Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json)
Hash identifier: +dP0FR8kJA2bqUldFX1Fsdn3VGvDrSNffZ0yh5Blcgw=
Subject key identifier: F8:DE:7F:79:06:4B:46:7C:A3:BB:82:00:0C:93:CB:35:E7:B3:F0:A8
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 01A155C156112E0BD61DEB2EA67AA8DF686C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
Manifest number: 0FA9
Signing time: Mon 19 Oct 2026 20:01:36 +0000
Manifest this update: Mon 19 Oct 2026 20:01:36 +0000
Manifest next update: Tue 20 Oct 2026 20:01:36 +0000
Files and hashes: 1: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: csV9Y3fkP/XvtZwkr3qMVeq1XiSCgUpDo2lLj+CE0EU=)
2: zpeTK5PwMk-4Xj5vBZGegdo8ck8.roa (hash: CqrBs9z5utywXd/u1L7nQWwUGdydAl74Sn0Il70tRPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:c1:56:11:2e:0b:d6:1d:eb:2e:a6:7a:a8:df:68:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: Oct 19 20:01:36 2026 GMT
Not After : Oct 20 20:01:36 2026 GMT
Subject: CN=f8de7f79064b467ca3bb82000c93cb35e7b3f0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:16:4e:11:b9:97:9c:26:a8:64:85:c1:b0:
d7:34:af:56:9e:d6:e4:d8:af:08:f1:9e:3b:ef:ea:
c5:18:85:c4:e3:77:0c:84:71:fc:4e:ee:16:d4:6b:
a2:75:96:ea:68:4a:a1:49:77:8b:c1:6c:f6:83:6f:
79:ee:c9:df:b6:9f:a6:6d:87:d3:0d:9f:e1:35:5d:
51:29:a6:d8:66:16:fd:58:2c:59:d8:63:f8:9c:dc:
0f:26:8b:eb:cc:0f:73:49:9c:bd:cc:6c:d3:ef:93:
b3:9a:fd:94:92:8d:f9:5f:46:64:38:85:2f:9a:82:
38:11:bf:b1:2a:48:c0:09:11:d3:d3:e9:44:2f:9e:
10:f5:4a:30:10:70:a4:c4:15:a1:85:ab:8f:a3:1a:
60:1a:53:e6:9e:4d:72:10:a8:37:33:68:40:b8:c9:
cc:e3:76:46:13:7d:c7:9c:07:c0:1d:97:ac:ba:d7:
a1:49:5b:d2:38:9c:46:a8:65:c3:df:6f:03:cb:43:
ca:1b:b4:cb:0d:fa:6b:d5:d8:e6:7e:d2:63:62:33:
44:2c:e9:75:dd:94:f2:d7:bd:df:58:12:b3:34:77:
5f:95:b4:91:8d:bf:dd:52:9d:65:f3:fa:18:8d:b3:
b8:e3:75:13:15:94:a7:d3:d6:ef:00:77:63:5a:a2:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DE:7F:79:06:4B:46:7C:A3:BB:82:00:0C:93:CB:35:E7:B3:F0:A8
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:86:f4:f7:74:b0:e3:12:c4:2a:f3:fd:50:da:bc:11:c8:3c:
aa:26:bf:1f:7e:10:2b:15:c0:e6:62:c8:03:c6:ec:1d:0a:ce:
58:b6:e7:ff:b7:84:64:bf:0f:39:b3:57:44:c0:46:ae:18:42:
f3:7c:86:b4:15:6f:f1:77:b1:2d:3b:01:c6:30:d8:01:0f:49:
eb:57:26:82:d7:67:92:57:b1:70:e8:77:77:ff:38:f3:82:ab:
6b:e1:7b:b6:af:6b:0a:c9:f8:dd:ac:4f:ab:b4:9e:13:79:c7:
8e:da:36:98:b1:78:22:9b:ba:6f:06:29:3d:44:ed:a8:c3:c0:
ee:2f:2c:c8:e3:20:c4:f9:39:4c:4d:77:5b:7a:8a:c5:f8:44:
cd:53:68:ae:60:0a:ca:d8:66:cc:28:20:53:2d:3b:99:e1:70:
b6:08:3e:09:6c:c7:5d:74:33:0d:6f:3e:0a:dc:26:9b:20:1f:
2a:c3:3f:16:11:a6:f5:af:d0:c4:4c:b8:43:7e:a1:3a:9f:db:
a5:a6:aa:bf:d4:3f:df:e0:b8:9a:ae:21:1d:15:54:83:96:b8:
60:1f:e4:96:cd:83:bd:de:e3:36:56:1b:fc:35:52:0c:71:5f:
cd:27:e0:91:f1:ab:77:7c:e9:03:e9:d2:a4:69:d1:4e:6e:89:
3b:de:77:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:28:00 2026 by rpki-client