Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
File: knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft (raw, json)
Hash identifier: 0F1yOvOw94HxI6VcnLaWczEo63MAG1wNCCvq3izok94=
Subject key identifier: EC:5C:35:0A:D5:DC:7D:51:8E:ED:ED:0B:A9:B3:14:62:03:85:56:A7
Authority key identifier: 92:7B:FE:6E:9F:B6:80:4C:D9:28:BA:81:27:2D:66:08:56:B5:3D:F7
Certificate issuer: /CN=927bfe6e9fb6804cd928ba81272d660856b53df7
Certificate serial: 019D3865F128B71F9EF1FCB3BA23783579F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
Manifest number: 0343
Signing time: Sun 29 Mar 2026 07:01:37 +0000
Manifest this update: Sun 29 Mar 2026 07:01:37 +0000
Manifest next update: Mon 30 Mar 2026 07:01:37 +0000
Files and hashes: 1: knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl (hash: j9gU/GvJBZuUyGEpecPebTmFfyI9AWOcsy/NNY5002Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f1:28:b7:1f:9e:f1:fc:b3:ba:23:78:35:79:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927bfe6e9fb6804cd928ba81272d660856b53df7
Validity
Not Before: Mar 29 07:01:37 2026 GMT
Not After : Mar 30 07:01:37 2026 GMT
Subject: CN=ec5c350ad5dc7d518eeded0ba9b31462038556a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:87:58:cc:85:8b:c1:e1:12:f3:b1:d2:ed:6d:
b0:7f:61:c0:84:06:75:7c:d5:a7:0c:f7:56:a1:59:
81:5b:46:87:bd:b7:09:85:e8:76:9f:32:47:bd:18:
1d:ba:cf:c1:1c:95:be:f5:8e:0e:75:9a:b2:d4:0f:
46:3b:03:36:b4:af:49:38:88:f7:32:5d:3a:cd:a5:
89:b5:86:60:13:a4:01:fa:41:b0:1c:d4:00:3a:b7:
96:bf:23:a3:52:1d:1c:33:e9:dc:70:49:ab:cb:83:
b0:32:40:0f:47:a4:8c:d1:6a:90:82:91:4b:a6:3f:
60:a0:71:53:2d:0c:ed:b5:02:88:37:cc:24:32:ca:
29:c3:62:b9:32:8c:92:0b:12:f7:fe:ff:08:3a:e9:
40:ca:c9:25:d5:83:48:2a:f8:58:fd:6c:80:76:84:
95:fc:dd:cf:0c:50:70:4a:9a:22:c4:c6:f6:e1:87:
4c:33:36:78:09:02:77:1b:47:7d:e0:76:b0:54:30:
8d:09:20:6b:91:06:c0:47:18:a2:ff:26:ee:aa:3a:
0f:f4:89:19:2e:74:f2:55:66:ef:39:91:a5:be:36:
b6:6f:06:bc:0f:b9:07:5d:43:a4:77:19:e7:e1:34:
81:49:b3:f9:eb:a9:39:47:9f:9f:05:a0:40:b5:06:
4d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5C:35:0A:D5:DC:7D:51:8E:ED:ED:0B:A9:B3:14:62:03:85:56:A7
X509v3 Authority Key Identifier:
keyid:92:7B:FE:6E:9F:B6:80:4C:D9:28:BA:81:27:2D:66:08:56:B5:3D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:33:22:5c:ed:80:e0:c8:b9:e9:68:54:d4:52:43:65:a2:29:
7b:14:27:c6:55:ec:49:ff:4c:a4:75:20:d2:93:1c:7e:36:26:
e5:83:ea:c6:5b:18:31:81:1b:2e:98:e7:ab:cc:c9:b3:d4:ca:
06:d3:01:82:2e:1b:be:ef:2f:9f:4a:f4:dd:9e:03:4e:4f:e7:
9b:48:f7:50:dd:9e:d1:68:9e:58:e3:bc:2a:d6:8d:ab:09:3a:
a0:3c:68:2e:59:1c:a2:77:5b:05:87:1d:9a:d4:25:76:30:0d:
0a:7f:ea:c0:23:e7:22:d3:6d:be:5f:3e:a5:6e:3e:90:5e:e1:
d5:1d:e0:7e:5d:97:9d:7e:a3:ec:ac:f6:84:fe:02:b3:59:b0:
a3:9e:97:e2:7b:42:57:26:47:d0:4f:d9:8d:40:43:02:b7:a5:
b7:94:18:be:d5:8d:d8:55:e3:d4:0c:55:36:52:0d:8f:51:6e:
ba:c4:ff:78:3b:c2:6d:80:aa:72:b2:6e:f3:48:1c:d3:99:9b:
ca:2e:79:4b:e2:93:01:17:1f:d5:45:34:31:38:ea:65:86:c2:
cd:ce:3e:af:c0:ce:62:0b:86:4a:ba:ae:5f:1d:2a:8a:8c:1f:
7f:c5:0d:47:09:57:4d:cb:fd:f9:cc:80:af:2b:51:78:12:88:
b2:ab:28:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:42 2026 by rpki-client