Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: uLkvPrNlByBcdoJrFEb8nTBBEzhaLBJkXFrQPiNCy94=
Subject key identifier: A8:AA:92:D0:16:C3:DC:85:53:83:1A:A1:B1:04:38:54:62:13:39:CF
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 019CABD922DF30BE40A21EBE63A68EB557DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:00:59 +0000
Manifest this update: Mon 02 Mar 2026 00:00:59 +0000
Manifest next update: Tue 03 Mar 2026 00:00:59 +0000
Files and hashes: 1: 6jw8eXhX-bpT7z-_T10iSbxdXsE.roa (hash: tAjJfiShc1+r/eVwy4cL3b/IWm8LUEabbh041/MZu1A=)
2: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: gMG2NVxSXTAtPJm7T+YiUNOLGWUGS5G8rT62WkpuIxY=)
3: yP76kKTB1GrEa0atsho4_hZD6JM.roa (hash: QOnJF7HEQaem8RY4H4f4VR5i624un0rOsP4HybvqacM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:22:df:30:be:40:a2:1e:be:63:a6:8e:b5:57:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: Mar 2 00:00:59 2026 GMT
Not After : Mar 3 00:00:59 2026 GMT
Subject: CN=a8aa92d016c3dc8553831aa1b1043854621339cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:03:67:7c:7a:d8:e7:4e:9d:b9:91:43:24:
2a:b9:74:f9:4d:c9:77:f0:64:d4:76:a3:e6:fc:81:
9f:02:d2:ce:db:e9:d4:7a:01:48:1d:95:58:7e:4f:
25:a9:38:e6:8a:96:a4:76:77:fb:29:6a:01:cd:85:
9b:c9:5b:e4:c0:1f:b9:31:7e:d9:ca:84:1b:74:05:
9f:7d:b0:da:11:7e:ae:1e:80:9c:be:74:97:61:92:
b3:a4:dc:23:d7:ca:e1:81:ff:12:39:77:1b:d9:af:
8e:6f:3c:4e:fa:16:a4:2a:27:92:a2:17:95:dc:da:
13:f4:95:01:42:c5:5c:8a:21:50:8c:76:11:fa:fa:
dc:4e:9f:59:47:49:7c:74:6b:fb:aa:79:de:65:bd:
8d:05:33:76:98:60:ef:49:81:f7:67:f7:95:9a:e6:
9e:65:d2:a8:0c:be:58:17:e2:5f:ac:e8:79:cf:52:
99:65:27:3f:13:8c:ad:b9:fd:97:76:bb:90:c2:1e:
c0:7d:8d:e8:f3:1e:72:6c:dc:1c:a7:c8:7b:71:d3:
66:03:fe:18:68:8a:12:cf:97:45:ea:33:59:9c:64:
e2:e6:44:a0:bf:ab:74:ec:27:8e:10:83:c3:d8:a1:
fb:a3:1f:6e:64:a5:60:8b:b8:7c:d3:11:d7:96:9d:
01:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AA:92:D0:16:C3:DC:85:53:83:1A:A1:B1:04:38:54:62:13:39:CF
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:eb:da:fb:3e:43:fc:96:fb:f0:26:f2:2a:d0:a6:26:94:cf:
17:0f:da:80:0a:d3:90:98:06:7a:7a:62:82:3b:3b:40:7f:25:
af:80:8f:ff:71:39:aa:c8:a3:bc:15:ff:b6:0e:16:08:6f:09:
03:58:ab:09:1c:19:a0:fc:22:0c:d2:41:c4:c8:72:a1:e7:87:
92:b1:51:71:fd:2d:5a:54:39:ee:3c:26:d2:2a:b6:53:58:39:
26:75:f8:7b:da:1e:be:9a:d4:c3:1c:5f:5f:32:b3:c4:ca:b2:
32:49:f4:59:12:a8:62:53:53:f2:3d:9b:0f:75:2b:b3:e5:71:
e5:29:c7:17:c1:ab:37:dc:5d:e4:6d:7a:c6:84:07:fa:0f:63:
1f:24:06:40:50:55:5d:ac:f0:1d:c4:c6:93:31:21:b4:31:cf:
f7:51:36:03:b1:0c:0d:3b:d5:31:11:11:00:1c:8f:39:4e:19:
92:58:1e:26:84:10:18:09:61:48:72:40:17:b5:f0:0b:6b:94:
2a:53:30:aa:03:a6:23:2f:d4:3e:85:9a:c1:1d:2b:9e:7d:be:
35:20:ea:a7:24:9a:86:62:4c:89:0c:6c:a3:da:85:a7:2c:12:
41:28:b2:20:20:aa:e3:eb:e7:c4:3b:04:e4:46:8c:20:dd:d2:
2d:3a:13:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:22 2026 by rpki-client