Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
File: knEFydH7BpBVSXH0ZMoh9KRcEGo.mft (raw, json)
Hash identifier: NJ0c0R8JUayRbB9pMwwoVtZhl42LtVNwQXLql6sP2mY=
Subject key identifier: 37:80:D1:44:CC:45:A8:D8:A1:18:4D:AB:8D:0D:59:7D:1F:BA:70:BE
Authority key identifier: 92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
Certificate issuer: /CN=927105c9d1fb0690554971f464ca21f4a45c106a
Certificate serial: 019D3451E3427293F4D269C78A7C4E9E7F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
Manifest number: 0F64
Signing time: Sat 28 Mar 2026 12:01:14 +0000
Manifest this update: Sat 28 Mar 2026 12:01:14 +0000
Manifest next update: Sun 29 Mar 2026 12:01:14 +0000
Files and hashes: 1: YthcC5vfZaqX4lQHCzfAkYHmBn8.roa (hash: e1Wa1MDzLGWDE0S3sqNrMKZLPwUzO14S8dedZF4Jkxs=)
2: knEFydH7BpBVSXH0ZMoh9KRcEGo.crl (hash: 32oHdwmRKFjso6ZRs5pchZSgahAFiMQ5cQFpWFe4UfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:51:e3:42:72:93:f4:d2:69:c7:8a:7c:4e:9e:7f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927105c9d1fb0690554971f464ca21f4a45c106a
Validity
Not Before: Mar 28 12:01:14 2026 GMT
Not After : Mar 29 12:01:14 2026 GMT
Subject: CN=3780d144cc45a8d8a1184dab8d0d597d1fba70be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:84:b0:a0:74:9b:83:bb:20:d8:74:56:58:
60:cf:c1:a6:75:b6:28:a1:96:ff:01:ae:6f:3d:7a:
66:05:45:02:fa:cc:6a:bf:88:7b:5c:84:0f:64:96:
18:bc:93:43:90:93:e1:1b:6a:36:06:da:57:df:18:
85:c8:c2:c1:8f:70:2b:48:5a:4b:bd:1b:25:47:de:
c6:b2:4a:4a:2a:bb:ab:5e:74:6b:8a:62:90:fa:f6:
94:4a:86:13:bd:d2:fa:d1:98:80:9d:6a:35:ac:77:
65:d7:13:dd:b8:7e:8f:2a:91:43:3c:ba:e9:d6:7d:
3f:b1:90:57:17:1b:40:ed:f2:8a:ab:eb:36:a5:63:
d8:ce:5b:d9:58:94:a8:cb:94:38:02:e0:90:2d:f8:
52:cc:3e:f4:cc:8b:42:99:e3:48:b1:c8:a7:d9:2e:
f5:6e:d7:2a:91:00:da:55:66:5f:b9:d1:bf:74:c5:
6f:6d:af:c3:50:58:4b:92:b9:d7:1c:57:01:97:a5:
a4:d5:42:34:14:80:d7:f2:b9:f3:2d:db:25:b5:eb:
20:99:ca:35:fc:62:bd:3f:fa:28:e4:aa:93:b7:18:
c3:56:4f:2a:c9:49:ed:58:28:c5:6e:c8:68:40:de:
3d:14:23:11:b0:c5:8a:87:f9:2f:37:99:f0:a3:90:
d3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:80:D1:44:CC:45:A8:D8:A1:18:4D:AB:8D:0D:59:7D:1F:BA:70:BE
X509v3 Authority Key Identifier:
keyid:92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:11:e8:9c:82:81:86:50:7c:62:bc:54:ed:b1:ee:2e:7d:00:
62:1a:cd:79:70:c1:48:f7:0a:35:fb:da:1e:a3:7c:21:22:51:
7d:0e:e6:36:52:cf:d6:53:ac:4f:78:c4:4e:f9:a5:43:48:8b:
8a:36:a9:ed:d0:97:08:93:08:6e:d8:9b:99:ad:fd:0d:31:1b:
66:69:68:4b:8c:24:c4:58:ab:88:93:be:29:48:92:94:b0:26:
f6:da:23:d1:a1:64:b0:fd:9e:0f:a5:d8:38:e5:b7:16:67:0b:
ae:d3:7a:ab:ba:c1:23:4f:0d:7c:4c:1c:b1:70:fb:90:2f:85:
48:b1:4b:04:15:9a:1c:74:59:8d:c2:ca:ba:06:a3:e3:9e:26:
58:0f:32:68:7d:4c:64:1e:d5:db:58:c7:60:7c:f8:26:39:c6:
53:d5:bb:bf:8d:5e:92:26:1a:00:b9:96:c2:e0:cd:35:7f:3e:
b4:70:a0:a7:7a:33:1d:cb:e8:39:df:b9:c3:f5:38:40:7a:5e:
72:bb:03:30:7b:ae:77:50:b6:0d:02:f5:45:8e:f2:6a:bc:01:
e6:47:14:86:a5:d6:53:6f:99:60:0d:78:0a:ec:5a:7d:96:ef:
28:c4:c2:8c:b0:07:53:22:6e:1d:9e:5f:92:df:78:bb:3a:b8:
06:82:15:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 21:44:23 2026 by rpki-client