Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: 91cGZkKRyQYQKmUsaox2RDI93WkMj8bdy5VlCC17Cvo=
Subject key identifier: 29:7B:BC:09:76:49:75:00:D1:FE:84:B9:B7:DF:E5:90:86:94:3B:D6
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 019D27724770B102D132370EDDBBF8321889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:33 +0000
Manifest this update: Thu 26 Mar 2026 00:01:33 +0000
Manifest next update: Fri 27 Mar 2026 00:01:33 +0000
Files and hashes: 1: 6jw8eXhX-bpT7z-_T10iSbxdXsE.roa (hash: tAjJfiShc1+r/eVwy4cL3b/IWm8LUEabbh041/MZu1A=)
2: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: KKahK3QQxTNhEHiHqoaZtFJsVSXlM+CWG0PdCdQ6nGo=)
3: yP76kKTB1GrEa0atsho4_hZD6JM.roa (hash: QOnJF7HEQaem8RY4H4f4VR5i624un0rOsP4HybvqacM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:47:70:b1:02:d1:32:37:0e:dd:bb:f8:32:18:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: Mar 26 00:01:33 2026 GMT
Not After : Mar 27 00:01:33 2026 GMT
Subject: CN=297bbc0976497500d1fe84b9b7dfe59086943bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:7f:28:d4:60:c2:78:9e:5f:6e:cb:98:5f:
d8:d4:8d:99:4b:85:c6:a4:da:2d:45:36:68:4b:62:
1f:5d:61:f5:fd:14:77:30:e1:ce:85:37:a3:1b:94:
d7:3c:19:ab:94:1b:66:5d:75:ee:58:96:ee:b9:f5:
78:ee:70:0b:7a:6c:d7:dd:9d:29:fb:3a:f6:d5:44:
f6:0b:30:2d:9e:1e:d8:f2:42:6e:d2:1b:19:63:c1:
aa:23:49:12:dc:9d:d5:aa:59:e2:b5:b9:94:ad:b4:
88:ee:0a:f9:e8:dd:c7:00:20:07:51:77:54:88:3a:
6a:9a:52:01:2d:8c:0a:e5:f4:38:89:82:25:37:13:
c5:22:e4:49:ae:46:0b:29:6b:9e:33:2c:62:32:e2:
ab:01:dc:88:9b:ff:ae:b7:ea:d5:50:82:04:22:09:
03:bd:92:e5:b9:34:cd:97:5f:bc:e6:fe:50:d7:fb:
c9:26:47:cb:cd:fe:67:32:25:49:87:53:21:2c:ce:
01:d4:04:70:6f:91:40:1b:4e:cc:96:6e:04:7e:ca:
73:7d:6a:c3:9f:64:6c:bc:ef:17:ec:1f:70:75:7c:
ad:af:3c:8c:7a:48:09:a0:6e:fa:ec:0c:33:f8:8b:
d6:f6:cf:59:c9:7c:26:69:4c:f7:f4:bf:4c:dc:fe:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7B:BC:09:76:49:75:00:D1:FE:84:B9:B7:DF:E5:90:86:94:3B:D6
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0b:89:04:d7:f1:0d:5b:12:66:85:6c:2a:a9:7a:88:15:d8:
82:fe:8b:ed:0e:44:77:67:89:f5:10:46:b5:fd:64:a1:83:5a:
de:8a:9e:c1:86:4c:82:ac:92:e0:3d:3b:35:ad:c3:72:99:f9:
6e:a8:e2:43:d7:86:14:af:40:eb:61:a6:f7:92:7e:df:01:e3:
f9:88:77:a3:aa:9f:78:1a:fa:64:af:9d:ff:39:b4:dd:87:9a:
b0:9d:34:f7:37:a6:92:23:c7:13:11:a2:31:80:21:4b:22:ac:
9b:62:bd:b3:6b:83:eb:14:f8:7b:63:6f:3d:5a:d0:8e:26:b2:
ca:b7:2f:c2:1c:0e:02:39:d6:c3:1d:e1:95:c4:16:b5:13:f8:
33:c6:91:00:10:c2:8d:f5:ca:9e:2d:bf:fe:c5:87:0d:04:c1:
c4:7a:55:20:31:19:c6:4c:06:63:90:1b:81:a8:c1:c8:8b:eb:
97:17:ea:9d:70:05:52:04:09:6f:37:68:5d:4c:c5:76:2b:4e:
31:5c:9f:8b:a0:de:bb:3e:95:c4:85:56:e0:13:06:b6:c7:6e:
88:9d:69:cd:04:e3:40:da:09:d1:92:8a:6f:d5:56:37:63:2c:
7c:6f:e3:75:35:21:c3:3c:c9:fa:be:7e:9b:4a:8f:10:2c:e1:
44:5e:89:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:10 2026 by rpki-client