Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: 1UUlCSuxgB17lXKG5IFMkJFxZ9mJQ7DA3tVwtKzNls0=
Subject key identifier: 6B:E5:1C:AB:9A:F1:4A:FB:C8:B6:47:6E:BA:D2:5C:81:38:57:F3:59
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 01A0CC35C98599E9CE45B25F8D198D57EC76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 03:01:12 +0000
Manifest this update: Wed 23 Sep 2026 03:01:12 +0000
Manifest next update: Thu 24 Sep 2026 03:01:12 +0000
Files and hashes: 1: 6jw8eXhX-bpT7z-_T10iSbxdXsE.roa (hash: tAjJfiShc1+r/eVwy4cL3b/IWm8LUEabbh041/MZu1A=)
2: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: qm4KzVFeezQTtEnPECCFvrSNO4gnFl0P2BVHoRO2VzE=)
3: yP76kKTB1GrEa0atsho4_hZD6JM.roa (hash: QOnJF7HEQaem8RY4H4f4VR5i624un0rOsP4HybvqacM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:c9:85:99:e9:ce:45:b2:5f:8d:19:8d:57:ec:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: Sep 23 03:01:12 2026 GMT
Not After : Sep 24 03:01:12 2026 GMT
Subject: CN=6be51cab9af14afbc8b6476ebad25c813857f359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:e6:31:1d:09:36:61:3f:0c:65:80:e5:e7:
3f:27:b9:86:88:c9:18:44:6a:77:7a:19:fd:c5:72:
80:0b:3b:8b:0e:77:a9:3b:b6:99:b9:02:87:b7:23:
c4:b2:e6:4b:5c:f6:eb:49:5e:c2:71:f5:9e:b3:b5:
41:e7:c1:64:aa:96:b5:15:b7:78:0a:d6:c2:50:a7:
bf:0f:eb:ec:11:cf:5b:21:50:aa:ca:0a:ba:e9:9d:
6a:37:a2:75:32:7c:4c:4a:f3:16:8e:2f:8d:3d:be:
79:b1:85:70:12:e7:5a:cc:02:fa:8c:38:e3:ea:a2:
43:cd:1c:24:15:71:e4:e3:63:00:92:c7:72:6f:a0:
93:fc:18:b2:0a:c7:88:45:a1:13:29:c6:89:1d:49:
be:fa:cb:42:8f:bb:5c:a4:5e:29:a3:81:10:22:12:
b5:f0:fa:1b:1e:ad:40:02:b4:1e:2a:e7:b0:cc:db:
22:76:ef:ee:43:2a:4b:15:01:ed:05:f5:3c:0d:12:
08:64:36:6a:b1:4b:ea:1b:b2:b2:96:d7:1c:e4:43:
57:21:8f:1e:d1:2a:39:df:c1:54:33:fe:25:39:b3:
d1:c7:83:0c:c8:70:e5:56:ab:63:1b:f1:c7:49:92:
17:f8:57:b7:0c:f9:05:3d:61:ff:34:8f:4d:c7:cd:
08:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E5:1C:AB:9A:F1:4A:FB:C8:B6:47:6E:BA:D2:5C:81:38:57:F3:59
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d8:9b:b6:0e:f1:4c:e5:6c:42:e8:70:5a:f6:14:0b:f3:a8:
f3:bc:0f:9b:e1:ff:df:fa:29:53:10:7c:70:d4:d2:4a:6e:94:
1a:05:cd:3c:2f:f5:09:c3:95:d8:c3:f6:4c:9a:b9:d6:b2:61:
4f:38:f5:bd:d3:f5:ed:cb:aa:9b:92:71:85:da:ec:dd:b9:e5:
d0:ff:ec:e9:8e:69:c2:58:01:94:c9:aa:0a:e3:b9:d2:df:15:
c3:88:f1:bc:8a:32:e3:fd:ca:7d:df:f2:5a:5b:3e:20:dc:5c:
53:be:67:5e:f6:fa:4b:13:b6:5c:9f:b3:06:ed:31:9e:ce:45:
56:c2:80:51:74:4e:4c:a4:5a:a9:08:3d:e1:bb:75:f3:49:10:
e4:e8:8a:66:39:a5:87:de:7e:0b:67:26:d9:3d:e1:ab:50:57:
45:55:d9:24:d0:19:af:1a:58:cd:4c:8f:8b:8c:36:22:60:53:
aa:e0:d0:57:2c:0a:c3:4e:98:e7:04:ba:8d:6c:bb:27:4f:42:
27:3d:41:df:07:d7:0e:a4:f8:67:38:00:d4:9b:19:8a:8b:dc:
b7:c9:f3:52:eb:b9:ac:81:18:8f:57:39:94:d4:e5:59:9c:ff:
4d:0b:4c:25:9e:2d:1a:18:bc:f7:cd:49:21:0b:34:2b:43:a5:
48:3c:82:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMNcmFmenORbJfjRmNV+x2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNzM0ZWFiY2ZiNWI2YzJhNGU0ODM4OGVkYjNhZjhmNTA2
YjFmYWIwHhcNMjYwOTIzMDMwMTEyWhcNMjYwOTI0MDMwMTEyWjAzMTEwLwYDVQQD
Eyg2YmU1MWNhYjlhZjE0YWZiYzhiNjQ3NmViYWQyNWM4MTM4NTdmMzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHfmMR0JNmE/DGWA5ec/J7mGiMkY
RGp3ehn9xXKACzuLDnepO7aZuQKHtyPEsuZLXPbrSV7CcfWes7VB58Fkqpa1Fbd4
CtbCUKe/D+vsEc9bIVCqygq66Z1qN6J1MnxMSvMWji+NPb55sYVwEudazAL6jDjj
6qJDzRwkFXHk42MAksdyb6CT/BiyCseIRaETKcaJHUm++stCj7tcpF4po4EQIhK1
8PobHq1AArQeKuewzNsidu/uQypLFQHtBfU8DRIIZDZqsUvqG7Kyltcc5ENXIY8e
0So538FUM/4lObPRx4MMyHDlVqtjG/HHSZIX+Fe3DPkFPWH/NI9Nx80I2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvlHKua8Ur7yLZHbrrSXIE4V/NZMB8GA1UdIwQY
MBaAFCpzTqvPtbbCpOSDiO2zr49Qax+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3Yzct
MDlhYWMwNzg5YjkzLzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3YzctMDlhYWMwNzg5Yjkz
LzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItibtg7x
TOVsQuhwWvYUC/Oo87wPm+H/3/opUxB8cNTSSm6UGgXNPC/1CcOV2MP2TJq51rJh
Tzj1vdP17cuqm5Jxhdrs3bnl0P/s6Y5pwlgBlMmqCuO50t8Vw4jxvIoy4/3Kfd/y
Wls+INxcU75nXvb6SxO2XJ+zBu0xns5FVsKAUXROTKRaqQg94bt180kQ5OiKZjml
h95+C2cm2T3hq1BXRVXZJNAZrxpYzUyPi4w2ImBTquDQVywKw06Y5wS6jWy7J09C
Jz1B3wfXDqT4ZzgA1JsZiovct8nzUuu5rIEYj1c5lNTlWZz/TQtMJZ4tGhi8981J
IQs0K0OlSDyCUA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:48:48 2026 by rpki-client