Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: +ucgI+/5JekgLdBa+LslEVlu5ApCO890NqiBFC4za1A=
Subject key identifier: 43:7F:26:BB:04:0D:50:66:62:FF:B5:A3:07:A9:F3:12:E5:63:E2:EE
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 01A0E1740186A366FF8BE972C531EFA8E19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 1A76
Signing time: Sun 27 Sep 2026 06:01:11 +0000
Manifest this update: Sun 27 Sep 2026 06:01:11 +0000
Manifest next update: Mon 28 Sep 2026 06:01:11 +0000
Files and hashes: 1: 6jw8eXhX-bpT7z-_T10iSbxdXsE.roa (hash: tAjJfiShc1+r/eVwy4cL3b/IWm8LUEabbh041/MZu1A=)
2: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: vXOnIHOHKpJEXJnYvSmbUahVyygwRUUVp2qI+6xEfxs=)
3: yP76kKTB1GrEa0atsho4_hZD6JM.roa (hash: QOnJF7HEQaem8RY4H4f4VR5i624un0rOsP4HybvqacM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:01:86:a3:66:ff:8b:e9:72:c5:31:ef:a8:e1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: Sep 27 06:01:11 2026 GMT
Not After : Sep 28 06:01:11 2026 GMT
Subject: CN=437f26bb040d506662ffb5a307a9f312e563e2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:32:79:f2:1c:0d:7c:33:75:e1:b2:bf:07:
ac:02:68:04:ec:62:7b:04:e5:25:a3:41:5b:26:12:
f9:7f:81:57:f8:0d:7b:cb:70:85:6f:3f:bf:7a:04:
e7:43:33:cf:bd:60:8b:36:1b:c2:ba:7f:08:91:4f:
7c:2c:68:40:be:62:80:bf:63:71:46:2e:4b:81:df:
10:ef:ab:33:d2:97:5f:a0:91:fe:a6:c1:f0:78:bd:
17:f4:3a:63:bc:71:ac:63:9b:8c:01:fd:e7:ad:4f:
c2:76:b2:65:d9:eb:3e:11:d1:64:e6:81:74:79:ff:
eb:bd:88:c3:19:63:b4:78:50:c9:ce:24:87:c2:49:
b2:5f:1d:fc:71:30:ae:eb:31:1b:98:ef:7a:54:6a:
37:b7:35:6e:2d:4d:b6:e1:82:f4:66:ec:e7:67:95:
4e:15:cb:37:7d:3d:bd:81:e4:4a:d3:5e:ef:c7:b6:
ee:6d:81:5c:cf:84:3a:46:d9:61:ba:99:03:0b:96:
b5:15:f8:57:6e:d5:f2:b1:b4:f4:2e:b1:8b:23:98:
e2:89:0b:a9:d4:62:38:f6:d7:ed:51:5b:78:01:41:
5a:4e:f1:b8:1a:54:f4:28:aa:60:34:36:08:bc:f4:
f1:70:0f:b9:97:96:10:0d:26:4a:78:30:de:6f:eb:
65:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7F:26:BB:04:0D:50:66:62:FF:B5:A3:07:A9:F3:12:E5:63:E2:EE
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ff:27:86:ab:9f:c3:74:4e:e7:3e:4f:f3:59:b4:c9:8c:f0:
ec:43:05:94:a3:81:ef:09:56:cb:b6:af:29:b5:39:15:85:f6:
b1:a9:24:a4:74:3c:70:bb:25:e1:57:dd:58:4f:9f:86:19:b2:
77:17:dd:80:44:ec:48:ee:5c:ad:8c:e6:95:43:52:c4:15:ef:
ba:da:91:7a:02:77:11:95:a2:fa:3e:0c:16:1f:29:da:63:53:
88:90:e0:97:05:b3:16:c4:dd:04:d1:85:60:b8:16:9c:91:24:
b7:cb:d1:62:4e:10:b4:e9:9e:f5:d3:6e:9e:f8:34:d2:da:28:
53:b7:85:13:32:ce:2e:c1:48:f5:b8:50:85:33:31:08:91:c2:
04:02:66:6b:e4:ac:d2:6b:9b:7b:f4:2e:4b:6e:b7:ce:4b:62:
04:27:97:c4:ae:ba:4c:3a:39:c5:f5:ef:d5:19:d7:ef:31:d4:
45:a4:fb:d8:a1:38:a5:35:ae:94:5b:2e:35:ff:68:e5:d0:09:
00:95:9c:4c:f3:0a:40:d3:3e:de:c3:3b:24:5b:ea:f6:83:0f:
88:f9:5a:a9:4f:37:35:f8:36:27:34:de:cd:36:3a:cc:e7:7e:
f0:45:54:df:ef:58:c3:55:ee:bb:8f:4b:7e:e8:e3:a6:f2:63:
fb:fc:c7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:18:07 2026 by rpki-client