Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json)
Hash identifier: Vn8Clc6XBZ8DkWGhK8C1XFQUTYVmKhpJ7aF453ItOXw=
Subject key identifier: FC:A4:B1:9C:6E:D4:E0:B9:32:07:F3:8E:3C:9A:DF:AC:28:A8:4D:0C
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 019CAC4705AEF1E9D2244FB1155EEAA7C491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
Manifest number: 0D3F
Signing time: Mon 02 Mar 2026 02:01:01 +0000
Manifest this update: Mon 02 Mar 2026 02:01:01 +0000
Manifest next update: Tue 03 Mar 2026 02:01:01 +0000
Files and hashes: 1: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: RrhhCvXluHADDZpMUEZGcjHooCibmCU5LwAAuU9vHaE=)
2: zpeTK5PwMk-4Xj5vBZGegdo8ck8.roa (hash: CqrBs9z5utywXd/u1L7nQWwUGdydAl74Sn0Il70tRPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:05:ae:f1:e9:d2:24:4f:b1:15:5e:ea:a7:c4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: Mar 2 02:01:01 2026 GMT
Not After : Mar 3 02:01:01 2026 GMT
Subject: CN=fca4b19c6ed4e0b93207f38e3c9adfac28a84d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:29:4b:f1:93:2c:00:e6:e2:9b:f0:02:ef:28:
6b:2f:34:86:a4:f4:87:ef:98:32:1a:ce:9c:68:fe:
c8:89:fd:a8:44:2a:50:6f:c4:92:ed:73:60:47:1b:
49:b8:e3:65:0a:21:a8:fb:98:16:ff:d5:13:e8:b1:
91:92:b3:2d:2b:02:3e:0f:87:aa:ca:79:5c:f2:ae:
df:20:59:3d:59:bf:e0:33:6e:09:84:93:b5:ab:82:
42:2f:a6:3a:ca:fc:86:ee:33:05:65:7a:73:e0:24:
e8:07:92:ec:70:42:bc:8f:aa:e3:50:94:34:39:83:
67:0e:1e:d5:af:f5:22:b1:e4:a8:2c:55:42:3e:e6:
da:70:d6:26:76:67:f5:6a:58:c6:3f:cd:c1:5f:7d:
e8:64:30:33:28:62:f7:73:5c:86:ff:0b:7f:5b:0f:
19:81:38:5c:e3:80:d5:52:cf:8d:ae:0e:cc:d9:2d:
cf:83:09:03:aa:20:0a:22:d9:b6:f7:3c:38:01:f8:
c6:5d:4b:3d:5c:61:75:2a:27:06:53:d2:da:c3:25:
d3:47:b5:9f:9d:ae:08:e4:92:23:81:23:81:a7:6c:
2d:eb:38:73:88:e5:b3:63:28:e0:c8:f8:4f:7b:d0:
76:22:07:73:50:d4:ca:aa:09:17:70:fb:93:c8:41:
7c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A4:B1:9C:6E:D4:E0:B9:32:07:F3:8E:3C:9A:DF:AC:28:A8:4D:0C
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:c6:05:03:da:3f:38:7a:6a:3d:e0:61:f7:de:65:74:13:d7:
c4:9d:ae:1f:77:91:ed:7c:b2:9a:f8:40:8c:d6:6b:55:47:c1:
26:0c:c5:9b:f1:1f:56:4b:9b:f0:2b:c1:59:d5:d7:1f:ad:e8:
56:f3:3d:b0:79:84:30:c1:4c:cc:1d:59:7a:04:b6:d8:6f:f6:
78:fc:2b:fa:39:fc:ff:05:29:22:07:04:e9:8f:52:2c:b6:cc:
8e:17:b8:41:1d:94:f2:2f:57:2c:0d:54:c8:68:74:95:0d:86:
d7:cc:ac:e7:36:6a:62:51:f6:80:46:44:07:6c:fb:52:f7:74:
78:25:08:7f:8a:c6:ba:19:65:62:4d:6a:68:83:4f:24:c4:6b:
46:69:a9:49:74:df:6c:f1:72:e1:fa:8f:d3:24:ec:51:32:9b:
d5:e9:0c:fb:1e:cd:85:61:f9:58:13:dd:fd:0d:11:48:d7:87:
60:9a:5b:d3:c9:cd:3e:19:c1:fd:d5:23:32:54:4c:ab:52:5a:
99:c4:a5:5a:6f:c8:30:15:1b:47:71:a6:a4:3b:bb:11:14:8e:
47:b1:03:ec:80:26:2e:53:2e:d9:0a:29:6a:3a:44:95:83:c0:
33:25:4b:5a:1d:32:c6:73:29:4a:95:f1:ac:bb:1a:4d:22:60:
4b:99:db:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRwWu8enSJE+xFV7qp8SRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyN2FmN2Q0MDdmMDQ1ZGJlYTgwNzczMjY1YjA0Y2U1NzRk
MGI3ZTMwHhcNMjYwMzAyMDIwMTAxWhcNMjYwMzAzMDIwMTAxWjAzMTEwLwYDVQQD
EyhmY2E0YjE5YzZlZDRlMGI5MzIwN2YzOGUzYzlhZGZhYzI4YTg0ZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ylL8ZMsAObim/AC7yhrLzSGpPSH
75gyGs6caP7Iif2oRCpQb8SS7XNgRxtJuONlCiGo+5gW/9UT6LGRkrMtKwI+D4eq
ynlc8q7fIFk9Wb/gM24JhJO1q4JCL6Y6yvyG7jMFZXpz4CToB5LscEK8j6rjUJQ0
OYNnDh7Vr/UiseSoLFVCPubacNYmdmf1aljGP83BX33oZDAzKGL3c1yG/wt/Ww8Z
gThc44DVUs+Nrg7M2S3PgwkDqiAKItm29zw4AfjGXUs9XGF1KicGU9LawyXTR7Wf
na4I5JIjgSOBp2wt6zhziOWzYyjgyPhPe9B2IgdzUNTKqgkXcPuTyEF84wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyksZxu1OC5Mgfzjjya36woqE0MMB8GA1UdIwQY
MBaAFJJ699QH8EXb6oB3MmWwTOV00LfjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZDVlMjktYWY2ZS00YzhjLWIwYWQt
NTE2ZTBiMzBlYjEwLzEva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82ZDVlMjktYWY2ZS00YzhjLWIwYWQtNTE2ZTBiMzBlYjEw
LzEva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvsYFA9o/
OHpqPeBh995ldBPXxJ2uH3eR7XyymvhAjNZrVUfBJgzFm/EfVkub8CvBWdXXH63o
VvM9sHmEMMFMzB1ZegS22G/2ePwr+jn8/wUpIgcE6Y9SLLbMjhe4QR2U8i9XLA1U
yGh0lQ2G18ys5zZqYlH2gEZEB2z7Uvd0eCUIf4rGuhllYk1qaINPJMRrRmmpSXTf
bPFy4fqP0yTsUTKb1ekM+x7NhWH5WBPd/Q0RSNeHYJpb08nNPhnB/dUjMlRMq1Ja
mcSlWm/IMBUbR3GmpDu7ERSOR7ED7IAmLlMu2QopajpElYPAMyVLWh0yxnMpSpXx
rLsaTSJgS5nbFw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:04 2026 by rpki-client