Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
File: kniPTrt0HAw2mg_TBZTNAQHcdHY.mft (raw, json)
Hash identifier: vNUpuaIQzvF8teUiEW/EuGodHCzrLCGbeHVDFNNwyQ0=
Subject key identifier: F9:64:8E:B8:F8:3E:1B:CF:35:CE:87:CB:4C:E4:CD:C9:B1:F2:11:D1
Authority key identifier: 92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
Certificate issuer: /CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
Certificate serial: 019CADC744B94DCB79C849D52F832B5F0ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 09:00:43 +0000
Manifest this update: Mon 02 Mar 2026 09:00:43 +0000
Manifest next update: Tue 03 Mar 2026 09:00:43 +0000
Files and hashes: 1: b3JxtrhKDsDTqBI6cQvHONYRjVU.roa (hash: C950hko8WTv3REmoomJ1yY7S0AF8GUGo8sOTvPlJ2Dg=)
2: kniPTrt0HAw2mg_TBZTNAQHcdHY.crl (hash: GPz2NziTJZng8IG7jfwTUYgtTDhBLJ+SUgcRR+TVvN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:44:b9:4d:cb:79:c8:49:d5:2f:83:2b:5f:0a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
Validity
Not Before: Mar 2 09:00:43 2026 GMT
Not After : Mar 3 09:00:43 2026 GMT
Subject: CN=f9648eb8f83e1bcf35ce87cb4ce4cdc9b1f211d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:56:17:b7:01:6c:1e:5c:d3:7e:e7:39:b0:aa:
2b:06:22:ae:91:03:fe:c6:6f:d2:9a:d2:41:ac:00:
06:5a:f2:5e:5e:23:46:42:34:93:1d:09:2d:50:52:
0e:3a:96:fe:6e:92:f5:66:45:9e:b5:c9:a8:7d:25:
3a:5c:d9:1a:4c:c8:6b:25:b7:f5:82:0e:c0:fa:90:
c6:6e:b0:f1:13:fd:46:dc:3f:0c:7b:e3:15:a5:cd:
22:eb:3c:18:75:47:d2:3f:06:16:97:3e:6a:3b:9b:
e5:a8:f0:ef:77:86:df:d2:81:bd:f4:aa:36:8b:96:
27:e5:b0:a8:68:69:cf:d8:61:e4:a7:75:39:31:e6:
f3:8c:31:bd:79:2c:b5:9f:6f:6e:5a:e2:96:b0:96:
85:02:63:04:4e:53:5e:d7:5c:4c:0f:81:4d:b7:13:
f5:17:1d:b2:fc:71:c9:74:14:10:45:ab:9f:4e:be:
3b:6b:0d:c9:c5:6f:cf:e7:b3:fa:4f:f9:36:90:2f:
a8:4e:86:e7:59:d1:85:43:bf:f4:c8:21:39:9d:20:
a3:2d:60:07:70:f6:69:d0:f3:38:ec:1c:86:98:4a:
d7:c7:1c:24:26:b1:46:4d:5c:6d:e0:4c:f0:b3:64:
2d:c9:b5:32:9b:63:d3:a6:61:58:fb:4c:b3:1e:92:
84:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:64:8E:B8:F8:3E:1B:CF:35:CE:87:CB:4C:E4:CD:C9:B1:F2:11:D1
X509v3 Authority Key Identifier:
keyid:92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3a:5b:bd:89:77:e1:50:b7:19:e3:8e:d8:d1:f8:a8:40:24:
39:68:42:19:18:56:00:3e:56:dc:5c:e0:e8:19:37:32:cc:bf:
d9:22:89:7a:1f:89:46:14:c4:31:8f:ba:e7:32:0c:f9:4f:05:
73:ad:eb:0c:5c:be:01:da:58:45:7f:7a:b6:a7:f6:70:55:b3:
1e:c8:5b:68:41:08:92:74:aa:54:4c:6c:da:a8:f1:39:11:56:
95:5a:f7:9e:3f:58:dc:d2:54:69:81:59:ed:b7:06:d1:aa:67:
80:0e:01:74:65:81:3e:43:f1:42:37:ea:8a:a5:1e:a2:75:a4:
b8:86:de:f8:b4:f6:80:df:b4:73:a4:23:71:fd:9d:4b:5a:82:
c4:f9:ae:70:e6:08:cf:0f:8d:3d:23:ce:9a:a6:66:d2:de:e4:
5a:31:74:d8:0c:7a:bd:a9:44:1e:d8:ed:03:c5:08:1c:7e:ac:
35:fc:ef:53:39:d7:fc:01:b0:af:82:3a:b5:e3:1b:c7:25:6d:
1c:97:d9:b9:0b:55:dd:c6:72:8f:72:f7:2b:d7:e6:19:c4:81:
87:72:55:2d:36:b2:e2:37:54:50:b0:e6:80:d8:0f:6d:a7:ef:
b4:01:9e:10:f0:ee:dd:8f:00:01:f4:10:dd:5e:c1:16:75:7d:
9d:2d:6b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:41 2026 by rpki-client