Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
File: knEFydH7BpBVSXH0ZMoh9KRcEGo.mft (raw, json)
Hash identifier: JSMXDzgxet5IFeFezHo01Xs73gGsy6wuHFFefq2lqsE=
Subject key identifier: 27:D6:5A:69:42:69:93:E7:EC:D8:F8:DD:AD:F8:1D:13:60:13:F1:7E
Authority key identifier: 92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
Certificate issuer: /CN=927105c9d1fb0690554971f464ca21f4a45c106a
Certificate serial: 01A08BD5AEEC263AE05291C2C76C8EE8192B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
Manifest number: 111F
Signing time: Thu 10 Sep 2026 15:00:31 +0000
Manifest this update: Thu 10 Sep 2026 15:00:31 +0000
Manifest next update: Fri 11 Sep 2026 15:00:31 +0000
Files and hashes: 1: YthcC5vfZaqX4lQHCzfAkYHmBn8.roa (hash: e1Wa1MDzLGWDE0S3sqNrMKZLPwUzO14S8dedZF4Jkxs=)
2: knEFydH7BpBVSXH0ZMoh9KRcEGo.crl (hash: nKmuYFRikceHkO41PAKxReNZi3kGR55vutIx8DP+DSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:ae:ec:26:3a:e0:52:91:c2:c7:6c:8e:e8:19:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927105c9d1fb0690554971f464ca21f4a45c106a
Validity
Not Before: Sep 10 15:00:31 2026 GMT
Not After : Sep 11 15:00:31 2026 GMT
Subject: CN=27d65a69426993e7ecd8f8ddadf81d136013f17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:40:c0:04:88:ab:c3:3f:58:2f:13:c6:74:
26:3e:d0:83:e0:ca:26:fe:43:1d:17:60:29:4a:51:
62:73:55:eb:70:d6:36:d0:a1:f7:4f:9c:02:85:ed:
95:a2:fc:44:78:6a:d7:25:67:a4:0c:23:dd:51:29:
24:5b:ff:61:50:3b:b7:b6:f4:3d:8b:53:56:a0:f4:
7d:0f:07:7e:2d:97:f9:96:18:95:6d:88:76:03:71:
72:de:e2:db:df:fa:80:e8:0a:6a:ea:91:52:4e:33:
44:40:71:24:c9:93:12:97:3f:ad:5a:a8:ef:b0:39:
5a:af:72:6d:de:46:11:a7:ea:ea:f1:d7:49:14:c5:
71:0a:62:d8:e2:10:84:37:d1:82:97:c4:72:2a:c6:
18:7b:5e:e1:29:f2:70:15:ef:83:3f:34:b5:b1:09:
bc:df:1b:e5:14:92:05:cd:54:26:c6:d5:91:0b:72:
a1:05:86:95:61:a8:f1:e3:f7:a2:3e:5c:f1:99:9b:
4f:cf:b2:ef:a3:b5:a0:5c:15:a7:7d:71:f9:b9:0f:
37:d6:ae:63:37:1a:e5:76:8d:00:85:91:d5:8a:59:
2a:96:d2:33:dd:ef:34:fa:c8:57:a9:1b:7d:a2:90:
d2:91:a9:ee:bb:19:f1:01:2c:48:21:a3:02:29:96:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D6:5A:69:42:69:93:E7:EC:D8:F8:DD:AD:F8:1D:13:60:13:F1:7E
X509v3 Authority Key Identifier:
keyid:92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:51:05:f8:51:75:4f:f6:46:9b:4d:4f:58:6e:4c:af:b5:1d:
3b:34:7e:41:3f:a2:a0:5d:5b:db:e6:2d:e5:78:33:4e:69:51:
b2:43:20:3f:4f:8a:d2:32:45:3f:69:e5:23:12:e3:58:3c:98:
f1:13:00:2c:92:95:9c:bf:06:47:7f:d7:71:bf:bf:3e:75:76:
10:ea:19:65:34:43:b9:19:75:07:92:ef:72:9b:b4:7c:38:d3:
4f:98:95:41:f0:7e:66:63:31:ec:b4:27:54:d2:36:4c:a0:10:
ef:74:43:76:b9:6d:35:66:7d:be:b8:c8:87:f0:2c:d3:bc:01:
17:23:84:44:71:30:c9:de:c7:98:95:37:47:6f:5a:ba:7d:76:
b0:c6:20:3d:a2:15:3b:92:b5:d2:d3:bf:4d:47:aa:0f:92:7e:
a4:47:cb:e7:be:f3:09:ab:5f:1f:9f:cd:a3:6e:19:9b:4e:ba:
60:ee:1a:35:4c:6e:cd:57:f4:8c:3b:c8:15:75:b4:b6:7d:1a:
53:8a:e5:9a:15:5c:23:23:9d:e6:4c:49:dd:21:79:c7:56:8a:
fb:2d:be:e0:a2:f1:31:fa:0e:56:53:d9:9f:d2:7b:4b:61:5e:
11:30:d9:ae:d3:0f:ca:71:5f:a3:b1:84:0e:7b:55:dc:ad:6c:
61:7c:51:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:04:40 2026 by rpki-client