Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
File: knaysJMpLF-nXm4UwqSZrIR-QWs.mft (raw, json)
Hash identifier: X28tnXAR2AuOPBe2xJOyZAeYKZpF+zAT8bj3FAdZIlM=
Subject key identifier: 9E:37:8F:90:47:79:5F:F2:47:87:94:C7:7D:BC:C4:4A:CE:B6:DA:BE
Authority key identifier: 92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B
Certificate issuer: /CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
Certificate serial: 01A08A1F3B7B3D09C6040AAF4F7C982F7A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
Manifest number: 1817
Signing time: Thu 10 Sep 2026 07:01:37 +0000
Manifest this update: Thu 10 Sep 2026 07:01:37 +0000
Manifest next update: Fri 11 Sep 2026 07:01:37 +0000
Files and hashes: 1: knaysJMpLF-nXm4UwqSZrIR-QWs.crl (hash: N2XV02uvE5gh0HFPKVUOEtadwGq/Oo084pLC7ftNyQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1f:3b:7b:3d:09:c6:04:0a:af:4f:7c:98:2f:7a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
Validity
Not Before: Sep 10 07:01:37 2026 GMT
Not After : Sep 11 07:01:37 2026 GMT
Subject: CN=9e378f9047795ff2478794c77dbcc44aceb6dabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:fb:74:17:3c:42:03:22:f0:c9:67:9e:09:
72:46:c7:36:73:8a:1a:45:db:43:8b:ea:42:3f:65:
20:e2:f3:9a:eb:f0:4e:ea:78:e6:84:df:73:90:71:
b6:ed:b2:8d:67:a6:ee:fd:9c:c9:f2:ff:40:0b:ad:
88:1f:b6:4a:f8:bc:3f:13:20:3e:4c:ab:c4:fa:5e:
b5:6c:41:85:e4:56:17:66:7f:c2:78:a4:6c:15:44:
a4:6f:c7:9e:cb:56:8c:d0:f4:54:54:32:12:76:e6:
58:39:94:d5:bf:a3:0b:b4:08:fe:3a:6c:84:ea:27:
b8:b9:80:8b:bd:5a:21:6a:37:14:37:f8:b9:b5:0a:
34:64:3b:0e:b1:bd:bf:2a:d5:ac:9d:a7:2b:67:5b:
ec:58:28:75:54:f8:04:98:8a:4e:47:84:f5:03:86:
ff:44:e6:b3:82:80:c1:26:20:16:1d:35:43:89:9f:
1a:08:b7:ec:c2:03:ff:b7:25:e5:91:e2:4b:ee:67:
56:51:05:04:a0:55:9e:ad:fc:f1:39:ce:22:46:51:
79:89:5e:40:77:ee:43:db:42:63:f6:be:b0:a4:ed:
13:b4:dc:35:f7:ac:16:35:23:9c:a4:2f:b2:55:0d:
8b:e3:1f:5b:29:a0:f1:1d:92:bb:e8:19:1e:39:ad:
f6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:37:8F:90:47:79:5F:F2:47:87:94:C7:7D:BC:C4:4A:CE:B6:DA:BE
X509v3 Authority Key Identifier:
keyid:92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9d:47:5d:d8:99:73:e6:fb:0f:45:fe:25:70:87:0b:bf:f0:
77:b6:d7:d2:4d:d2:4b:ad:14:b2:f7:d5:86:af:8c:25:d7:ff:
a9:fc:c0:1f:23:81:ce:85:e2:8e:5e:12:14:8e:94:62:94:68:
33:64:69:57:59:99:cf:d9:26:cf:a6:d9:e8:1e:69:88:3c:09:
d1:90:83:0a:5a:fb:aa:8e:02:f3:2a:9d:2e:50:f1:c5:a4:fd:
be:be:4e:4a:a9:9c:ef:de:7b:64:73:7c:de:a6:bb:23:22:83:
c6:4d:de:07:3e:48:e8:58:e3:96:db:c8:36:2a:76:43:22:66:
f8:37:aa:d1:64:e2:80:3a:5f:67:97:46:b5:ba:7a:41:49:a1:
c6:e5:c9:d9:b5:9b:b1:f4:cd:40:90:e4:66:e2:07:cf:9a:9c:
09:43:73:f8:a9:cb:43:25:b1:0d:1d:cc:a0:18:51:6d:b9:76:
10:73:68:a1:6a:0c:07:77:30:33:43:93:90:83:e1:99:76:98:
48:6b:13:7b:74:8a:1f:aa:88:04:86:61:38:0f:e3:9f:2b:5a:
c7:2e:54:11:6c:57:d2:64:2f:40:18:3a:64:fd:30:10:d2:35:
d8:89:b2:98:58:37:26:fd:ac:19:cf:aa:23:9b:ca:2b:56:04:
f0:bd:9c:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKHzt7PQnGBAqvT3yYL3pKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNzZiMmIwOTMyOTJjNWZhNzVlNmUxNGMyYTQ5OWFjODQ3
ZTQxNmIwHhcNMjYwOTEwMDcwMTM3WhcNMjYwOTExMDcwMTM3WjAzMTEwLwYDVQQD
Eyg5ZTM3OGY5MDQ3Nzk1ZmYyNDc4Nzk0Yzc3ZGJjYzQ0YWNlYjZkYWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmr7dBc8QgMi8MlnnglyRsc2c4oa
RdtDi+pCP2Ug4vOa6/BO6njmhN9zkHG27bKNZ6bu/ZzJ8v9AC62IH7ZK+Lw/EyA+
TKvE+l61bEGF5FYXZn/CeKRsFUSkb8eey1aM0PRUVDISduZYOZTVv6MLtAj+OmyE
6ie4uYCLvVohajcUN/i5tQo0ZDsOsb2/KtWsnacrZ1vsWCh1VPgEmIpOR4T1A4b/
ROazgoDBJiAWHTVDiZ8aCLfswgP/tyXlkeJL7mdWUQUEoFWerfzxOc4iRlF5iV5A
d+5D20Jj9r6wpO0TtNw196wWNSOcpC+yVQ2L4x9bKaDxHZK76BkeOa32tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ43j5BHeV/yR4eUx328xErOttq+MB8GA1UdIwQY
MBaAFJJ2srCTKSxfp15uFMKkmayEfkFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25heXNKTXBMRi1uWG00VXdxU1pySVItUVdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zZmE5MmYtY2FiZC00MTNiLWFlNWMt
NjliNzMzY2JjNTI4LzEva25heXNKTXBMRi1uWG00VXdxU1pySVItUVdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8zZmE5MmYtY2FiZC00MTNiLWFlNWMtNjliNzMzY2JjNTI4
LzEva25heXNKTXBMRi1uWG00VXdxU1pySVItUVdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqp1HXdiZ
c+b7D0X+JXCHC7/wd7bX0k3SS60UsvfVhq+MJdf/qfzAHyOBzoXijl4SFI6UYpRo
M2RpV1mZz9kmz6bZ6B5piDwJ0ZCDClr7qo4C8yqdLlDxxaT9vr5OSqmc7957ZHN8
3qa7IyKDxk3eBz5I6FjjltvINip2QyJm+Deq0WTigDpfZ5dGtbp6QUmhxuXJ2bWb
sfTNQJDkZuIHz5qcCUNz+KnLQyWxDR3MoBhRbbl2EHNooWoMB3cwM0OTkIPhmXaY
SGsTe3SKH6qIBIZhOA/jnytaxy5UEWxX0mQvQBg6ZP0wENI12ImymFg3Jv2sGc+q
I5vKK1YE8L2cAw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:31:02 2026 by rpki-client