Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: 25RFMtO6areaKNURQcbQhKoOtN7l5sUo3cHq9TGXYGM=
Subject key identifier: AE:27:69:D4:6C:74:14:0B:E1:E7:A2:93:B2:07:3A:28:A2:79:16:6E
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 019D38D2CFB8C53F21F1A36640530B114ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:00:32 +0000
Manifest this update: Sun 29 Mar 2026 09:00:32 +0000
Manifest next update: Mon 30 Mar 2026 09:00:32 +0000
Files and hashes: 1: 6jw8eXhX-bpT7z-_T10iSbxdXsE.roa (hash: tAjJfiShc1+r/eVwy4cL3b/IWm8LUEabbh041/MZu1A=)
2: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: YIGNObCaAZhQiEZQJxN7JGnxY7c7whGnHxAl5aDrkWE=)
3: yP76kKTB1GrEa0atsho4_hZD6JM.roa (hash: QOnJF7HEQaem8RY4H4f4VR5i624un0rOsP4HybvqacM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:cf:b8:c5:3f:21:f1:a3:66:40:53:0b:11:4a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: Mar 29 09:00:32 2026 GMT
Not After : Mar 30 09:00:32 2026 GMT
Subject: CN=ae2769d46c74140be1e7a293b2073a28a279166e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:54:4f:16:28:f9:20:4f:ed:40:0a:ef:e7:
33:6d:f8:1a:c5:95:98:ca:3f:89:f1:8e:60:9c:a3:
82:ea:e3:96:57:21:25:6b:b6:3f:f5:5c:dc:b4:c2:
d0:4c:f8:e8:15:59:5c:e0:a5:8a:8d:71:5e:7b:d3:
f2:4f:fc:03:8a:01:23:19:37:17:c1:a8:ce:15:d5:
34:a2:a0:30:be:24:bd:b1:58:5a:83:c8:e7:ad:27:
ff:a2:e7:4c:73:0c:39:4f:f5:43:90:08:cc:d6:9d:
eb:6f:93:ae:e9:8f:d8:f0:9e:ac:f3:d4:b1:5a:aa:
4c:c9:55:79:c2:80:ac:4e:83:23:9f:30:f9:08:04:
8f:a2:aa:77:0d:0b:86:d7:51:0e:74:68:bc:fe:0b:
26:e1:7e:9d:d0:e4:1f:3b:eb:9e:f2:81:ce:09:e7:
4c:ec:b7:8e:20:26:b0:3a:9e:8b:d1:c1:4e:de:39:
0a:94:8a:99:94:74:b7:91:8a:db:14:bb:94:84:55:
dd:7c:a6:11:8b:21:88:a2:2e:53:d7:4b:98:ee:6a:
12:59:22:55:7e:d5:02:96:ce:4e:c0:c5:83:fa:b3:
d6:37:de:02:f9:55:77:10:d1:e0:55:46:37:5b:c6:
27:84:ea:50:25:20:75:da:36:18:6f:54:25:8b:26:
0c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:27:69:D4:6C:74:14:0B:E1:E7:A2:93:B2:07:3A:28:A2:79:16:6E
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e8:4b:b6:2c:c1:9f:15:69:12:88:36:cb:c3:18:f0:8c:33:
a1:cb:34:58:0b:3b:07:94:91:0f:1c:69:39:6c:75:be:bf:8c:
91:6b:03:6e:9a:d4:20:02:ed:dd:36:f2:bf:96:7f:da:e1:db:
ce:f7:06:c7:8a:3b:5f:e0:ff:b2:57:b5:a8:ad:2c:54:a8:c6:
e3:df:f4:ce:e2:c6:4a:99:66:0c:b0:9c:5c:51:cd:8e:48:b6:
b8:56:24:81:54:62:e8:92:e2:b6:14:09:eb:aa:00:12:96:e6:
09:bd:bf:b5:59:29:37:eb:2f:31:90:a6:e9:bc:72:02:20:65:
01:19:6b:fd:f9:65:84:58:ff:a3:da:f8:09:27:38:7c:23:4a:
51:fe:0f:f2:ab:c4:5d:5c:95:36:a7:48:9f:4f:65:0e:e2:e2:
c9:f1:5b:91:bb:f7:fa:ad:a1:f9:b6:35:c2:7c:5c:8f:e3:59:
a2:6a:2b:eb:02:41:8e:e9:4c:83:c0:1d:7b:89:2f:af:f4:ed:
da:48:66:af:2a:5b:95:6e:58:83:6e:f8:6a:70:91:87:f7:00:
45:a3:f2:08:2e:72:e7:6f:e0:3e:89:0a:d0:a8:8d:e8:85:9e:
20:0d:2a:82:b8:21:3f:b3:26:68:07:ef:15:09:ab:fd:02:65:
9b:19:c1:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040s+4xT8h8aNmQFMLEUq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNzM0ZWFiY2ZiNWI2YzJhNGU0ODM4OGVkYjNhZjhmNTA2
YjFmYWIwHhcNMjYwMzI5MDkwMDMyWhcNMjYwMzMwMDkwMDMyWjAzMTEwLwYDVQQD
EyhhZTI3NjlkNDZjNzQxNDBiZTFlN2EyOTNiMjA3M2EyOGEyNzkxNjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+FUTxYo+SBP7UAK7+czbfgaxZWY
yj+J8Y5gnKOC6uOWVyEla7Y/9VzctMLQTPjoFVlc4KWKjXFee9PyT/wDigEjGTcX
wajOFdU0oqAwviS9sVhag8jnrSf/oudMcww5T/VDkAjM1p3rb5Ou6Y/Y8J6s89Sx
WqpMyVV5woCsToMjnzD5CASPoqp3DQuG11EOdGi8/gsm4X6d0OQfO+ue8oHOCedM
7LeOICawOp6L0cFO3jkKlIqZlHS3kYrbFLuUhFXdfKYRiyGIoi5T10uY7moSWSJV
ftUCls5OwMWD+rPWN94C+VV3ENHgVUY3W8YnhOpQJSB12jYYb1QliyYMswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4nadRsdBQL4eeik7IHOiiieRZuMB8GA1UdIwQY
MBaAFCpzTqvPtbbCpOSDiO2zr49Qax+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3Yzct
MDlhYWMwNzg5YjkzLzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3YzctMDlhYWMwNzg5Yjkz
LzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+hLtizB
nxVpEog2y8MY8Iwzocs0WAs7B5SRDxxpOWx1vr+MkWsDbprUIALt3Tbyv5Z/2uHb
zvcGx4o7X+D/sle1qK0sVKjG49/0zuLGSplmDLCcXFHNjki2uFYkgVRi6JLithQJ
66oAEpbmCb2/tVkpN+svMZCm6bxyAiBlARlr/fllhFj/o9r4CSc4fCNKUf4P8qvE
XVyVNqdIn09lDuLiyfFbkbv3+q2h+bY1wnxcj+NZomor6wJBjulMg8Ade4kvr/Tt
2khmrypblW5Yg274anCRh/cARaPyCC5y52/gPokK0KiN6IWeIA0qgrghP7MmaAfv
FQmr/QJlmxnBbA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:25 2026 by rpki-client