Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json)
Hash identifier: K2FKuhBMZhiPR5OpNSDBrFjpNFqhBjmx8tJH+Jbafn4=
Subject key identifier: 9B:D5:98:7F:73:58:E2:D0:F6:F6:0B:89:C5:B8:FD:35:73:90:C7:58
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 019D0AE813BF897E7BE12D78782A1E2700B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
Manifest number: 0D70
Signing time: Fri 20 Mar 2026 11:01:14 +0000
Manifest this update: Fri 20 Mar 2026 11:01:14 +0000
Manifest next update: Sat 21 Mar 2026 11:01:14 +0000
Files and hashes: 1: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: V/NmZZPXpRK3NVl2/+pSXqxBHqaIfPB2bxOeeBHrhx8=)
2: zpeTK5PwMk-4Xj5vBZGegdo8ck8.roa (hash: CqrBs9z5utywXd/u1L7nQWwUGdydAl74Sn0Il70tRPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:e8:13:bf:89:7e:7b:e1:2d:78:78:2a:1e:27:00:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: Mar 20 11:01:14 2026 GMT
Not After : Mar 21 11:01:14 2026 GMT
Subject: CN=9bd5987f7358e2d0f6f60b89c5b8fd357390c758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:ad:25:e0:1a:3a:2e:42:88:fd:b1:81:a4:
62:38:74:87:0c:e0:95:29:4a:62:c0:1d:e3:88:ec:
f3:b8:77:67:79:b7:b3:b5:ec:64:bd:dd:17:a0:04:
20:a2:b7:2b:ef:c7:5c:19:e3:c7:37:20:8d:75:76:
11:15:40:c5:fe:ee:59:78:ee:50:35:c2:c2:da:e6:
a5:99:7c:ee:b9:fe:65:45:46:2f:7d:94:7e:10:e6:
dd:62:41:f7:6f:dc:fc:eb:1b:f4:cc:a1:fe:da:6a:
c2:5e:b9:18:17:4d:aa:48:3a:2e:60:de:c0:ca:92:
45:18:4f:dd:3b:7c:78:de:4f:d6:f2:37:71:29:79:
f8:8e:22:0b:94:16:03:a8:84:0f:26:c0:89:43:b8:
9e:90:16:39:a7:e0:2c:cb:28:ec:17:df:dc:10:f7:
63:19:b3:8b:50:b4:e8:00:1a:19:d3:6a:71:0f:19:
55:34:c8:c3:8a:d9:17:ff:09:9b:f9:90:bc:87:de:
f5:39:07:ca:a6:d2:77:5d:c6:52:c9:d2:89:a0:6b:
fb:69:60:3f:1a:56:e0:42:5b:4f:36:ed:db:50:a9:
72:50:1a:b6:3c:2f:1e:2f:03:ca:50:51:78:13:1a:
8c:b5:10:c8:e1:db:a0:19:a8:c2:bf:fc:e6:43:92:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D5:98:7F:73:58:E2:D0:F6:F6:0B:89:C5:B8:FD:35:73:90:C7:58
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ce:01:3b:f6:1b:ad:96:16:c5:b0:3e:81:eb:a9:30:95:85:
71:f6:e2:1d:39:96:60:2c:05:dc:f0:41:2d:b7:86:60:46:aa:
d6:e2:2a:7d:b2:f9:04:89:21:17:b2:c6:77:3f:c8:9b:78:f3:
fc:69:e6:8e:bd:a8:d3:27:86:53:4e:a4:28:b6:8a:25:15:da:
83:70:7c:83:e2:bc:ca:21:67:46:0f:cb:69:8d:2c:38:41:5b:
af:03:0c:9a:28:e2:8c:ea:40:b2:b7:21:d3:63:d6:5d:4b:14:
51:a1:ef:59:95:1e:ab:a9:f5:b0:f1:47:13:f9:d5:f7:12:eb:
7d:27:38:7a:d8:b4:a6:8b:59:40:bc:a4:1d:55:54:c2:11:9d:
ce:a5:86:26:6c:6d:48:32:ed:9a:06:5c:f2:18:8b:56:e1:65:
9a:18:01:39:da:fa:86:5d:cd:3b:13:9f:7c:6a:b0:45:cd:e6:
d9:22:b5:4b:d7:88:d1:c3:43:e0:4b:b3:e8:47:0b:8a:5a:80:
b6:0e:9e:00:3e:75:c0:71:95:68:23:69:cc:0a:d8:d0:17:75:
2f:8c:a6:77:62:eb:05:e5:b3:5d:3f:ca:c7:8d:68:c1:36:b4:
c5:22:84:c2:fa:4c:ca:97:3e:29:63:74:97:01:d3:b3:09:5f:
ba:89:58:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 14:03:58 2026 by rpki-client