serial: 019D2AE10057EFC3604069EAAAAB18E12CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 16:01:21 +0000
Manifest this update: Thu 26 Mar 2026 16:01:21 +0000
Manifest next update: Fri 27 Mar 2026 16:01:21 +0000
Files and hashes: 1: d0LecfURWAP1Kd5yMlBKRHrXszA.roa (hash: SeQ46ddcXmZrpSmBr04z47vzrirNug3nWjIEQHhxkrE=)
2: knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl (hash: WHPSExCI+b/4bxvq/mc9q1y341JXDlBZJF99b3u2U3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:00:57:ef:c3:60:40:69:ea:aa:ab:18:e1:2c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927b1e56ac7d07802c4567c4679435159b422096
Validity
Not Before: Mar 26 16:01:21 2026 GMT
Not After : Mar 27 16:01:21 2026 GMT
Subject: CN=31bae9df28a99abb03df4e3f9d3cb9c301f4b039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:11:0a:20:20:3a:db:6c:c8:44:97:16:9f:
89:dc:46:72:86:89:31:19:e6:3e:5e:48:84:bf:bd:
ee:39:c0:70:f2:61:2c:8e:03:5b:ea:ee:78:f6:eb:
6a:b4:22:b4:cc:f9:76:2d:e5:aa:c6:36:a6:ea:75:
23:5a:d3:24:f6:59:ed:e1:4e:7c:ef:b0:d4:72:76:
29:ab:93:a8:e0:5f:44:26:c1:0f:7a:f3:52:51:7c:
e3:66:f7:c8:69:f5:5f:61:4d:9f:ea:77:18:30:7d:
06:39:86:ad:64:42:ce:22:3d:8e:5e:8b:1d:6b:d3:
6a:b8:34:f6:d8:c1:24:63:5d:75:b9:d7:b4:ba:2a:
3b:70:4c:f0:8a:d9:93:b9:81:44:af:91:2e:a0:48:
10:63:41:d1:db:ab:5a:29:1a:9e:f3:e8:53:59:c9:
9c:4d:e3:e1:90:66:ab:2a:a6:6d:9b:b6:44:7c:46:
4d:fc:70:a6:c7:59:ff:cf:ed:a8:86:bb:bc:2c:02:
7a:bd:bd:7f:f0:6f:c7:32:95:3f:79:37:21:13:2c:
8f:fb:7e:79:9c:dc:e5:3d:ae:ff:43:74:cd:0d:4b:
09:1b:18:81:44:39:54:f1:ae:ac:19:af:5d:5a:a2:
e8:e1:59:d3:71:64:48:78:4a:be:0e:61:56:81:5c:
ee:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BA:E9:DF:28:A9:9A:BB:03:DF:4E:3F:9D:3C:B9:C3:01:F4:B0:39
X509v3 Authority Key Identifier:
keyid:92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4e:c2:61:f8:aa:a1:e7:d7:ae:63:41:a0:85:40:a0:79:57:
10:22:f4:18:e6:d3:bc:f1:af:09:89:d3:90:ea:72:04:70:98:
25:2e:90:89:89:20:f1:ca:52:c7:40:b4:6c:c0:4e:ab:f9:75:
07:0c:2d:6d:43:07:c1:e4:f5:4b:ee:55:73:8f:05:8a:b2:14:
d0:cb:1a:42:eb:c2:34:2d:16:ef:45:c9:68:6f:e8:83:ec:50:
f5:ea:4a:52:8d:71:c3:7c:ae:2d:32:08:91:88:51:1c:2c:bf:
0c:7c:a9:3d:e7:b1:c9:66:00:8e:b0:96:fd:cf:d7:d5:0d:0f:
55:50:03:93:b8:38:ac:bc:1b:70:7b:7d:05:e9:f7:b0:f3:57:
03:b7:da:5a:f0:ad:3b:b2:1a:8c:26:b0:b8:f3:14:2d:45:c7:
0f:61:99:55:f7:72:d1:51:34:e7:f2:2b:5e:e5:50:3c:73:c1:
58:ae:bc:a1:f2:0a:26:b7:c0:82:99:46:1f:01:05:51:d4:7b:
7e:93:0d:7f:73:c9:52:b8:ee:0f:56:3c:80:23:91:cb:d3:e1:
ba:da:f6:7d:0a:a9:5b:bd:13:b4:bd:69:4a:7d:73:9d:45:d6:
b4:16:9b:40:38:6d:88:72:52:62:d7:16:ef:b5:3e:d9:ad:91:
80:2b:9b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:45:21 2026 by rpki-client