Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: SlRG6GJxSoVkkuftLDcKCVrjdM1jHvVsMesQvnpVGro=
Subject key identifier: F3:C8:2C:37:0E:BF:E4:2C:3E:D9:A5:8A:3B:EC:DC:DE:C5:9B:EB:78
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 019F935C234FA304D8BDD4D1146458A374CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 09:01:56 +0000
Manifest this update: Fri 24 Jul 2026 09:01:56 +0000
Manifest next update: Sat 25 Jul 2026 09:01:56 +0000
Files and hashes: 1: 6jw8eXhX-bpT7z-_T10iSbxdXsE.roa (hash: tAjJfiShc1+r/eVwy4cL3b/IWm8LUEabbh041/MZu1A=)
2: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: V5vOEm7Sx7pIYWpoffVqVhcyEIcPjJCaTKzjCo1yE7k=)
3: yP76kKTB1GrEa0atsho4_hZD6JM.roa (hash: QOnJF7HEQaem8RY4H4f4VR5i624un0rOsP4HybvqacM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:23:4f:a3:04:d8:bd:d4:d1:14:64:58:a3:74:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: Jul 24 09:01:56 2026 GMT
Not After : Jul 25 09:01:56 2026 GMT
Subject: CN=f3c82c370ebfe42c3ed9a58a3becdcdec59beb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:83:70:97:20:76:85:0a:bc:15:f7:e6:2c:
ce:8f:14:60:dc:88:51:b0:29:b7:8a:bd:39:c7:3b:
d3:34:4b:0b:35:e2:74:36:98:88:5f:b1:57:55:30:
90:0f:21:b2:f1:22:93:0d:05:c4:fa:4d:3f:13:3f:
4d:6d:7c:5d:2a:05:53:a1:83:b5:31:43:87:e2:f0:
72:1e:c2:68:b3:f2:00:5a:5b:3d:69:13:37:7d:ed:
7f:60:00:77:fe:98:b8:84:82:dd:03:bc:a8:80:d0:
27:23:52:59:14:b8:d4:bf:bd:23:03:e4:1c:36:e9:
56:5b:e2:9d:07:04:1c:4a:29:77:0e:11:82:f3:0d:
62:b2:f4:9f:5c:7b:0b:06:12:41:3c:5a:62:4f:8b:
cc:f8:c8:ef:6d:14:56:6d:bb:a7:b6:f1:81:8f:17:
df:34:bd:fe:87:10:d9:e6:49:ec:1e:80:43:48:6b:
86:6b:54:8e:47:e6:72:7d:4f:fa:40:40:56:6f:70:
05:53:b5:89:c6:45:c7:0f:89:bd:24:f7:94:ce:9b:
8d:c7:2d:5c:93:ed:c3:82:22:61:2a:21:ea:1d:c8:
1b:a2:fd:72:a6:70:ab:e1:c0:05:d5:a7:1e:ae:ff:
16:87:5b:ef:45:38:08:88:22:0f:ae:b4:43:51:c0:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C8:2C:37:0E:BF:E4:2C:3E:D9:A5:8A:3B:EC:DC:DE:C5:9B:EB:78
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d0:49:c3:6c:2a:5b:c7:12:c4:ef:ca:d8:61:e8:9d:4f:9a:
60:b5:80:43:5e:34:04:11:e2:83:75:4c:37:1f:cb:b1:fe:f9:
5d:bb:0c:8c:84:b2:70:3a:2a:25:1e:14:85:75:4f:51:1f:94:
41:30:7e:8e:e5:6b:7a:fd:c8:ff:f8:e1:eb:be:6f:af:fb:54:
62:10:95:77:63:fc:76:fa:bd:50:8f:d7:f1:30:48:cd:a4:1c:
39:05:58:e4:ee:00:e0:6f:c9:0d:60:51:56:76:5e:2e:17:51:
e4:03:01:c3:11:8d:7a:58:dd:8e:c0:c6:76:40:7a:2a:5e:ea:
af:2d:40:e4:d1:61:08:c4:6d:18:f3:3f:5c:f9:59:00:df:f5:
f6:83:f9:1f:fc:74:d1:62:68:0f:97:98:1c:4f:5c:0b:23:9c:
e3:3e:c7:5a:41:55:92:64:f0:f3:b5:af:43:88:be:c4:e5:8d:
23:01:3f:32:58:f2:b7:41:fa:c2:6c:88:fd:c7:0e:13:b0:7f:
6f:e4:14:14:3e:54:b5:d1:82:87:3b:2a:46:80:57:3a:00:52:
36:bc:8a:2e:44:46:a6:3d:ad:c9:20:2d:1d:d6:b4:db:54:47:
15:04:51:d3:36:bd:00:5b:c5:4f:df:fe:f9:13:b9:67:87:90:
7f:df:eb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:37 2026 by rpki-client