Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
File: knpH10d_JWifZNBks-yglkfozqI.mft (raw, json)
Hash identifier: TX86wtHD0vt2GN+HfN/39Ba1omhXyYigAqaMd/1xu/A=
Subject key identifier: 53:B5:26:9F:5E:ED:EC:AE:27:A3:FE:D7:73:29:1E:82:B4:76:CE:CC
Authority key identifier: 92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
Certificate issuer: /CN=927a47d7477f25689f64d064b3eca09647e8cea2
Certificate serial: 019CACB51C4B82DDC286F5CDC109158FAFB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
Manifest number: 1345
Signing time: Mon 02 Mar 2026 04:01:16 +0000
Manifest this update: Mon 02 Mar 2026 04:01:16 +0000
Manifest next update: Tue 03 Mar 2026 04:01:16 +0000
Files and hashes: 1: knpH10d_JWifZNBks-yglkfozqI.crl (hash: cj4kkYZ2DG2Secelvjo7xmLmAuFf+Z2x+4TshTQ6r4s=)
2: s9wft5exBNkYskV_dZzV8PgTmN8.roa (hash: SqDQE0wx9TjgCXIZt8Rvz7S4lvxi/pWK/bn1VcvBoIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:1c:4b:82:dd:c2:86:f5:cd:c1:09:15:8f:af:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a47d7477f25689f64d064b3eca09647e8cea2
Validity
Not Before: Mar 2 04:01:16 2026 GMT
Not After : Mar 3 04:01:16 2026 GMT
Subject: CN=53b5269f5eedecae27a3fed773291e82b476cecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:0e:ae:33:70:4e:c0:9c:5b:69:04:3d:f5:
0a:5f:a9:9b:47:e2:0a:7b:d7:90:a9:68:f9:85:73:
46:8f:a9:65:e5:02:dd:b3:a6:9c:b7:ed:cc:b9:ba:
d6:70:c8:fb:74:20:27:ef:91:ce:6a:c8:4d:54:6a:
19:c1:df:5a:f7:1f:84:26:a4:2a:b4:59:5c:af:20:
92:f3:c5:d9:19:11:0f:05:21:cd:8e:cb:8d:6b:43:
3c:0c:8f:01:2c:6d:a5:54:aa:87:13:b5:31:40:7a:
47:1d:99:3b:d2:24:45:9c:b2:ce:40:1c:8e:5c:5b:
d0:35:b7:82:ae:6c:c3:a1:a2:c9:a9:53:96:88:31:
78:20:51:45:55:cb:c4:9c:3b:0d:0e:d8:dd:ff:8d:
5c:6b:27:25:f6:af:fd:f8:f4:73:10:e5:72:5b:06:
e6:95:c8:49:8f:fc:c8:0e:a8:a6:5e:1e:0d:2d:95:
e3:15:e3:fc:89:fd:b4:27:cb:79:9c:b3:57:5d:8c:
e3:1b:4c:b8:b1:4c:3f:46:51:d6:4f:fb:6a:0a:99:
77:d2:46:1c:94:8b:34:16:80:c6:86:f3:92:59:79:
e3:82:92:92:d3:65:aa:2c:fb:68:ec:f3:cb:1e:50:
88:ad:e9:09:d2:e9:cb:92:39:80:dd:9e:e7:f1:e6:
54:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B5:26:9F:5E:ED:EC:AE:27:A3:FE:D7:73:29:1E:82:B4:76:CE:CC
X509v3 Authority Key Identifier:
keyid:92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d1:10:09:54:cb:62:80:af:10:21:c3:51:e4:10:b2:cb:2c:
7a:b6:5e:e6:8b:e5:8c:e2:cd:ab:28:35:ba:28:06:7c:18:25:
d1:e7:f5:08:be:f1:7a:06:90:d9:a6:ea:56:86:fb:95:dd:a2:
8f:4f:ab:fa:63:67:76:84:8e:02:d4:26:d2:d7:c3:fb:c2:f0:
e6:ff:a4:8d:4f:a1:a6:ba:2a:1b:92:08:be:f2:b9:e3:53:f4:
02:94:aa:4c:9c:25:d3:39:87:60:ec:5d:04:4e:63:6e:46:58:
19:81:3c:71:d2:aa:b7:01:51:c9:27:98:9f:9f:b4:3d:15:78:
6c:d5:da:5f:ea:e3:df:d4:f0:41:ee:b1:5a:e3:4e:d3:b3:bd:
c6:a0:1b:11:e2:4a:d6:e9:f7:d4:0e:d5:dd:d9:8d:d7:72:a8:
da:32:c6:6e:32:5b:a9:de:ce:78:2a:4d:ae:63:eb:1c:fc:9a:
d7:ec:6c:96:f2:40:07:54:5d:d2:73:f1:51:c2:20:34:a9:ca:
2c:3f:33:7f:5b:61:b1:db:54:80:c3:1e:2b:3e:e1:b2:d1:f0:
92:54:90:15:36:2f:59:bd:e3:36:8b:91:e9:3c:a8:a2:b7:95:
50:19:5a:83:18:e2:37:13:e4:a2:cd:a9:9f:e1:d5:a7:32:e9:
38:c4:de:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:05 2026 by rpki-client