Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
File: knp_OqYbIkEYI14yAR7ey-P2pkk.mft (raw, json)
Hash identifier: qmT2u9pCvZgKeaie59cqEyiP1lGFgtdxLy3F46A0vqo=
Subject key identifier: F9:6C:10:FA:70:51:41:BE:77:3B:D7:1C:56:72:9E:C4:4B:DC:FC:7A
Authority key identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
Certificate issuer: /CN=927a7f3aa61b224118235e32011edecbe3f6a649
Certificate serial: 019DA453E1CE6902C7FF6507CB3FB48AC5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
Manifest number: 0470
Signing time: Sun 19 Apr 2026 06:00:53 +0000
Manifest this update: Sun 19 Apr 2026 06:00:53 +0000
Manifest next update: Mon 20 Apr 2026 06:00:53 +0000
Files and hashes: 1: BiFpl804Ndey4H04LmNJRdnfX6k.roa (hash: 2/XmjSjnhl4SdL3k8clQIxw4cK5D7eJ8h4bc9jwN4r8=)
2: ZebVXiZ_5iveVdl-WgUjGaxkTyo.roa (hash: WKn7Us0SMkzmljz2By5N09RI+5/h4IGHBFwWlJQQPqQ=)
3: knp_OqYbIkEYI14yAR7ey-P2pkk.crl (hash: oYG708zqfQDuvQ9zBha25QLZMPOj/h0O9zHFrdeuSG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:e1:ce:69:02:c7:ff:65:07:cb:3f:b4:8a:c5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a7f3aa61b224118235e32011edecbe3f6a649
Validity
Not Before: Apr 19 06:00:53 2026 GMT
Not After : Apr 20 06:00:53 2026 GMT
Subject: CN=f96c10fa705141be773bd71c56729ec44bdcfc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:1b:82:33:75:d2:06:a1:44:4c:cb:12:38:
4d:7f:d2:2f:c7:cb:f0:d1:dd:a0:02:6d:05:79:50:
51:34:19:87:51:c6:89:e1:7c:b6:36:45:b1:56:0c:
e2:57:cd:93:48:d9:05:c0:e0:57:8d:5d:ef:71:6b:
54:8f:a6:19:48:bc:15:af:69:73:1b:3d:55:f6:d1:
0b:54:76:1c:da:05:dd:ba:ff:50:00:0f:87:85:3b:
db:19:30:af:b1:0c:48:c3:2c:ef:45:7b:0c:7f:09:
06:c8:9a:a6:d0:17:c9:b2:75:0a:e1:28:0a:01:81:
d1:9d:d4:84:d4:41:58:c9:8b:58:76:f2:07:84:87:
78:6a:03:80:ca:ad:f9:d4:6d:3a:84:15:dc:48:0f:
c1:ec:21:ac:a3:83:9f:91:c6:42:d7:a0:5c:7c:a2:
f2:8c:ad:ea:ca:49:ee:5b:cb:be:6f:9c:bb:d5:56:
80:ec:ed:b1:f6:7e:21:d5:5a:66:e2:3e:16:ff:ea:
38:8e:df:f2:a6:a6:ee:28:ba:dd:1a:96:0c:53:a7:
06:37:ca:b5:ab:f1:20:08:5e:18:3b:c9:50:bf:27:
7d:c2:b8:b4:e3:4c:4f:14:f0:92:97:d1:0b:f5:66:
53:53:d7:8a:48:6c:14:62:f3:db:71:bd:fe:f8:9b:
34:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6C:10:FA:70:51:41:BE:77:3B:D7:1C:56:72:9E:C4:4B:DC:FC:7A
X509v3 Authority Key Identifier:
keyid:92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f8:73:c0:58:d0:8b:31:3f:01:af:e9:61:fc:a2:2d:4b:a8:
9f:ed:bc:48:30:7a:f0:2a:1d:3e:3d:17:c6:f4:56:2d:ec:ac:
ad:bc:03:b4:b6:01:9a:c9:c1:1f:94:13:40:f3:c0:b9:ee:67:
30:a6:ea:1e:22:5f:1e:19:19:9f:61:d0:16:0a:f4:43:24:eb:
d5:a2:9d:3e:34:84:57:56:63:ab:4f:6f:9f:32:bb:ee:61:a9:
2f:f8:de:4c:3d:a6:aa:48:7d:39:da:95:fe:2d:73:8c:f3:d3:
86:37:4c:82:a6:31:a8:90:50:eb:9c:e4:e6:86:2a:88:43:10:
27:4c:b1:a9:5a:dc:22:1c:06:76:5c:a1:13:08:2e:9b:16:0a:
4a:51:99:d6:c0:e7:49:d4:ae:46:8b:fa:41:2d:53:03:bb:72:
e1:f3:23:82:62:13:99:37:a0:f7:85:07:f8:d5:ef:2a:43:10:
ba:93:47:5b:9b:e3:dd:bf:2e:ea:fd:ff:76:ac:10:3b:88:56:
3d:ba:90:ce:2b:d9:57:62:98:70:11:53:69:8e:29:d2:9c:96:
ab:27:10:f8:be:d7:e4:6d:e2:0e:fb:4d:4c:73:8c:01:f8:d8:
a1:91:42:77:af:99:73:9e:9d:14:c9:88:c7:73:21:f8:a4:13:
a2:44:fa:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:53:13 2026 by rpki-client