Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json)
Hash identifier: 5Pg7DQyG8IlGuiBe48d3QPsNHyoS8WSJ6+A/I64hQag=
Subject key identifier: B7:F8:FF:53:83:F4:B8:D1:D5:31:5B:F6:6F:E6:1A:18:32:8F:E3:3C
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 019FAAF55D6E31A1791F2EFFE01AD70D9E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
Manifest number: 0ECC
Signing time: Tue 28 Jul 2026 23:00:34 +0000
Manifest this update: Tue 28 Jul 2026 23:00:34 +0000
Manifest next update: Wed 29 Jul 2026 23:00:34 +0000
Files and hashes: 1: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: J4aL5fJ8hEddZG8+OL48zCQZK+kkkrzmyocZ9mshiFc=)
2: zpeTK5PwMk-4Xj5vBZGegdo8ck8.roa (hash: CqrBs9z5utywXd/u1L7nQWwUGdydAl74Sn0Il70tRPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:5d:6e:31:a1:79:1f:2e:ff:e0:1a:d7:0d:9e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: Jul 28 23:00:34 2026 GMT
Not After : Jul 29 23:00:34 2026 GMT
Subject: CN=b7f8ff5383f4b8d1d5315bf66fe61a18328fe33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c0:13:c5:e8:e8:73:f6:bd:10:62:60:28:b4:
de:7c:88:ae:be:d4:1e:b6:84:f6:d3:c5:a2:63:ff:
30:a9:0f:72:9f:e6:bd:2e:66:a5:78:3a:23:fb:70:
56:e4:99:cc:8b:b2:4c:71:54:f2:3d:be:ee:ee:11:
5d:e6:ce:f8:e7:d7:f8:f9:52:ca:91:79:16:9a:eb:
81:52:0b:01:29:75:7f:83:03:48:f7:e6:9b:24:f2:
89:96:83:18:64:5a:7d:15:75:29:8c:7e:cd:53:25:
2a:77:25:d9:7d:a7:73:76:44:73:98:94:5e:32:5f:
c6:72:24:c6:16:a1:56:b8:5d:e2:4f:84:47:bf:bb:
f1:26:b9:1f:41:da:bf:15:be:7d:88:6a:ec:f3:c8:
a8:45:6b:44:bf:9b:2a:f0:ae:98:90:71:c8:c5:de:
b5:f4:93:6e:9d:33:03:3c:ca:00:d6:64:03:24:99:
79:4b:33:d0:3a:a3:75:dd:4e:4c:3d:42:b7:79:35:
47:b8:40:4e:43:eb:8b:da:cb:e6:f1:f9:da:e7:c9:
2a:81:5b:d6:4d:36:87:61:6d:9b:be:4c:2e:db:20:
13:b0:09:16:0a:f0:b1:87:95:a0:6a:98:22:ee:b0:
8d:5f:79:d7:29:8a:82:96:1c:3a:2e:0f:c0:5a:b7:
f5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F8:FF:53:83:F4:B8:D1:D5:31:5B:F6:6F:E6:1A:18:32:8F:E3:3C
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d6:f7:0b:99:3e:31:b6:ee:5c:f4:0f:fe:fd:6e:8a:53:4c:
94:5f:2e:e1:57:7b:f5:ad:2c:d4:83:a0:42:57:ea:63:34:a1:
3b:4c:65:85:a2:0a:84:d8:ee:3c:8d:53:53:90:c9:c0:11:4c:
0a:79:49:38:9d:34:97:5e:8d:2f:9d:02:40:61:c3:b4:a2:06:
b6:9d:a0:e8:44:a5:af:7d:2e:13:5c:43:6d:0f:3f:f3:96:cf:
bd:af:c0:37:b5:6c:bd:c6:15:0b:67:8d:dc:d1:b7:e0:a2:c3:
da:e7:af:7a:13:8d:67:c6:c2:20:a0:53:84:94:19:f6:78:14:
84:9f:10:53:89:fc:42:21:10:fe:d5:3a:68:c7:c4:57:a1:2b:
22:21:27:e6:be:30:9e:92:59:88:46:c2:90:35:b6:92:c4:5e:
6f:e0:40:d1:99:dd:da:54:ab:c5:77:af:1a:d7:0b:0e:a1:7f:
97:dd:56:08:b2:2f:d2:84:22:df:f7:a0:70:66:c9:b8:6d:5e:
f3:b6:cb:2f:f8:13:69:ab:ab:4c:9f:eb:60:f3:91:29:2a:f1:
a9:77:a8:d8:6a:2f:3c:c3:12:03:4c:e0:78:1b:37:b1:88:a1:
1a:cb:1b:f6:5c:5a:77:0e:03:de:12:15:cf:b3:6f:53:a0:03:
e6:05:ab:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:57:28 2026 by rpki-client