Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
File: knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft (raw, json)
Hash identifier: WUIJr8fM0l9XRJQfWGvFw1MhAcdQ7lfJW/CKsfjV9rs=
Subject key identifier: 69:77:AF:4D:F8:CB:3B:AE:BD:57:AE:AA:12:05:CF:64:D3:08:EE:DA
Authority key identifier: 92:7B:FE:6E:9F:B6:80:4C:D9:28:BA:81:27:2D:66:08:56:B5:3D:F7
Certificate issuer: /CN=927bfe6e9fb6804cd928ba81272d660856b53df7
Certificate serial: 019D28F30C48187D6E6F1EDA91075EA0A5A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
Manifest number: 033B
Signing time: Thu 26 Mar 2026 07:01:50 +0000
Manifest this update: Thu 26 Mar 2026 07:01:50 +0000
Manifest next update: Fri 27 Mar 2026 07:01:50 +0000
Files and hashes: 1: knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl (hash: uYzsANyauzOGmAaTiR2yFykGPkYMPa7d6fD/tMQIRxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:0c:48:18:7d:6e:6f:1e:da:91:07:5e:a0:a5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927bfe6e9fb6804cd928ba81272d660856b53df7
Validity
Not Before: Mar 26 07:01:50 2026 GMT
Not After : Mar 27 07:01:50 2026 GMT
Subject: CN=6977af4df8cb3baebd57aeaa1205cf64d308eeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:80:34:f0:c9:6e:5c:7d:cc:bd:7e:bb:22:
ce:4c:58:19:64:61:09:7a:b9:c7:4a:b2:05:ad:3f:
0e:9e:c5:58:57:c6:82:62:a6:1d:3d:ef:f4:93:91:
85:c2:08:f6:00:67:be:59:9e:89:fc:77:a0:82:e1:
aa:d9:22:f0:87:92:84:3a:68:a0:63:27:1a:46:da:
be:17:fd:13:6e:b9:e8:37:38:79:4f:de:49:e0:8c:
bb:e4:c2:91:92:82:3a:7e:a1:6f:ee:20:69:eb:96:
5f:c1:83:a4:8e:8b:fc:0e:2a:f2:2a:e0:84:09:90:
5a:1b:10:26:1d:f0:47:9b:22:c9:a0:76:8a:12:7a:
f3:8d:e2:65:83:e9:a0:a3:e0:d3:09:4a:43:59:bb:
8e:9d:2f:d9:4d:ed:b6:ab:69:cb:fb:b5:f6:f0:5a:
4d:62:16:8c:95:36:7b:b7:bd:66:4f:1a:71:b5:5a:
74:7a:16:2b:5a:08:9f:97:61:6b:ad:2a:79:54:93:
44:13:99:12:09:7b:90:c9:c8:de:ad:8c:59:6b:dc:
d8:b8:45:8c:6f:1c:52:17:90:b7:98:43:40:83:77:
46:5b:a3:49:e8:fa:d5:f3:69:c1:13:b4:ad:83:e5:
25:1f:d5:b5:20:c8:3c:2c:f9:3e:1c:00:ce:7f:53:
2c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:77:AF:4D:F8:CB:3B:AE:BD:57:AE:AA:12:05:CF:64:D3:08:EE:DA
X509v3 Authority Key Identifier:
keyid:92:7B:FE:6E:9F:B6:80:4C:D9:28:BA:81:27:2D:66:08:56:B5:3D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f7:00:22:ff:9a:cc:32:0b:f0:6e:32:d8:ea:42:cb:b6:b2:
0d:f6:c2:fa:28:8f:3e:c0:cc:4a:11:bf:f9:d4:40:b8:5a:da:
ec:27:ac:02:6c:bd:3e:44:80:64:f4:e1:54:91:85:39:2b:51:
0a:04:44:87:38:97:31:ee:6e:9f:4e:48:c8:56:c8:0f:af:2a:
65:e3:77:51:7b:1e:63:2d:45:94:9a:a0:c5:85:9b:3b:cd:08:
6a:4d:f7:ee:3b:f2:ac:52:44:f2:00:62:fa:96:a2:09:05:cd:
e8:4f:18:ae:98:b9:c1:58:4f:b7:fd:17:cb:bf:af:25:e0:e4:
79:49:6d:75:f1:8b:8f:d0:8e:17:45:dd:40:a2:93:63:d8:58:
41:45:e9:66:79:3c:d2:95:ab:d9:8d:30:fa:98:5b:2f:2a:9e:
94:8e:f8:bf:10:64:42:b9:1b:0e:21:99:ef:d7:f8:3e:af:85:
44:bf:99:b1:dd:f0:b4:4a:9c:c9:20:81:66:38:f6:c5:c9:10:
a9:64:b0:81:5b:e9:96:ab:ee:67:b5:0c:3d:39:ee:2c:65:b0:
15:6d:f7:7f:4b:f9:a6:a8:8a:48:c5:be:4a:40:6c:5c:a1:c7:
cd:24:b2:a0:bb:dd:ea:b4:49:96:9c:d7:c5:c8:66:e2:ad:dc:
a4:23:b4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:47 2026 by rpki-client