Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
File: knp_OqYbIkEYI14yAR7ey-P2pkk.mft (raw, json)
Hash identifier: y4+P5TNI9AfBwFAc0Qsu2E+kjN/Fe58eCnecF4MKDng=
Subject key identifier: 8C:B2:06:A1:7D:BF:36:B2:F2:B8:A0:86:0C:80:34:51:8A:7E:3D:D8
Authority key identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
Certificate issuer: /CN=927a7f3aa61b224118235e32011edecbe3f6a649
Certificate serial: 019CAF114D0B2DD5B587D7E45581107C2EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
Manifest number: 03F1
Signing time: Mon 02 Mar 2026 15:01:12 +0000
Manifest this update: Mon 02 Mar 2026 15:01:12 +0000
Manifest next update: Tue 03 Mar 2026 15:01:12 +0000
Files and hashes: 1: BiFpl804Ndey4H04LmNJRdnfX6k.roa (hash: 2/XmjSjnhl4SdL3k8clQIxw4cK5D7eJ8h4bc9jwN4r8=)
2: ZebVXiZ_5iveVdl-WgUjGaxkTyo.roa (hash: WKn7Us0SMkzmljz2By5N09RI+5/h4IGHBFwWlJQQPqQ=)
3: knp_OqYbIkEYI14yAR7ey-P2pkk.crl (hash: a7OtPhgXCFSNiEebFroN4A42rPEwt2aDpw4ZsW4GGdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:4d:0b:2d:d5:b5:87:d7:e4:55:81:10:7c:2e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a7f3aa61b224118235e32011edecbe3f6a649
Validity
Not Before: Mar 2 15:01:12 2026 GMT
Not After : Mar 3 15:01:12 2026 GMT
Subject: CN=8cb206a17dbf36b2f2b8a0860c8034518a7e3dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:85:f5:1d:2a:93:1e:70:ac:d3:c3:9d:ad:
81:0c:a0:07:d2:7f:3d:aa:49:c2:d7:83:37:50:a8:
04:f0:f6:da:7a:fd:de:e9:db:10:72:57:b0:7c:69:
3c:cb:0e:c3:c3:cb:39:9a:d1:65:05:ff:3b:8f:f5:
c0:73:29:39:92:7b:ed:7a:32:63:c2:1f:3d:e3:27:
b3:3e:a2:65:d2:39:e7:7d:c5:87:f1:53:47:21:f0:
0c:b7:86:92:dc:4d:11:fa:d7:94:5e:e3:17:76:d6:
76:3b:89:12:f3:34:8b:d8:f6:e0:f9:27:fc:8d:2b:
72:9e:ac:38:8d:83:e6:a9:9a:57:55:e0:eb:86:1c:
e6:12:a9:de:f6:be:80:e5:cc:ca:8c:68:f0:12:8d:
72:c2:4d:90:a7:22:a9:90:7f:1c:74:24:ea:ea:c6:
1d:c0:66:5b:a3:5b:7e:35:82:b0:57:06:e5:ef:8b:
1a:1c:6e:f2:27:ae:04:01:fb:e7:7b:ab:dc:d7:b9:
ab:bd:79:30:97:72:d1:33:8d:18:be:65:0f:f3:a5:
10:a0:c9:75:60:8c:03:05:c1:d9:88:49:6a:85:91:
f7:5f:22:5a:ea:4e:85:c8:cb:f3:22:36:10:bf:25:
b3:7b:78:08:71:27:63:ff:6b:78:76:b8:b6:2c:43:
ad:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B2:06:A1:7D:BF:36:B2:F2:B8:A0:86:0C:80:34:51:8A:7E:3D:D8
X509v3 Authority Key Identifier:
keyid:92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:df:09:43:4d:ec:1b:1f:0d:f6:e1:60:09:e9:5a:e2:46:90:
73:a2:c1:09:97:3f:11:91:2e:b7:2a:c5:7c:df:0d:75:f4:b1:
30:2d:9c:de:8b:6d:4b:b3:5d:7f:e0:14:83:40:de:51:30:85:
34:52:0e:89:d5:a6:3a:37:6d:1a:58:fc:1c:b5:c3:cd:fc:af:
11:73:51:16:61:55:88:60:40:88:b3:6d:dc:98:77:c1:db:cb:
87:39:b1:35:52:94:33:15:99:20:7e:a7:f2:3d:9b:f9:2c:7f:
14:2c:0e:d9:f3:51:39:2d:c9:f4:1d:5b:2b:fb:34:95:9d:fb:
b7:d1:20:34:0b:e6:41:77:6c:96:64:3f:61:a4:92:6f:89:d4:
41:bd:ba:e4:05:34:da:6b:5c:ad:a7:da:b9:6e:46:4b:aa:ca:
e1:33:09:f8:96:6f:a5:47:cf:4a:71:7e:fe:34:b3:6b:b1:46:
66:0c:00:14:df:7c:84:fd:3c:c6:82:55:d4:a5:85:c2:d2:1f:
ca:55:d1:bf:91:93:e4:a6:17:f7:6d:43:a8:d9:59:e3:f4:cb:
12:3d:b1:a1:41:91:a6:92:62:9b:c6:02:b6:b2:39:e4:92:c6:
c2:92:d2:78:6b:cf:75:25:ae:3a:dd:44:7b:e6:76:da:dd:02:
f7:32:55:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:34:34 2026 by rpki-client