Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
File: knpH10d_JWifZNBks-yglkfozqI.mft (raw, json)
Hash identifier: PU6YxbsLnefWWJSBWV0ee3duU0t50rcDvVGegrg+tSk=
Subject key identifier: 90:5F:33:79:D6:20:CF:CC:F7:7F:5F:37:CE:F3:F5:17:8A:DF:37:BD
Authority key identifier: 92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
Certificate issuer: /CN=927a47d7477f25689f64d064b3eca09647e8cea2
Certificate serial: 019D39AED5CB1D80925AEF27E6DD5C5B512B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
Manifest number: 138E
Signing time: Sun 29 Mar 2026 13:00:52 +0000
Manifest this update: Sun 29 Mar 2026 13:00:52 +0000
Manifest next update: Mon 30 Mar 2026 13:00:52 +0000
Files and hashes: 1: knpH10d_JWifZNBks-yglkfozqI.crl (hash: Kyqq56+v3Na+rtydr4hxoy6GehEuVrkGBNJ1VLjSNQ4=)
2: s9wft5exBNkYskV_dZzV8PgTmN8.roa (hash: SqDQE0wx9TjgCXIZt8Rvz7S4lvxi/pWK/bn1VcvBoIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:d5:cb:1d:80:92:5a:ef:27:e6:dd:5c:5b:51:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a47d7477f25689f64d064b3eca09647e8cea2
Validity
Not Before: Mar 29 13:00:52 2026 GMT
Not After : Mar 30 13:00:52 2026 GMT
Subject: CN=905f3379d620cfccf77f5f37cef3f5178adf37bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:a1:27:30:2d:0e:96:15:2d:3b:a4:32:7c:
b3:d8:d4:1e:0f:89:3a:f8:ff:2c:be:7c:5f:f2:0d:
94:1d:0e:91:9f:d6:b4:a9:8f:13:93:3b:db:9f:bc:
c9:13:8a:85:15:2b:bc:ad:68:ab:cb:31:b5:b8:49:
98:c4:8d:1e:21:03:f7:a1:ed:85:28:17:a4:64:c4:
bb:a4:c2:c7:0f:7d:a2:3f:fc:e5:5a:50:e4:3d:0d:
bf:27:7d:0e:e2:04:65:27:dc:d1:a5:7e:20:6b:be:
5e:76:54:f8:e0:29:2e:8a:b2:9f:85:b9:1f:f5:13:
2d:3f:08:29:3d:cb:d1:fd:28:53:2f:b7:81:3a:e3:
05:26:f6:de:ed:6e:6a:1b:41:aa:cf:d6:d6:a0:f2:
3f:56:88:f0:3e:f3:7d:a3:88:3d:5c:1f:1f:44:ee:
c5:c8:69:3c:d2:1c:62:d5:bb:53:1f:ce:86:e3:8b:
c0:cb:12:95:1a:75:fa:94:5b:31:6a:b9:e3:36:04:
4e:93:8b:7f:78:42:3a:95:be:1f:f9:15:32:d2:04:
ea:d4:89:93:6a:e4:1d:c8:61:f8:22:12:72:72:2d:
41:71:5b:7f:5d:39:8f:7c:07:e8:32:bc:a6:2b:d5:
e5:41:4c:52:a0:f8:ba:9f:ae:9b:de:9c:cb:73:7d:
20:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5F:33:79:D6:20:CF:CC:F7:7F:5F:37:CE:F3:F5:17:8A:DF:37:BD
X509v3 Authority Key Identifier:
keyid:92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2f:c4:f3:48:a8:ee:34:3a:e7:4f:78:70:3d:da:64:a3:26:
d0:6d:03:44:7b:06:59:d5:56:a2:86:75:66:24:dd:0c:a9:03:
be:0d:24:58:bd:71:e7:96:4d:b0:ed:5c:34:9c:f8:c6:11:f9:
fa:0b:c1:fd:eb:ea:45:15:d8:ed:ec:09:b3:2a:b3:1f:ea:f7:
44:12:fb:f8:b4:14:6b:b0:b3:4f:e6:49:32:a3:d7:2d:fd:e1:
ed:42:91:07:c5:a5:dc:91:8f:59:85:bc:58:7b:2f:9e:ca:41:
38:bb:d6:bf:92:34:10:97:28:34:e0:9a:86:7b:05:91:79:89:
bc:1c:ac:f8:90:05:05:1b:af:e7:77:02:a7:5e:cf:6f:34:6d:
0e:83:63:37:1b:8e:ad:42:2d:d2:e0:62:ae:39:ef:1b:09:de:
93:57:c3:4d:20:11:09:03:cf:a1:60:41:c2:ab:c9:7c:c6:e2:
a1:d5:ae:bb:7f:01:5a:09:af:d8:97:2c:0f:b3:db:51:e3:29:
c9:40:94:a3:68:97:5b:72:6f:ef:48:71:59:bb:96:fe:aa:5a:
07:f8:54:99:53:be:a4:fd:5c:da:d7:e5:2e:e0:7a:6c:00:3d:
4d:2e:9c:21:dd:03:60:87:f8:11:25:35:16:fa:ab:80:00:19:
e7:6b:cf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:51 2026 by rpki-client