Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
File: kNRNBKKqhYbulMejNTbDaBatoWM.mft (raw, json)
Hash identifier: bjNH1k/cb5TqTTjtWDoCq4rvqIMXWKa4lVRclo04aKI=
Subject key identifier: 72:56:0D:4F:0B:CD:A9:0B:3A:03:18:39:E5:15:5F:9B:E7:E8:44:54
Authority key identifier: 90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63
Certificate issuer: /CN=90d44d04a2aa8586ee94c7a33536c36816ada163
Certificate serial: 019CAD59B6419DB4E615B43C3A82FF4F6278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 07:01:03 +0000
Manifest this update: Mon 02 Mar 2026 07:01:03 +0000
Manifest next update: Tue 03 Mar 2026 07:01:03 +0000
Files and hashes: 1: kNRNBKKqhYbulMejNTbDaBatoWM.crl (hash: 5IFkj8mbbrJ2p+eHhZ4WaoHxN4ceenNccM8ewVg045s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:b6:41:9d:b4:e6:15:b4:3c:3a:82:ff:4f:62:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d44d04a2aa8586ee94c7a33536c36816ada163
Validity
Not Before: Mar 2 07:01:03 2026 GMT
Not After : Mar 3 07:01:03 2026 GMT
Subject: CN=72560d4f0bcda90b3a031839e5155f9be7e84454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:1a:f1:00:4a:24:df:b7:78:fc:f4:e5:94:
b4:44:6d:7d:9b:92:19:9c:7e:cd:ba:fa:84:91:19:
e0:8c:23:ed:6d:52:45:0b:18:ec:3b:5a:06:9d:03:
bc:26:e5:33:4b:fd:4b:18:81:73:fd:0c:9d:83:09:
09:88:ea:ee:50:ae:de:e9:6d:99:1d:75:a7:c6:f6:
5b:d5:89:b6:7d:f0:3e:14:13:97:89:97:4f:24:7b:
4a:c5:7c:42:d0:31:af:d0:2c:db:48:a6:8e:7f:4b:
d6:2f:30:1e:a3:48:61:e3:ad:21:9d:d4:61:63:f9:
59:a3:80:1f:2d:83:cc:c6:94:4b:79:fd:1a:3e:a3:
5d:be:b4:d2:40:21:f9:4d:b5:40:7a:7a:7e:3c:a2:
e9:d3:a3:f1:31:94:f8:7d:d4:08:c9:95:94:05:e0:
e8:06:32:c5:24:83:f5:97:c1:25:c6:be:80:8e:d4:
0a:49:85:38:41:45:15:4b:91:78:45:87:3c:ff:71:
b1:5f:d5:66:1f:ef:5d:3a:21:f8:e3:1e:9d:56:ed:
be:a2:32:67:bf:fd:0e:2f:e8:30:09:45:c7:2f:56:
d2:38:d4:fc:f6:41:ad:36:7d:ff:da:ee:20:fe:24:
e0:18:ef:fc:37:03:02:20:88:cd:5a:6c:61:05:d6:
86:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:56:0D:4F:0B:CD:A9:0B:3A:03:18:39:E5:15:5F:9B:E7:E8:44:54
X509v3 Authority Key Identifier:
keyid:90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f5:34:b4:f4:6d:99:35:33:da:31:34:49:3c:c9:2d:5c:d4:
23:0e:4e:b3:bf:39:1a:f7:c6:e2:c0:f8:c9:30:bd:9d:98:6d:
58:99:ee:47:9e:3b:1f:f0:00:b5:a6:8a:fd:bc:5c:99:5d:36:
32:19:ae:07:48:02:8c:35:dd:db:35:6e:da:93:ad:d4:66:61:
62:13:3a:dc:31:9b:c0:8e:3c:54:2f:a2:6d:0d:33:21:05:6f:
10:c2:99:37:6f:8f:e5:f7:ed:2a:0c:c9:51:76:19:55:eb:7f:
0e:04:d3:68:bb:d5:27:f1:4b:2d:59:9b:e0:fc:da:33:a2:a4:
d3:e9:51:16:38:ce:20:90:2a:ec:33:a8:48:db:c5:bf:ea:a3:
d1:64:13:db:fc:41:5c:6d:3c:a2:5d:64:aa:60:1f:ce:b0:d3:
79:3c:38:7f:73:94:55:5f:1f:3f:0f:a7:35:c8:0d:a2:09:d9:
01:3e:e0:18:5e:69:71:53:01:1c:6a:b5:bc:39:9a:4a:fd:10:
d5:b4:e4:b1:79:c1:f9:80:29:94:7a:77:78:9d:2f:4d:14:f4:
28:e2:79:c9:5a:3b:cc:b8:e3:f0:f0:84:26:a6:0f:a3:e2:49:
3d:ed:ec:68:49:ff:d5:4a:6b:05:50:c7:7f:0a:1d:4c:66:ef:
c6:96:11:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWbZBnbTmFbQ8OoL/T2J4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZDQ0ZDA0YTJhYTg1ODZlZTk0YzdhMzM1MzZjMzY4MTZh
ZGExNjMwHhcNMjYwMzAyMDcwMTAzWhcNMjYwMzAzMDcwMTAzWjAzMTEwLwYDVQQD
Eyg3MjU2MGQ0ZjBiY2RhOTBiM2EwMzE4MzllNTE1NWY5YmU3ZTg0NDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo04a8QBKJN+3ePz05ZS0RG19m5IZ
nH7NuvqEkRngjCPtbVJFCxjsO1oGnQO8JuUzS/1LGIFz/QydgwkJiOruUK7e6W2Z
HXWnxvZb1Ym2ffA+FBOXiZdPJHtKxXxC0DGv0CzbSKaOf0vWLzAeo0hh460hndRh
Y/lZo4AfLYPMxpRLef0aPqNdvrTSQCH5TbVAenp+PKLp06PxMZT4fdQIyZWUBeDo
BjLFJIP1l8Elxr6AjtQKSYU4QUUVS5F4RYc8/3GxX9VmH+9dOiH44x6dVu2+ojJn
v/0OL+gwCUXHL1bSONT89kGtNn3/2u4g/iTgGO/8NwMCIIjNWmxhBdaGpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJWDU8LzakLOgMYOeUVX5vn6ERUMB8GA1UdIwQY
MBaAFJDUTQSiqoWG7pTHozU2w2gWraFjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva05STkJLS3FoWWJ1bE1lak5UYkRhQmF0b1dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lN2M2OTItOTk0MS00YmMxLWI0YzIt
NmY4Y2FjYzEyMzM5LzEva05STkJLS3FoWWJ1bE1lak5UYkRhQmF0b1dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9lN2M2OTItOTk0MS00YmMxLWI0YzItNmY4Y2FjYzEyMzM5
LzEva05STkJLS3FoWWJ1bE1lak5UYkRhQmF0b1dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfU0tPRt
mTUz2jE0STzJLVzUIw5Os785GvfG4sD4yTC9nZhtWJnuR547H/AAtaaK/bxcmV02
MhmuB0gCjDXd2zVu2pOt1GZhYhM63DGbwI48VC+ibQ0zIQVvEMKZN2+P5fftKgzJ
UXYZVet/DgTTaLvVJ/FLLVmb4PzaM6Kk0+lRFjjOIJAq7DOoSNvFv+qj0WQT2/xB
XG08ol1kqmAfzrDTeTw4f3OUVV8fPw+nNcgNognZAT7gGF5pcVMBHGq1vDmaSv0Q
1bTksXnB+YAplHp3eJ0vTRT0KOJ5yVo7zLjj8PCEJqYPo+JJPe3saEn/1UprBVDH
fwodTGbvxpYRrA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:29:32 2026 by rpki-client