Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: q38JQsYxPUJ9lXopiSim0hoTUuBHrEQBpZaczaRKces=
Subject key identifier: DB:3E:B6:74:C2:43:2C:BB:4F:D3:84:D7:CA:A8:58:F0:F8:47:1A:90
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 01A151762AE25D6B7EC36C72F71D2A827500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 1AB0
Signing time: Mon 19 Oct 2026 00:01:01 +0000
Manifest this update: Mon 19 Oct 2026 00:01:01 +0000
Manifest next update: Tue 20 Oct 2026 00:01:01 +0000
Files and hashes: 1: 6jw8eXhX-bpT7z-_T10iSbxdXsE.roa (hash: tAjJfiShc1+r/eVwy4cL3b/IWm8LUEabbh041/MZu1A=)
2: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: l7cfZObbN+BPmJMlUrb2u4RUFvFMe+9fxfge8w1rkU4=)
3: yP76kKTB1GrEa0atsho4_hZD6JM.roa (hash: QOnJF7HEQaem8RY4H4f4VR5i624un0rOsP4HybvqacM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:76:2a:e2:5d:6b:7e:c3:6c:72:f7:1d:2a:82:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: Oct 19 00:01:01 2026 GMT
Not After : Oct 20 00:01:01 2026 GMT
Subject: CN=db3eb674c2432cbb4fd384d7caa858f0f8471a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:40:52:37:d1:90:e0:67:92:6a:ce:93:69:
ed:d9:19:84:aa:d2:c7:fd:f1:b6:43:dc:1f:d1:f7:
c0:c4:a1:8a:87:77:89:4c:f9:a7:68:9f:b1:12:2d:
03:e3:cd:f3:5a:2f:b3:59:8e:6a:68:db:c1:8c:b1:
6b:02:a0:18:70:24:59:3b:69:af:87:a6:91:df:56:
be:4e:7a:22:d8:25:2e:60:9e:2e:fe:66:69:38:00:
ab:ef:47:7a:2f:6d:ec:00:ad:34:19:f9:ad:a9:e9:
18:77:25:79:99:86:bc:64:92:55:71:24:b5:b0:00:
0a:64:e8:84:98:79:f2:0c:ee:62:43:c4:38:f1:fd:
f3:fa:bd:9d:09:a9:10:34:72:39:a8:24:25:e9:ce:
8c:25:14:db:1b:f7:f2:74:6f:40:e8:14:c0:86:95:
10:b1:11:79:90:10:07:c2:61:51:e1:2f:11:86:01:
5e:15:b3:1f:2b:e4:48:83:67:25:e9:f6:82:f4:d8:
a9:c6:ae:01:18:a0:c8:12:06:f7:4b:d9:45:99:10:
43:55:d7:40:f5:7d:8a:9d:71:91:20:95:63:20:17:
0d:0c:6c:bf:b9:e9:af:48:cf:7e:f6:f1:1f:88:23:
86:bd:15:93:6d:06:ec:fb:27:d9:f7:58:11:58:f5:
a5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3E:B6:74:C2:43:2C:BB:4F:D3:84:D7:CA:A8:58:F0:F8:47:1A:90
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7d:b6:61:3e:54:68:47:0d:34:cc:cd:34:09:e0:08:8f:0c:
88:19:78:13:6f:2f:50:9d:07:57:6d:42:1e:c5:ae:d4:66:78:
65:26:5a:a8:21:e8:8c:ab:99:13:47:5d:f1:93:d3:97:54:ec:
bd:db:b5:f4:fb:8f:ad:95:26:af:18:66:32:1c:c6:72:0a:03:
92:4b:5d:4d:6f:d8:86:0d:49:ef:3d:10:f7:0c:9b:4a:ce:75:
14:cc:02:45:1c:ce:bc:85:90:08:a8:e7:11:ea:0f:b8:9c:ad:
db:fe:fb:38:09:64:63:f5:3c:fc:55:94:51:77:e7:0f:a1:f7:
59:89:94:f2:da:e3:6e:b9:ed:4d:58:b2:5f:6d:d6:d3:e7:70:
19:d4:cf:96:76:d5:e8:4d:ea:fc:23:d7:19:dc:1c:5a:dc:ee:
05:13:07:fb:58:8e:59:d9:c7:b2:b7:6c:f9:d7:11:98:fa:3f:
5d:7c:af:1b:4c:46:00:1e:c8:0f:34:95:f3:0d:64:b7:b6:62:
52:45:77:8e:50:f4:3b:6a:5a:7a:5b:fc:b4:27:8e:71:a5:b9:
4c:b7:ef:80:28:8a:c2:ab:71:c0:23:9d:be:59:ce:d3:51:7a:
48:f3:0e:79:01:84:b6:69:e7:ab:d5:05:6d:c2:f2:9b:c3:ac:
da:f2:b1:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFRdiriXWt+w2xy9x0qgnUAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNzM0ZWFiY2ZiNWI2YzJhNGU0ODM4OGVkYjNhZjhmNTA2
YjFmYWIwHhcNMjYxMDE5MDAwMTAxWhcNMjYxMDIwMDAwMTAxWjAzMTEwLwYDVQQD
EyhkYjNlYjY3NGMyNDMyY2JiNGZkMzg0ZDdjYWE4NThmMGY4NDcxYTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ1AUjfRkOBnkmrOk2nt2RmEqtLH
/fG2Q9wf0ffAxKGKh3eJTPmnaJ+xEi0D483zWi+zWY5qaNvBjLFrAqAYcCRZO2mv
h6aR31a+Tnoi2CUuYJ4u/mZpOACr70d6L23sAK00GfmtqekYdyV5mYa8ZJJVcSS1
sAAKZOiEmHnyDO5iQ8Q48f3z+r2dCakQNHI5qCQl6c6MJRTbG/fydG9A6BTAhpUQ
sRF5kBAHwmFR4S8RhgFeFbMfK+RIg2cl6faC9Nipxq4BGKDIEgb3S9lFmRBDVddA
9X2KnXGRIJVjIBcNDGy/uemvSM9+9vEfiCOGvRWTbQbs+yfZ91gRWPWlywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNs+tnTCQyy7T9OE18qoWPD4RxqQMB8GA1UdIwQY
MBaAFCpzTqvPtbbCpOSDiO2zr49Qax+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3Yzct
MDlhYWMwNzg5YjkzLzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3YzctMDlhYWMwNzg5Yjkz
LzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe322YT5U
aEcNNMzNNAngCI8MiBl4E28vUJ0HV21CHsWu1GZ4ZSZaqCHojKuZE0dd8ZPTl1Ts
vdu19PuPrZUmrxhmMhzGcgoDkktdTW/Yhg1J7z0Q9wybSs51FMwCRRzOvIWQCKjn
EeoPuJyt2/77OAlkY/U8/FWUUXfnD6H3WYmU8trjbrntTViyX23W0+dwGdTPlnbV
6E3q/CPXGdwcWtzuBRMH+1iOWdnHsrds+dcRmPo/XXyvG0xGAB7IDzSV8w1kt7Zi
UkV3jlD0O2paelv8tCeOcaW5TLfvgCiKwqtxwCOdvlnO01F6SPMOeQGEtmnnq9UF
bcLym8Os2vKxdQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 04:10:10 2026 by rpki-client