Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: O6+olKdNAA39jprVgdQiSHcDv6E1Y3SYgam4TmCecnE=
Subject key identifier: 79:22:7E:C1:6C:55:7D:5B:5C:D6:F1:2F:A9:B9:23:6C:50:A5:2A:FC
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 019EC2C9ACC18306A36A31DB4A876670D6C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 21:00:57 +0000
Manifest this update: Sat 13 Jun 2026 21:00:57 +0000
Manifest next update: Sun 14 Jun 2026 21:00:57 +0000
Files and hashes: 1: 6jw8eXhX-bpT7z-_T10iSbxdXsE.roa (hash: tAjJfiShc1+r/eVwy4cL3b/IWm8LUEabbh041/MZu1A=)
2: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: DdelrIlCuQ1M5Z5RWvkItvuE1j6Ez1uU37OMYuSm6VE=)
3: yP76kKTB1GrEa0atsho4_hZD6JM.roa (hash: QOnJF7HEQaem8RY4H4f4VR5i624un0rOsP4HybvqacM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:ac:c1:83:06:a3:6a:31:db:4a:87:66:70:d6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: Jun 13 21:00:57 2026 GMT
Not After : Jun 14 21:00:57 2026 GMT
Subject: CN=79227ec16c557d5b5cd6f12fa9b9236c50a52afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:be:b5:fc:d9:ae:2e:9d:92:16:f2:e7:b4:4c:
74:47:cf:12:de:3c:dd:07:8c:aa:96:69:e8:d2:87:
07:3f:fa:be:71:69:a9:73:17:6f:b1:5a:0d:7e:f0:
1e:a1:35:0b:da:7e:7b:bb:20:60:d5:1c:f0:b1:53:
22:cf:fc:b5:e9:4b:df:56:67:d4:eb:11:46:c1:27:
28:3f:90:90:1b:61:21:1f:10:36:ff:51:f5:20:f4:
de:21:a2:19:55:99:81:dc:8a:a9:e3:e9:d2:b1:82:
2b:47:a4:f1:be:6c:f9:42:3a:eb:93:99:13:4d:22:
e5:0c:c7:66:e2:94:be:53:e1:f5:a9:28:10:50:3d:
61:98:49:d5:dc:05:f2:6f:fc:20:c0:e9:eb:a0:79:
c1:cd:ca:c9:b5:4c:ae:1e:be:44:92:c2:49:61:15:
40:03:eb:b9:2e:ac:a7:21:8d:ba:a3:4e:32:b4:ff:
e6:3e:f7:0b:aa:58:ec:47:82:7c:7f:22:8f:29:03:
2f:33:b0:18:ef:84:1e:17:1e:1b:c0:f0:a3:5d:a2:
f1:63:41:c5:3c:8f:9d:a7:f8:ef:a0:73:82:9b:9d:
1d:84:08:ce:7a:58:ec:8d:30:44:6c:16:f1:9f:60:
71:d7:73:9b:6b:e4:15:ab:3e:ab:84:f8:a8:4c:44:
e7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:22:7E:C1:6C:55:7D:5B:5C:D6:F1:2F:A9:B9:23:6C:50:A5:2A:FC
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3e:c0:b1:9b:73:20:d5:54:fb:fb:1d:a6:be:b9:90:fb:38:
ae:8a:e5:e4:39:f4:82:22:77:66:c9:01:55:b5:50:a8:65:ad:
87:1d:de:6b:34:c8:48:10:75:a9:a3:cd:5d:44:c1:58:3c:45:
d0:6e:86:34:59:69:13:c3:71:0c:c5:52:41:e6:08:a5:d5:9e:
c1:58:02:c6:92:7d:13:90:77:fa:78:74:a5:16:53:4e:19:9c:
88:3d:20:af:37:70:e6:4d:13:28:60:65:8d:f7:4a:85:db:b6:
6e:ee:42:cb:53:05:4d:e9:c2:77:b9:89:2d:fd:d2:a2:99:19:
91:a7:ee:e6:83:83:7a:2d:a5:ab:c5:c9:41:df:96:83:ed:57:
fe:8e:a5:fd:cb:74:15:1e:09:5f:18:e1:86:14:af:dc:5d:f6:
f5:af:1e:13:3f:5f:89:58:41:90:76:26:2c:32:34:06:b2:15:
b0:25:70:65:b4:f7:79:c4:ae:13:e7:a9:e1:34:6a:a4:1f:ec:
4a:bb:5a:f1:c0:d0:e3:80:94:06:52:3e:fb:b2:52:28:7e:bd:
dd:68:5b:36:02:58:2b:a9:2a:94:ed:8e:98:00:97:2f:55:04:
cd:4a:f3:da:71:3f:7e:e8:4c:d8:ca:1f:dd:2d:fb:b1:fd:e1:
78:f2:ee:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:16:38 2026 by rpki-client