Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json)
Hash identifier: 1UgcUmEsvqhejxnf+NWZiLd+fS1UvW3ASlJVnHH2noM=
Subject key identifier: 4C:04:E9:00:7C:55:37:98:89:8E:FB:87:8D:0B:A8:34:F7:30:E4:E5
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 019E3072BACCB004C99424DBFE6C2EF0EE3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
Manifest number: 0E08
Signing time: Sat 16 May 2026 11:01:25 +0000
Manifest this update: Sat 16 May 2026 11:01:25 +0000
Manifest next update: Sun 17 May 2026 11:01:25 +0000
Files and hashes: 1: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: S+4boYD6XwAVrrhns/yNBUdzfPVftG0rg1SyFCxjM1g=)
2: zpeTK5PwMk-4Xj5vBZGegdo8ck8.roa (hash: CqrBs9z5utywXd/u1L7nQWwUGdydAl74Sn0Il70tRPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:ba:cc:b0:04:c9:94:24:db:fe:6c:2e:f0:ee:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: May 16 11:01:25 2026 GMT
Not After : May 17 11:01:25 2026 GMT
Subject: CN=4c04e9007c553798898efb878d0ba834f730e4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:4e:dd:b0:93:56:50:10:42:dc:b2:89:2f:
ef:41:28:c0:98:64:00:9e:c3:d1:97:d7:aa:3d:f9:
af:fe:63:a8:1a:8c:6f:ae:31:0d:92:5c:c0:24:6c:
68:a3:36:e5:b2:fb:36:76:d1:f4:50:e7:c9:d8:fa:
fc:72:0c:ab:eb:dc:a3:03:e5:7f:1c:4b:4e:8e:e6:
5b:c9:9c:bc:bf:f2:e9:e7:33:69:5d:f5:dd:a2:40:
2a:be:ac:1a:b0:fd:0e:fb:e8:9c:2c:6c:73:62:e2:
69:80:23:1f:f9:70:2e:a3:5c:01:84:9d:97:a2:16:
f2:39:16:90:50:9a:68:da:bf:81:62:af:35:59:16:
c5:c8:9d:a0:f6:96:b5:fa:44:7c:77:03:58:8c:ef:
28:a3:f5:a0:11:42:36:14:80:46:1d:6e:42:b9:b5:
d5:bb:1f:29:88:87:5e:7a:03:35:33:0b:cd:66:fe:
9d:43:f2:0c:b7:60:61:03:fd:95:11:d2:32:98:cf:
8c:ff:41:5a:6a:75:b9:e4:98:54:27:06:11:29:a5:
40:66:10:85:cf:1e:12:70:04:29:92:98:08:8c:33:
52:ba:e9:4c:a4:f3:71:90:b4:af:19:81:25:5e:c3:
fc:22:6d:5e:08:95:a2:b8:22:5c:6a:38:50:f6:ef:
10:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:04:E9:00:7C:55:37:98:89:8E:FB:87:8D:0B:A8:34:F7:30:E4:E5
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:56:59:77:08:2e:eb:a4:d6:6d:af:a1:9a:c1:ed:a5:91:04:
c6:71:e0:af:cf:61:1c:41:42:af:94:42:bc:fa:19:53:91:92:
44:1a:2a:5f:66:4b:93:6c:34:a1:27:cb:59:38:3d:09:92:e2:
3b:f9:5b:c6:f8:9f:2a:8b:a6:66:c7:83:ba:b1:ec:f5:93:10:
04:90:55:92:3b:88:60:16:9a:ab:a0:91:2c:41:1d:97:a2:c8:
cc:8f:da:d4:61:42:68:02:02:31:4b:3b:9c:2e:69:5a:27:66:
32:7c:0c:3c:89:ae:46:85:fc:b3:a0:d3:b8:39:f3:fa:e9:3e:
7f:9c:73:62:2f:bc:97:6c:44:ec:03:52:f7:2b:d8:bc:fd:e6:
54:d1:30:d2:01:00:4b:d4:a6:7a:6f:ef:c0:93:08:9c:a0:5a:
8a:d9:fc:4a:e6:35:2d:86:13:09:45:8f:fd:58:15:76:e8:20:
89:17:bd:a3:38:15:39:2c:1c:96:54:be:4e:28:bf:6b:83:04:
db:80:b0:b4:13:18:9b:aa:91:e1:0c:a3:f2:a6:cc:51:21:37:
7a:dd:f1:eb:2c:db:cc:cb:10:d9:af:57:41:58:ee:19:d7:c5:
2c:55:1d:50:ce:80:0a:f0:0a:18:87:fe:a5:ae:ff:66:df:6c:
f7:20:35:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcrrMsATJlCTb/mwu8O4/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyN2FmN2Q0MDdmMDQ1ZGJlYTgwNzczMjY1YjA0Y2U1NzRk
MGI3ZTMwHhcNMjYwNTE2MTEwMTI1WhcNMjYwNTE3MTEwMTI1WjAzMTEwLwYDVQQD
Eyg0YzA0ZTkwMDdjNTUzNzk4ODk4ZWZiODc4ZDBiYTgzNGY3MzBlNGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhFO3bCTVlAQQtyyiS/vQSjAmGQA
nsPRl9eqPfmv/mOoGoxvrjENklzAJGxoozblsvs2dtH0UOfJ2Pr8cgyr69yjA+V/
HEtOjuZbyZy8v/Lp5zNpXfXdokAqvqwasP0O++icLGxzYuJpgCMf+XAuo1wBhJ2X
ohbyORaQUJpo2r+BYq81WRbFyJ2g9pa1+kR8dwNYjO8oo/WgEUI2FIBGHW5CubXV
ux8piIdeegM1MwvNZv6dQ/IMt2BhA/2VEdIymM+M/0FaanW55JhUJwYRKaVAZhCF
zx4ScAQpkpgIjDNSuulMpPNxkLSvGYElXsP8Im1eCJWiuCJcajhQ9u8QdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwE6QB8VTeYiY77h40LqDT3MOTlMB8GA1UdIwQY
MBaAFJJ699QH8EXb6oB3MmWwTOV00LfjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZDVlMjktYWY2ZS00YzhjLWIwYWQt
NTE2ZTBiMzBlYjEwLzEva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82ZDVlMjktYWY2ZS00YzhjLWIwYWQtNTE2ZTBiMzBlYjEw
LzEva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1ZZdwgu
66TWba+hmsHtpZEExnHgr89hHEFCr5RCvPoZU5GSRBoqX2ZLk2w0oSfLWTg9CZLi
O/lbxvifKoumZseDurHs9ZMQBJBVkjuIYBaaq6CRLEEdl6LIzI/a1GFCaAICMUs7
nC5pWidmMnwMPImuRoX8s6DTuDnz+uk+f5xzYi+8l2xE7ANS9yvYvP3mVNEw0gEA
S9Smem/vwJMInKBaitn8SuY1LYYTCUWP/VgVduggiRe9ozgVOSwcllS+Tii/a4ME
24CwtBMYm6qR4Qyj8qbMUSE3et3x6yzbzMsQ2a9XQVjuGdfFLFUdUM6ACvAKGIf+
pa7/Zt9s9yA15g==
-----END CERTIFICATE-----
Generated at Sat May 16 20:21:00 2026 by rpki-client