Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: ayDWyBED76WBB5VMuT0RWGukgZTLyETqzDHm9Zk7F84=
Subject key identifier: C9:36:58:F9:4A:79:46:A1:7B:F8:D2:7E:0A:B5:D2:60:1B:43:29:95
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 019E1EA2C86115898682E553CBD28BD03141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 00:00:45 +0000
Manifest this update: Wed 13 May 2026 00:00:45 +0000
Manifest next update: Thu 14 May 2026 00:00:45 +0000
Files and hashes: 1: 6jw8eXhX-bpT7z-_T10iSbxdXsE.roa (hash: tAjJfiShc1+r/eVwy4cL3b/IWm8LUEabbh041/MZu1A=)
2: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: i7Xd2TQ4VDXwBOedP6or0Zmc46K/Bbpaen8j8sMWmdw=)
3: yP76kKTB1GrEa0atsho4_hZD6JM.roa (hash: QOnJF7HEQaem8RY4H4f4VR5i624un0rOsP4HybvqacM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:c8:61:15:89:86:82:e5:53:cb:d2:8b:d0:31:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: May 13 00:00:45 2026 GMT
Not After : May 14 00:00:45 2026 GMT
Subject: CN=c93658f94a7946a17bf8d27e0ab5d2601b432995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:f7:fc:7d:a1:a4:e8:ff:ac:06:94:9b:fc:
6d:8b:fd:94:bc:ec:50:12:fc:1f:39:8e:e2:3d:73:
b1:67:e4:cf:32:a4:4a:69:51:d4:e3:3b:9f:5c:06:
29:9c:c1:d9:0d:56:2b:38:1b:24:40:0d:80:ac:0a:
d6:28:b8:84:fa:30:3a:24:b2:37:f0:71:92:22:4c:
81:b8:50:16:1d:19:4f:76:a0:40:7d:76:0f:dc:b8:
07:cc:35:6f:5a:41:81:b5:2a:0e:78:f8:29:56:04:
dd:ea:08:e2:5c:9c:21:0a:a8:11:70:48:5e:5f:00:
f8:a8:1d:65:34:02:6f:80:2e:11:19:28:79:f5:22:
89:90:7b:7d:cf:65:18:8a:4e:7c:5c:c3:50:90:7b:
30:bc:ff:1b:13:a5:93:b6:7d:e0:50:f5:6c:7e:8a:
3f:dc:1c:c3:ed:33:94:20:29:e0:e7:d2:37:c0:30:
d9:54:39:ec:9d:71:d5:4d:ed:5d:71:7a:d4:4a:20:
50:64:ed:7d:0e:9f:64:3d:88:db:66:5e:f3:a6:c8:
59:14:63:09:0b:de:27:c6:5d:5e:d1:e4:2d:dc:94:
67:ac:de:e5:4f:56:6a:d6:d8:93:38:8a:af:a3:39:
fc:bb:9b:68:bc:58:85:da:4e:16:03:79:5f:fe:64:
f0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:36:58:F9:4A:79:46:A1:7B:F8:D2:7E:0A:B5:D2:60:1B:43:29:95
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f0:c9:39:61:3e:84:a1:ea:aa:cf:4e:c1:6b:9a:22:e2:c9:
9c:c6:97:80:41:2d:cc:d4:68:9b:e4:a8:0c:79:26:74:a5:6c:
56:18:85:cc:70:8f:41:79:b9:17:32:8c:86:9c:43:fd:94:48:
e1:07:de:bb:e4:38:7e:24:b6:9d:09:b8:f0:fd:f6:e0:22:68:
94:13:22:14:06:33:51:4e:a7:85:24:fa:e7:a8:14:24:1c:66:
80:16:c2:6d:e9:ba:24:e9:0a:33:a3:9c:f3:e6:18:47:46:8a:
89:28:75:aa:a6:d8:f7:58:e9:9e:14:70:23:9a:e3:4b:41:91:
b4:ce:ce:69:f5:ea:17:67:b3:d8:92:3c:40:9e:92:73:91:83:
33:a7:4f:fa:ba:3b:b9:5a:4c:25:89:95:3f:ab:6d:f0:f5:9c:
8f:27:79:d2:80:ea:b4:8c:95:6a:80:b7:71:13:3e:3c:ed:3c:
ea:ab:1c:3f:e5:fe:2b:a9:1d:fd:65:ea:3c:d6:8d:81:62:1c:
c7:d3:f5:b5:a8:64:74:db:5c:d6:bb:1b:a6:50:35:23:ee:69:
ea:68:c5:72:59:ea:33:bf:7b:0d:e7:28:86:95:e8:71:e2:a2:
91:ff:5c:7f:0c:56:22:d3:00:32:d7:46:12:d9:20:0f:52:d1:
6a:df:23:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eoshhFYmGguVTy9KL0DFBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNzM0ZWFiY2ZiNWI2YzJhNGU0ODM4OGVkYjNhZjhmNTA2
YjFmYWIwHhcNMjYwNTEzMDAwMDQ1WhcNMjYwNTE0MDAwMDQ1WjAzMTEwLwYDVQQD
EyhjOTM2NThmOTRhNzk0NmExN2JmOGQyN2UwYWI1ZDI2MDFiNDMyOTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ/3/H2hpOj/rAaUm/xti/2UvOxQ
EvwfOY7iPXOxZ+TPMqRKaVHU4zufXAYpnMHZDVYrOBskQA2ArArWKLiE+jA6JLI3
8HGSIkyBuFAWHRlPdqBAfXYP3LgHzDVvWkGBtSoOePgpVgTd6gjiXJwhCqgRcEhe
XwD4qB1lNAJvgC4RGSh59SKJkHt9z2UYik58XMNQkHswvP8bE6WTtn3gUPVsfoo/
3BzD7TOUICng59I3wDDZVDnsnXHVTe1dcXrUSiBQZO19Dp9kPYjbZl7zpshZFGMJ
C94nxl1e0eQt3JRnrN7lT1Zq1tiTOIqvozn8u5tovFiF2k4WA3lf/mTwawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMk2WPlKeUahe/jSfgq10mAbQymVMB8GA1UdIwQY
MBaAFCpzTqvPtbbCpOSDiO2zr49Qax+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3Yzct
MDlhYWMwNzg5YjkzLzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3YzctMDlhYWMwNzg5Yjkz
LzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/DJOWE+
hKHqqs9OwWuaIuLJnMaXgEEtzNRom+SoDHkmdKVsVhiFzHCPQXm5FzKMhpxD/ZRI
4Qfeu+Q4fiS2nQm48P324CJolBMiFAYzUU6nhST656gUJBxmgBbCbem6JOkKM6Oc
8+YYR0aKiSh1qqbY91jpnhRwI5rjS0GRtM7OafXqF2ez2JI8QJ6Sc5GDM6dP+ro7
uVpMJYmVP6tt8PWcjyd50oDqtIyVaoC3cRM+PO086qscP+X+K6kd/WXqPNaNgWIc
x9P1tahkdNtc1rsbplA1I+5p6mjFclnqM797DecohpXoceKikf9cfwxWItMAMtdG
EtkgD1LRat8jQA==
-----END CERTIFICATE-----
Generated at Wed May 13 11:03:11 2026 by rpki-client