Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: 1d2oUWUNtBN03FOU/bR6Ph+9mHOTtqWrpGBG/frgAaY=
Subject key identifier: 1C:58:9E:A7:F5:84:42:ED:CA:6E:17:36:E5:FC:9D:DE:91:94:87:B5
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 01A0016F2D3375CC419DC0AA799D445A7DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 18:00:58 +0000
Manifest this update: Fri 14 Aug 2026 18:00:58 +0000
Manifest next update: Sat 15 Aug 2026 18:00:58 +0000
Files and hashes: 1: 6jw8eXhX-bpT7z-_T10iSbxdXsE.roa (hash: tAjJfiShc1+r/eVwy4cL3b/IWm8LUEabbh041/MZu1A=)
2: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: AjcNACSPxHfTiU2JfqrVIc8WmFxLByAYvi9Te0TWSNA=)
3: yP76kKTB1GrEa0atsho4_hZD6JM.roa (hash: QOnJF7HEQaem8RY4H4f4VR5i624un0rOsP4HybvqacM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:2d:33:75:cc:41:9d:c0:aa:79:9d:44:5a:7d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: Aug 14 18:00:58 2026 GMT
Not After : Aug 15 18:00:58 2026 GMT
Subject: CN=1c589ea7f58442edca6e1736e5fc9dde919487b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:90:8b:d7:ad:ee:52:92:ba:8a:52:2e:24:98:
74:e6:a1:1e:78:40:43:b3:10:1e:3c:1e:b2:de:57:
3e:77:5e:c0:48:b0:69:41:66:1b:e1:0a:1b:61:24:
64:35:b7:c2:8f:c0:01:ff:d0:37:96:9e:41:fb:b0:
ab:9a:bc:62:67:c3:1c:b2:a8:25:ea:26:5d:78:29:
5f:01:7e:27:c9:85:ed:a0:55:3d:6a:6f:89:a5:b1:
aa:74:23:1b:30:d3:b1:bc:5d:66:be:31:1a:63:36:
95:d2:d1:aa:df:7a:44:3f:f9:19:73:bf:e1:c3:2d:
e1:8d:3f:13:bf:ae:28:df:98:db:4e:a6:89:60:98:
8c:24:df:6b:68:27:20:a8:4a:14:b5:fe:91:14:8f:
b0:3a:88:16:11:3f:c4:79:a8:9f:78:1c:26:ef:2e:
f7:82:4d:a5:ba:b2:80:96:e3:51:c8:3c:1c:e9:46:
67:23:fd:14:74:1d:3f:52:f0:8c:3c:21:8f:1a:9a:
62:e3:16:69:fb:96:ab:ed:46:7c:9a:ea:90:c7:3c:
68:0f:05:bf:74:55:9c:2c:d0:7f:8e:f1:74:fd:5b:
5a:21:7d:93:88:2c:39:70:29:96:f3:58:6d:2b:1e:
de:78:4a:11:1a:4a:b0:b8:7d:a9:27:6a:1f:ec:30:
29:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:58:9E:A7:F5:84:42:ED:CA:6E:17:36:E5:FC:9D:DE:91:94:87:B5
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:14:a8:e9:05:50:9b:c6:30:9d:ba:63:84:f7:29:4e:90:dc:
ac:04:1d:81:c4:58:41:1f:66:32:4a:d7:c3:a9:30:07:d6:9a:
13:ee:f3:96:0a:94:ac:87:45:b2:fd:a0:25:2d:fe:5a:50:68:
1b:d4:60:ea:22:b0:68:1f:5c:f0:3e:26:63:c7:af:d5:46:6c:
3c:82:73:d6:5d:dd:8c:74:ad:cf:4f:a6:06:25:ad:5b:66:38:
11:f7:72:7d:24:fb:62:85:02:58:9f:03:22:a3:f9:6a:01:4e:
90:d3:21:f5:cd:76:76:b6:52:0d:d7:dc:c9:17:7c:72:c3:1e:
36:ba:b9:8b:40:d7:6e:15:88:82:8b:7b:d4:ae:96:34:10:35:
12:20:cc:d5:d7:a8:d1:4f:e4:1d:42:18:e4:a7:14:f9:a9:9a:
52:dc:19:f2:35:2e:81:c6:e8:82:f9:f8:de:e7:9b:1d:cb:e7:
9a:99:25:66:51:6d:4d:b3:24:69:08:91:43:d8:d1:42:34:b1:
e9:64:2f:e7:54:54:8a:cb:b9:de:68:ff:c0:af:99:92:91:22:
5e:d1:3a:10:04:51:94:6b:bd:df:05:4b:cd:49:10:42:3c:44:
5c:f7:8a:1f:00:89:58:e7:33:4d:bb:cb:4d:d0:34:c3:33:4a:
13:04:20:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:28:01 2026 by rpki-client