Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
File: knp_OqYbIkEYI14yAR7ey-P2pkk.mft (raw, json)
Hash identifier: LaocwkLjm8/uXUjWOVIApIb3oA8T0+pb3Tj3fGxOvKg=
Subject key identifier: A0:7B:54:FF:36:BC:09:AC:16:E4:9D:B2:EB:92:73:31:25:7C:20:07
Authority key identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
Certificate issuer: /CN=927a7f3aa61b224118235e32011edecbe3f6a649
Certificate serial: 019D3A1C643E84963556B50641286517B39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
Manifest number: 0439
Signing time: Sun 29 Mar 2026 15:00:32 +0000
Manifest this update: Sun 29 Mar 2026 15:00:32 +0000
Manifest next update: Mon 30 Mar 2026 15:00:32 +0000
Files and hashes: 1: BiFpl804Ndey4H04LmNJRdnfX6k.roa (hash: 2/XmjSjnhl4SdL3k8clQIxw4cK5D7eJ8h4bc9jwN4r8=)
2: ZebVXiZ_5iveVdl-WgUjGaxkTyo.roa (hash: WKn7Us0SMkzmljz2By5N09RI+5/h4IGHBFwWlJQQPqQ=)
3: knp_OqYbIkEYI14yAR7ey-P2pkk.crl (hash: rcNbubyXxyXa1qX88qGJa68f56pZd0GyGhPM60Hy2sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:64:3e:84:96:35:56:b5:06:41:28:65:17:b3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a7f3aa61b224118235e32011edecbe3f6a649
Validity
Not Before: Mar 29 15:00:32 2026 GMT
Not After : Mar 30 15:00:32 2026 GMT
Subject: CN=a07b54ff36bc09ac16e49db2eb927331257c2007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:63:4f:6b:95:78:f9:96:f1:19:6c:df:cb:
79:2e:dd:84:14:e4:1d:b1:37:81:ae:8e:03:bc:7d:
ea:4b:a2:ac:ce:51:d9:c5:74:b7:5d:c2:63:c3:45:
7f:ad:ef:38:22:9f:7c:cd:34:75:e4:c2:ec:04:51:
80:d7:16:16:9e:8d:ae:81:8b:62:09:ab:f8:40:b9:
25:a2:8f:78:f5:49:a5:68:0e:41:7e:39:ae:08:25:
a6:df:02:6f:f1:66:bd:b9:61:f0:81:be:ff:62:16:
f1:0e:6c:4b:84:2b:f1:70:d9:77:6c:a9:51:44:5b:
8b:30:1e:b6:e1:d9:28:20:3e:27:3c:cd:cc:57:f6:
37:ae:48:b1:05:87:98:4e:32:64:17:8e:b2:5a:80:
d7:e9:93:c8:1f:79:dc:73:c1:2b:d9:36:48:cf:d1:
10:63:32:a6:5d:60:fc:dd:c6:90:77:e1:c6:bc:f1:
da:89:b0:34:c0:18:b1:b2:27:b4:ea:f4:7a:6e:37:
72:b8:62:1c:8f:d1:13:85:b7:eb:f8:39:cd:33:75:
d7:1c:08:ca:a8:76:9f:58:3c:1f:6d:5e:49:30:34:
af:69:90:05:9c:1a:bc:bb:a5:63:7f:c9:d9:ec:65:
8e:03:0f:db:fb:79:0d:87:f9:6a:6c:e3:58:14:af:
16:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7B:54:FF:36:BC:09:AC:16:E4:9D:B2:EB:92:73:31:25:7C:20:07
X509v3 Authority Key Identifier:
keyid:92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f3:5f:5e:ab:f4:95:19:38:7d:ed:b5:55:af:53:b2:8c:08:
f7:12:f2:e7:97:62:2b:1f:1c:d9:c6:ed:a5:86:84:10:e3:60:
c0:6b:6b:12:f5:ec:8d:7a:02:67:2f:63:d0:8e:bd:05:c9:90:
cc:77:79:79:08:93:d4:e0:ac:b6:cb:42:97:fa:bd:2e:40:1c:
08:e9:e2:bb:d0:23:6b:65:b5:93:dc:9f:e5:67:44:52:cd:01:
ed:42:30:b6:b2:bd:30:d7:41:11:8d:29:58:04:c5:53:7c:9c:
21:c4:2d:f6:df:8d:01:9e:4e:ea:ca:cc:a6:bd:15:58:7e:69:
64:8d:ae:fc:4c:06:f4:1c:e5:0d:9b:66:d3:2a:22:fd:12:90:
3f:cb:1f:ab:88:71:07:8c:f9:ee:b4:48:e9:4d:f3:63:dc:73:
f6:ee:f5:69:b8:4b:1c:4a:a6:26:6b:e8:eb:25:2e:81:80:ed:
8c:b5:dd:7a:e4:67:e9:f2:4a:3c:f1:1d:6c:e8:77:45:56:e1:
cb:cc:f5:d3:7b:2e:e5:0e:cf:91:7b:cf:fd:a9:53:d0:0d:e5:
cc:b9:d3:ca:22:75:35:d6:a0:5c:88:88:40:f3:b4:8a:19:4d:
b0:b7:2e:89:3c:34:2d:31:d7:e0:11:49:84:d2:13:b0:b6:d4:
4f:1e:b7:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HGQ+hJY1VrUGQShlF7OdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyN2E3ZjNhYTYxYjIyNDExODIzNWUzMjAxMWVkZWNiZTNm
NmE2NDkwHhcNMjYwMzI5MTUwMDMyWhcNMjYwMzMwMTUwMDMyWjAzMTEwLwYDVQQD
EyhhMDdiNTRmZjM2YmMwOWFjMTZlNDlkYjJlYjkyNzMzMTI1N2MyMDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof9jT2uVePmW8Rls38t5Lt2EFOQd
sTeBro4DvH3qS6KszlHZxXS3XcJjw0V/re84Ip98zTR15MLsBFGA1xYWno2ugYti
Cav4QLkloo949UmlaA5BfjmuCCWm3wJv8Wa9uWHwgb7/YhbxDmxLhCvxcNl3bKlR
RFuLMB624dkoID4nPM3MV/Y3rkixBYeYTjJkF46yWoDX6ZPIH3ncc8Er2TZIz9EQ
YzKmXWD83caQd+HGvPHaibA0wBixsie06vR6bjdyuGIcj9EThbfr+DnNM3XXHAjK
qHafWDwfbV5JMDSvaZAFnBq8u6Vjf8nZ7GWOAw/b+3kNh/lqbONYFK8W0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKB7VP82vAmsFuSdsuuSczElfCAHMB8GA1UdIwQY
MBaAFJJ6fzqmGyJBGCNeMgEe3svj9qZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25wX09xWWJJa0VZSTE0eUFSN2V5LVAycGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lNWUyMDYtMjNjOC00ZjgyLWI2ZTMt
NTAxYzcxYzQzYjA5LzEva25wX09xWWJJa0VZSTE0eUFSN2V5LVAycGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lNWUyMDYtMjNjOC00ZjgyLWI2ZTMtNTAxYzcxYzQzYjA5
LzEva25wX09xWWJJa0VZSTE0eUFSN2V5LVAycGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfNfXqv0
lRk4fe21Va9TsowI9xLy55diKx8c2cbtpYaEEONgwGtrEvXsjXoCZy9j0I69BcmQ
zHd5eQiT1OCststCl/q9LkAcCOniu9Aja2W1k9yf5WdEUs0B7UIwtrK9MNdBEY0p
WATFU3ycIcQt9t+NAZ5O6srMpr0VWH5pZI2u/EwG9BzlDZtm0yoi/RKQP8sfq4hx
B4z57rRI6U3zY9xz9u71abhLHEqmJmvo6yUugYDtjLXdeuRn6fJKPPEdbOh3RVbh
y8z103su5Q7PkXvP/alT0A3lzLnTyiJ1NdagXIiIQPO0ihlNsLcuiTw0LTHX4BFJ
hNITsLbUTx63Xw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:16:00 2026 by rpki-client