Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: LX5ixzlE/un4zPAqAmJAnCtbYwJzgIxHUKb2LlXQ6Aw=
Subject key identifier: 18:83:66:B4:A7:25:D5:A3:A3:E6:2E:36:4E:63:99:93:5F:9F:56:D0
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 019E31F339296DA17992A74A2C1DD871DE72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 18:01:23 +0000
Manifest this update: Sat 16 May 2026 18:01:23 +0000
Manifest next update: Sun 17 May 2026 18:01:23 +0000
Files and hashes: 1: 6jw8eXhX-bpT7z-_T10iSbxdXsE.roa (hash: tAjJfiShc1+r/eVwy4cL3b/IWm8LUEabbh041/MZu1A=)
2: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: B8Q7Lqt2qUVs+FQ9FiZALIIvgYJyOmjgqYj5+7d2sEk=)
3: yP76kKTB1GrEa0atsho4_hZD6JM.roa (hash: QOnJF7HEQaem8RY4H4f4VR5i624un0rOsP4HybvqacM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f3:39:29:6d:a1:79:92:a7:4a:2c:1d:d8:71:de:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: May 16 18:01:23 2026 GMT
Not After : May 17 18:01:23 2026 GMT
Subject: CN=188366b4a725d5a3a3e62e364e6399935f9f56d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:cc:7b:3e:ba:10:9f:b3:a9:87:a4:48:dc:
f1:bc:f7:c7:5c:75:43:08:2c:12:47:66:d9:c0:b6:
88:34:83:ee:21:9e:8e:d9:88:63:d9:8a:e2:a8:23:
ce:0a:ed:c4:6c:32:4a:49:bb:d2:db:df:9b:4c:b2:
5d:73:03:b9:2d:8e:26:62:67:af:25:bf:0d:e4:49:
62:2f:f6:25:8f:b8:ef:19:2f:4b:95:f3:6b:27:7a:
26:33:57:bd:5e:da:23:fa:00:e2:d6:4f:6e:d7:d0:
a7:06:41:e7:b3:ba:11:fb:c2:0e:c7:9a:49:c5:df:
b6:e0:09:70:bc:30:cf:de:87:bc:d8:d3:d5:d9:93:
f9:36:89:fc:be:08:a1:26:cd:c5:1b:36:86:b6:04:
e4:32:40:df:89:71:87:ca:28:f9:2f:60:a0:0e:b1:
67:3e:dd:4e:1d:d0:e9:e6:7c:66:f4:fc:09:d9:12:
62:b3:90:68:d3:96:2c:26:b2:5e:bb:2d:11:4c:56:
93:df:37:4d:e9:03:5d:63:94:42:4b:2e:38:60:47:
37:65:4d:04:bb:b6:09:a8:6f:d7:7b:4a:97:dd:6b:
4e:27:d2:43:04:22:09:73:50:d6:75:e7:d6:73:a0:
27:d0:08:e1:ef:45:70:3f:98:43:8a:c5:47:bb:ee:
27:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:83:66:B4:A7:25:D5:A3:A3:E6:2E:36:4E:63:99:93:5F:9F:56:D0
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:cf:14:dd:57:92:1e:e0:12:89:46:da:cf:9e:2e:fe:a8:76:
b2:7a:b8:28:aa:a2:ad:c0:96:ae:0a:c3:80:ec:3e:8f:1d:b3:
70:9d:45:5d:bc:a3:b9:a6:36:17:a7:8d:82:a9:ed:3b:eb:f3:
73:a5:d8:e8:1b:ca:e9:e4:01:95:b0:b1:8d:8f:a5:7a:8a:6c:
0a:dd:2c:71:20:80:b9:e2:d4:fc:8c:42:8c:f4:4f:69:31:2c:
5a:5c:58:59:f5:be:56:c5:f0:06:ac:75:8c:c5:d8:f9:9a:49:
7a:c0:70:db:34:59:61:0d:cd:72:47:c1:69:8f:13:82:d3:7f:
50:66:d2:02:7b:0f:c0:6d:33:22:0e:7c:af:3d:78:03:eb:3e:
bd:da:57:dd:9e:4a:59:5c:15:a3:a5:a4:d4:94:7c:87:81:d2:
3d:5e:62:13:38:e2:47:16:f0:90:86:a3:0e:3f:b3:3f:5b:a3:
6c:bb:69:08:67:a5:35:18:3b:a3:a1:93:21:f6:4c:c5:86:94:
34:25:87:75:55:01:1f:ba:0c:40:a8:1b:9d:c3:5b:93:0f:0d:
73:57:16:5c:d1:4e:17:ef:fa:e4:bf:d7:c2:4a:d1:a5:b1:f9:
3e:ac:96:5d:35:16:2b:aa:6e:24:db:1b:7d:6a:c1:f2:3f:18:
2b:4a:a3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:20:12 2026 by rpki-client