Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: HxZtrzZYM98RrXv74I/GDl3lNhAKb3nCikH1seTMvsE=
Subject key identifier: 97:2C:3A:C6:8A:00:07:67:AD:3A:80:BB:14:30:5A:80:A6:1E:63:5E
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 019F19B1000C89F448353781C29A15F08749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 18:00:57 +0000
Manifest this update: Tue 30 Jun 2026 18:00:57 +0000
Manifest next update: Wed 01 Jul 2026 18:00:57 +0000
Files and hashes: 1: 6jw8eXhX-bpT7z-_T10iSbxdXsE.roa (hash: tAjJfiShc1+r/eVwy4cL3b/IWm8LUEabbh041/MZu1A=)
2: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: l4wYAFCxhSKN9++Xk3gvTpGBrFFcA9p94rUQenxiIcg=)
3: yP76kKTB1GrEa0atsho4_hZD6JM.roa (hash: QOnJF7HEQaem8RY4H4f4VR5i624un0rOsP4HybvqacM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b1:00:0c:89:f4:48:35:37:81:c2:9a:15:f0:87:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: Jun 30 18:00:57 2026 GMT
Not After : Jul 1 18:00:57 2026 GMT
Subject: CN=972c3ac68a000767ad3a80bb14305a80a61e635e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:50:99:3a:80:af:95:b2:b9:a7:f8:ca:6a:
37:bf:23:4e:c5:55:66:da:2b:64:2c:37:74:58:38:
c3:0a:ae:c8:40:5f:70:92:50:48:4a:b3:6e:74:5e:
2f:0d:4a:27:0e:60:b1:b4:01:ad:49:81:e1:d9:77:
d2:66:fd:32:05:31:5d:27:4b:1c:da:6c:6b:66:a2:
52:1c:0d:96:aa:27:0d:4c:90:cd:79:e9:21:eb:27:
d4:ce:8a:58:3d:11:c8:d1:49:29:85:34:08:86:26:
ed:cc:50:0e:c8:5d:3b:a5:a4:14:36:34:53:d6:57:
f6:6e:8c:ce:c2:49:48:1e:a1:96:f5:38:7c:bc:79:
62:bd:b1:c1:af:cd:2c:a3:ab:af:4e:ef:19:77:f1:
8b:27:7b:01:46:de:e4:66:c3:50:9f:2e:2f:84:9b:
c9:57:66:f7:69:6b:dc:db:cd:dc:c3:6a:04:bf:0f:
9c:d3:44:85:e7:c6:16:c1:91:f4:08:01:a0:c7:59:
9f:e7:fc:90:7a:e4:86:fc:ba:83:ab:4b:f4:a4:88:
cf:51:49:7b:f5:8d:9b:4b:0e:00:fb:af:b1:8d:7d:
f8:d8:48:61:a7:4a:45:53:dd:e6:92:a5:5c:e0:e2:
1f:80:0c:d5:a1:63:dc:7b:03:d0:75:1b:86:5e:bf:
19:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2C:3A:C6:8A:00:07:67:AD:3A:80:BB:14:30:5A:80:A6:1E:63:5E
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b0:e5:17:3e:1b:fe:cf:39:8c:0a:0f:8e:ba:b2:84:23:e8:
ba:36:86:c6:c4:0a:e4:20:2d:20:80:05:79:fc:9c:d0:5e:c0:
10:ca:87:04:5e:91:07:16:77:6a:3f:72:cd:59:e6:a7:6d:fe:
86:4e:a0:ed:64:aa:9e:14:10:4e:20:21:98:ed:08:d0:0e:4e:
a8:04:48:dc:b1:74:88:44:22:c3:d1:43:04:62:d1:31:e5:5a:
90:c7:54:e4:ad:d8:82:f6:d3:1a:a1:e8:79:60:aa:bc:5d:cb:
69:83:b2:07:29:d0:03:7d:4d:e0:41:7c:a2:62:0b:34:3d:c9:
18:2f:a5:4c:f0:02:4c:f9:6f:1c:d8:00:84:a2:55:30:b0:e0:
58:ab:19:a5:6c:5a:bf:6f:e4:e9:15:79:1d:b1:c4:54:23:a0:
5e:f7:c4:87:a2:2d:c3:56:2c:28:74:c1:f2:05:c3:15:8d:38:
52:c0:ec:a5:8a:92:18:d0:d5:a7:bf:1a:63:ae:a1:71:fa:40:
08:ff:b4:35:f9:16:85:c6:84:51:1c:9e:cb:b9:bc:bb:10:f5:
f5:38:a7:cf:c9:ec:05:39:9f:f9:12:4c:20:e4:56:02:19:a0:
ef:22:eb:cf:a8:ca:ce:5c:06:e2:99:4f:70:aa:38:61:a6:b0:
dd:45:67:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZsQAMifRINTeBwpoV8IdJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNzM0ZWFiY2ZiNWI2YzJhNGU0ODM4OGVkYjNhZjhmNTA2
YjFmYWIwHhcNMjYwNjMwMTgwMDU3WhcNMjYwNzAxMTgwMDU3WjAzMTEwLwYDVQQD
Eyg5NzJjM2FjNjhhMDAwNzY3YWQzYTgwYmIxNDMwNWE4MGE2MWU2MzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq9QmTqAr5Wyuaf4ymo3vyNOxVVm
2itkLDd0WDjDCq7IQF9wklBISrNudF4vDUonDmCxtAGtSYHh2XfSZv0yBTFdJ0sc
2mxrZqJSHA2WqicNTJDNeekh6yfUzopYPRHI0UkphTQIhibtzFAOyF07paQUNjRT
1lf2bozOwklIHqGW9Th8vHlivbHBr80so6uvTu8Zd/GLJ3sBRt7kZsNQny4vhJvJ
V2b3aWvc283cw2oEvw+c00SF58YWwZH0CAGgx1mf5/yQeuSG/LqDq0v0pIjPUUl7
9Y2bSw4A+6+xjX342Ehhp0pFU93mkqVc4OIfgAzVoWPcewPQdRuGXr8ZUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcsOsaKAAdnrTqAuxQwWoCmHmNeMB8GA1UdIwQY
MBaAFCpzTqvPtbbCpOSDiO2zr49Qax+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3Yzct
MDlhYWMwNzg5YjkzLzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3YzctMDlhYWMwNzg5Yjkz
LzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrDlFz4b
/s85jAoPjrqyhCPoujaGxsQK5CAtIIAFefyc0F7AEMqHBF6RBxZ3aj9yzVnmp23+
hk6g7WSqnhQQTiAhmO0I0A5OqARI3LF0iEQiw9FDBGLRMeVakMdU5K3YgvbTGqHo
eWCqvF3LaYOyBynQA31N4EF8omILND3JGC+lTPACTPlvHNgAhKJVMLDgWKsZpWxa
v2/k6RV5HbHEVCOgXvfEh6Itw1YsKHTB8gXDFY04UsDspYqSGNDVp78aY66hcfpA
CP+0NfkWhcaEURyey7m8uxD19Tinz8nsBTmf+RJMIORWAhmg7yLrz6jKzlwG4plP
cKo4Yaaw3UVnMA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 23:17:26 2026 by rpki-client