Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json)
Hash identifier: fOrDV3ffrTCAZF+otpHejSDKsdy89TB0G2EY3Mkr9LE=
Subject key identifier: EE:B3:96:6A:EB:EE:61:58:E3:35:17:5D:DB:BE:D1:C8:11:72:7E:39
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 01A0E5BEE301825EA7673F6B8167EA30B06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
Manifest number: 0F6F
Signing time: Mon 28 Sep 2026 02:01:27 +0000
Manifest this update: Mon 28 Sep 2026 02:01:27 +0000
Manifest next update: Tue 29 Sep 2026 02:01:27 +0000
Files and hashes: 1: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: 3DxhQVvGnicBe9gsVM+aT5uUGoOJ+TQD3G6E3QYicgQ=)
2: zpeTK5PwMk-4Xj5vBZGegdo8ck8.roa (hash: CqrBs9z5utywXd/u1L7nQWwUGdydAl74Sn0Il70tRPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:be:e3:01:82:5e:a7:67:3f:6b:81:67:ea:30:b0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: Sep 28 02:01:27 2026 GMT
Not After : Sep 29 02:01:27 2026 GMT
Subject: CN=eeb3966aebee6158e335175ddbbed1c811727e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a7:45:77:bf:3a:6a:fa:fc:83:82:84:09:54:
91:8d:4e:02:d5:be:c2:4f:01:21:9a:a8:cd:1e:ea:
09:61:b9:da:a6:91:91:bc:5e:40:28:4d:8a:3b:39:
38:a4:88:17:9c:ed:08:65:4e:a7:fb:50:2f:67:27:
2b:7c:dc:99:58:72:b1:82:b7:8a:1a:a9:dd:71:b1:
4c:3b:68:c6:5b:58:36:b8:44:15:40:bd:66:19:e1:
b6:df:26:52:21:ef:6c:29:a6:68:43:50:93:6e:83:
96:57:d7:4e:c1:92:7e:c1:4d:77:8e:98:bf:90:00:
5d:28:6f:b7:fd:0d:79:0a:b7:eb:dd:f8:b3:81:2f:
1d:0e:d9:58:71:88:5d:91:2f:bf:bf:d4:5b:d8:76:
ac:f0:4b:56:5d:cb:26:df:81:a7:b4:2c:ef:53:10:
ed:8b:a6:ba:c7:c1:88:bb:19:9c:02:0f:c3:a0:35:
98:d4:91:33:03:2a:03:7a:47:43:b2:98:9e:e8:1f:
e5:b0:29:37:a3:36:79:fc:e9:a1:07:13:3a:b5:df:
35:9b:0e:1d:de:a6:1e:0f:7b:96:de:5c:02:f8:35:
71:91:06:a4:52:3c:52:06:c3:1f:6d:af:84:4c:28:
da:02:b1:cc:25:bf:5a:53:a7:c5:e8:a0:b1:eb:91:
02:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B3:96:6A:EB:EE:61:58:E3:35:17:5D:DB:BE:D1:C8:11:72:7E:39
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:26:eb:68:5a:3d:1f:2a:6f:65:2b:60:75:58:18:84:55:28:
6f:73:95:cb:fe:36:2c:0f:08:d7:c2:a8:fe:cc:ab:51:62:87:
9c:e8:eb:14:fc:2c:af:7d:11:bd:63:df:9e:77:14:08:19:c4:
30:36:fc:16:3d:1f:0a:ec:7f:a4:63:7f:12:d6:a9:95:6c:05:
45:36:02:32:50:bf:97:09:d9:d4:75:ce:5c:aa:f5:6a:d7:fa:
c9:0e:1a:39:6f:b9:4c:bf:10:c2:47:a4:37:13:fe:63:a9:1a:
ab:fd:55:27:a6:41:1b:a0:c6:1e:a0:de:9d:3d:11:f5:2b:85:
04:42:87:29:6b:d0:c8:6b:4d:b3:db:07:46:ac:b8:35:17:77:
6a:66:5f:0d:11:73:fb:ea:c1:b7:12:eb:01:7e:90:b1:9c:73:
a6:ba:75:79:b3:44:e0:89:b3:c9:49:80:70:5d:88:38:68:b4:
c3:de:b6:ea:44:8b:03:0c:e7:91:db:62:ea:7c:c5:93:29:e2:
0f:cd:a3:06:5d:aa:5b:cb:01:5b:9d:c4:54:dd:97:45:98:c9:
7d:51:ee:84:a8:cc:92:17:6e:5d:37:f3:27:46:cf:79:b2:51:
b3:9d:89:71:02:41:41:5e:e2:94:8d:3e:c2:70:e7:f3:d8:8c:
54:c7:71:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:28:30 2026 by rpki-client