Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json)
Hash identifier: iKhNNPdFsdGYFQoHyAmewo70X8FsKHpttqVb46AnocI=
Subject key identifier: C9:FE:2F:18:20:E7:54:24:8B:F8:AE:BD:55:03:23:14:46:52:61:38
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 01A151E45DA1BE2F103EA6944F852B469734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
Manifest number: 0FA7
Signing time: Mon 19 Oct 2026 02:01:22 +0000
Manifest this update: Mon 19 Oct 2026 02:01:22 +0000
Manifest next update: Tue 20 Oct 2026 02:01:22 +0000
Files and hashes: 1: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: zcVvvhKttQghYSA9rmJsD/tYGPXojxaQXZJTWHYSOpY=)
2: zpeTK5PwMk-4Xj5vBZGegdo8ck8.roa (hash: CqrBs9z5utywXd/u1L7nQWwUGdydAl74Sn0Il70tRPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:e4:5d:a1:be:2f:10:3e:a6:94:4f:85:2b:46:97:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: Oct 19 02:01:22 2026 GMT
Not After : Oct 20 02:01:22 2026 GMT
Subject: CN=c9fe2f1820e754248bf8aebd5503231446526138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:6b:67:82:d2:57:9d:6b:4f:0f:8d:c1:09:
84:9c:23:64:35:a9:45:b7:d3:f0:5b:24:aa:14:87:
26:71:5f:f2:e7:af:9d:57:c9:91:3e:c4:98:f3:81:
4a:ca:52:83:9a:c7:bb:75:81:3b:45:04:c7:5f:b0:
4c:14:a0:2e:02:0a:07:e7:28:79:2e:3b:7a:3d:5a:
16:5b:37:1e:00:ca:f5:50:6c:7f:04:e3:74:77:b0:
d9:f1:33:ab:bc:08:60:73:7a:e4:61:a4:65:7d:9d:
44:22:c0:fd:e4:6b:0d:76:fe:2e:c7:36:d8:f2:81:
61:92:ee:94:d4:10:62:c4:2a:82:7a:18:d4:8a:87:
8e:fb:f6:56:d6:6c:78:86:7e:63:02:4d:dc:a8:e6:
38:46:5b:6a:a9:74:4a:34:5b:51:16:48:fc:1c:2d:
88:25:dd:3a:2c:40:6d:4c:80:8f:e2:c7:56:06:bc:
fa:63:f1:e4:4e:f9:ea:8e:2b:df:ce:9d:6a:27:e2:
1c:4c:56:f7:d9:1c:db:82:0b:fa:8f:66:80:58:47:
d2:76:77:62:ba:17:4f:e0:1f:bc:35:9a:c0:ff:9c:
04:ed:e7:fc:84:74:fc:7a:44:1d:5d:d6:63:0b:a8:
da:21:a1:ca:9e:92:fe:b2:c3:d0:63:0a:14:19:0e:
b1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FE:2F:18:20:E7:54:24:8B:F8:AE:BD:55:03:23:14:46:52:61:38
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:94:e1:e7:4a:f2:09:41:fe:14:04:22:10:27:54:86:54:6f:
91:84:43:7b:9d:44:03:ff:cd:21:44:46:05:25:ec:b6:e5:8d:
84:f1:1e:53:14:3b:c2:d7:c0:c7:0a:f9:12:08:44:7a:d4:38:
54:47:0e:3a:97:a0:6e:bb:b9:99:8f:4f:41:50:3a:91:64:ed:
b6:1f:c7:f0:bf:59:ca:31:37:2e:7f:8c:06:26:a7:9b:1a:61:
3d:09:c7:7a:d2:c6:ee:26:a8:1e:bc:07:89:20:ec:d4:bc:57:
df:2c:57:bc:71:86:5d:5d:6c:85:b7:c9:90:ce:95:e4:f0:b9:
54:c3:19:30:50:d5:2a:df:3e:6c:27:db:dd:cb:ed:1c:55:77:
7a:00:14:f0:63:ca:da:d1:1e:c0:43:0f:15:c5:05:a5:2d:b4:
95:1f:0d:11:5a:2e:a2:ba:9e:a0:d4:d0:7b:ea:ac:43:f2:b0:
ce:c8:de:30:af:e5:73:63:de:22:22:33:61:5c:76:d5:18:3d:
2c:f8:a5:09:be:d4:a9:e0:ec:3b:cf:e1:82:87:fa:f6:dc:a1:
11:bc:6e:95:6d:61:d0:3b:47:5b:14:d4:f4:9b:5f:7f:ee:be:
b9:df:84:53:89:88:84:52:f6:81:d7:10:09:5e:a3:f8:b8:80:
a9:5e:f9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:43:02 2026 by rpki-client