Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
File: knEFydH7BpBVSXH0ZMoh9KRcEGo.mft (raw, json)
Hash identifier: 5Hmv9mjDMwBjcpL5EqRF+Gx/ILZ6gAJ2hklOw0aXvh8=
Subject key identifier: C0:92:79:60:DF:4E:88:40:46:C8:1C:D3:74:94:85:3D:3D:02:50:6A
Authority key identifier: 92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
Certificate issuer: /CN=927105c9d1fb0690554971f464ca21f4a45c106a
Certificate serial: 01A0D91720A2C711858957F246299356CBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
Manifest number: 1147
Signing time: Fri 25 Sep 2026 15:02:46 +0000
Manifest this update: Fri 25 Sep 2026 15:02:46 +0000
Manifest next update: Sat 26 Sep 2026 15:02:46 +0000
Files and hashes: 1: YthcC5vfZaqX4lQHCzfAkYHmBn8.roa (hash: e1Wa1MDzLGWDE0S3sqNrMKZLPwUzO14S8dedZF4Jkxs=)
2: knEFydH7BpBVSXH0ZMoh9KRcEGo.crl (hash: vA8SXRdjNPUqCxlKUuHBimWOIJ5LawLL3UrAKPQf3uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:20:a2:c7:11:85:89:57:f2:46:29:93:56:cb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927105c9d1fb0690554971f464ca21f4a45c106a
Validity
Not Before: Sep 25 15:02:46 2026 GMT
Not After : Sep 26 15:02:46 2026 GMT
Subject: CN=c0927960df4e884046c81cd37494853d3d02506a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c8:b4:c0:d7:f5:17:52:c7:c2:e7:77:26:d4:
90:87:f5:02:94:33:d0:88:41:4e:f3:8c:60:38:16:
e5:35:9e:20:95:42:ca:82:24:7a:91:a9:c4:1c:b9:
e1:15:22:31:c8:f4:1a:b7:6d:58:8d:87:97:cb:86:
3b:c9:56:54:83:7e:90:43:e6:c1:72:db:04:fd:eb:
2d:55:b8:54:30:b4:c7:e5:a0:12:d4:db:cb:19:4d:
53:45:9c:32:e3:42:58:8b:ce:3c:8a:29:09:12:cf:
6f:b0:ce:c3:5c:dc:ce:29:ef:ce:a2:14:73:58:89:
04:f4:56:78:39:4a:e7:e6:66:db:37:3f:85:7e:9b:
37:65:db:c4:7f:c9:60:33:5f:e7:ce:67:6d:eb:d4:
8d:12:c9:b1:e5:b7:82:d9:8b:4b:a0:42:bd:5e:56:
f1:1b:03:95:05:1e:42:16:25:de:e3:4e:fa:a1:5f:
b8:22:00:47:57:21:40:4c:6d:ab:77:89:47:49:11:
b7:07:d4:57:f9:ca:8f:fa:7f:de:c4:f5:26:16:2a:
9b:11:78:d0:eb:02:07:42:6f:1a:a3:c3:4e:11:de:
7d:b0:7a:db:4b:56:16:89:e1:aa:bf:73:75:b2:60:
41:d7:5c:fa:94:1d:00:41:0b:9c:9a:98:9c:32:2c:
5c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:92:79:60:DF:4E:88:40:46:C8:1C:D3:74:94:85:3D:3D:02:50:6A
X509v3 Authority Key Identifier:
keyid:92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:72:60:3f:aa:91:4d:25:63:8e:df:a3:21:9a:c8:14:92:ae:
07:ab:6d:b0:c3:11:a4:8e:da:97:a9:13:34:bf:3b:4b:41:1a:
86:97:0a:79:7f:4d:7b:cc:06:aa:bd:11:fd:12:e6:ba:11:08:
e0:6a:57:e4:d9:7a:9f:68:53:ab:7f:8c:5d:c7:93:16:8d:27:
bb:f7:9b:f7:7a:20:01:28:e2:27:b3:5b:13:18:2f:91:a5:fc:
13:5d:03:70:3c:af:b6:65:99:89:c8:cd:3a:e2:38:bc:dc:b6:
f7:77:78:e4:06:d0:76:d0:86:60:e2:1d:f3:b7:b8:77:22:9d:
5f:0c:d3:3e:b5:68:71:d6:40:ef:3d:fd:eb:d7:4c:9a:fc:b0:
e6:fb:d0:81:2b:74:5a:e5:a9:e1:a4:2c:7e:ce:37:f6:4c:4c:
87:0c:f2:27:0f:7b:3c:34:96:4c:bd:5a:8a:43:b6:24:3b:00:
0c:7e:b7:6c:f2:d0:ef:f9:5e:c2:c6:83:ca:79:bf:a9:8a:71:
1d:9f:8a:ff:b1:f3:c0:f9:36:9d:f8:36:77:3e:37:9a:1c:62:
13:31:4f:9f:d7:11:62:2f:af:af:84:a4:e9:0d:a5:28:ad:1e:
70:d7:16:b0:f1:86:a2:35:f6:4b:69:90:f2:95:3b:a9:cb:c3:
f1:35:bd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:54:23 2026 by rpki-client