Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
File: pKN763_WXKqa_EbZ8kJzzSfA-WA.mft (raw, json)
Hash identifier: /Pw7/wagGoCiEJoQrnP3Gjwkd8tE+7YrE6hEYI9ypZc=
Subject key identifier: 06:84:DA:85:48:3E:9E:B2:22:4D:72:82:00:13:9B:57:5A:22:DB:2F
Authority key identifier: A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60
Certificate issuer: /CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960
Certificate serial: 019D29610B12E18ED3B517729FB3FB1CD87D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 09:01:58 +0000
Manifest this update: Thu 26 Mar 2026 09:01:58 +0000
Manifest next update: Fri 27 Mar 2026 09:01:58 +0000
Files and hashes: 1: SSrljm7TL06xk5tlaaXSkwUp7Kg.roa (hash: sazy4RYdkCBOD/szP8hwA6eovQhZhACNUEW3EOWYKpo=)
2: pKN763_WXKqa_EbZ8kJzzSfA-WA.crl (hash: OlRnZGAwWNFOd1hnfzjXKMPD82XEHz3kC48yElF6ql4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:0b:12:e1:8e:d3:b5:17:72:9f:b3:fb:1c:d8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960
Validity
Not Before: Mar 26 09:01:58 2026 GMT
Not After : Mar 27 09:01:58 2026 GMT
Subject: CN=0684da85483e9eb2224d728200139b575a22db2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:21:3e:9b:c3:c9:fd:ac:b1:b5:ca:30:44:
de:fe:ce:69:e0:53:6a:f8:90:b4:c4:60:92:1c:e4:
3c:c5:15:f2:bf:36:c7:e0:fe:03:e7:9a:59:df:be:
f5:4d:73:59:71:11:10:c6:9b:dc:ff:b9:a9:fb:37:
34:8d:a8:f3:51:98:93:c0:46:96:aa:ef:b3:ab:1e:
50:b2:37:0a:5a:1a:73:35:59:12:60:1a:7d:85:5b:
6e:97:a4:43:a1:97:02:55:35:19:31:ec:01:70:3c:
5e:71:f5:e6:fe:d6:80:26:dd:0f:54:6f:7c:24:a9:
c3:e6:fd:8f:b6:61:37:00:07:e7:30:cb:56:bf:95:
36:88:62:43:d6:51:24:80:5d:d4:0d:61:e1:ab:50:
fa:7e:20:44:6d:78:32:bc:f5:00:b0:87:d3:4f:7f:
6e:e1:29:d6:b9:44:d1:84:0f:60:5e:14:13:33:f5:
93:fe:17:fc:3a:5a:49:94:2e:24:57:54:e8:95:4d:
c1:78:c8:ff:fe:3d:e3:0b:4e:79:08:36:d5:f2:db:
67:51:dc:8c:4f:30:7d:8a:8e:2c:04:44:16:76:06:
c2:f6:9c:15:43:c7:14:c7:9b:bd:92:1f:ee:ea:67:
2a:01:b5:39:73:97:4e:f2:88:bc:a2:c4:0a:bf:01:
9b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:84:DA:85:48:3E:9E:B2:22:4D:72:82:00:13:9B:57:5A:22:DB:2F
X509v3 Authority Key Identifier:
keyid:A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:72:5e:3f:ac:c5:e7:74:f2:ce:9c:8a:23:51:60:a4:c9:47:
23:4e:a9:b6:0a:73:54:9e:dd:a5:72:ef:55:1f:30:4a:6b:27:
78:10:82:cc:86:38:f4:b2:c3:9c:94:6d:00:8c:f8:df:16:1a:
8f:d8:18:05:20:bc:ba:ea:59:c3:62:b0:f1:c3:b2:95:3f:7f:
5f:ef:f5:d3:e7:35:bc:21:41:de:3a:e6:45:57:d3:0b:1a:2d:
f0:fa:17:47:66:fe:f8:e1:10:52:27:89:56:68:e0:67:91:2b:
e1:79:e4:47:5b:6e:c2:54:c6:c4:b2:6e:48:6a:f7:86:52:d0:
a4:68:00:15:a7:19:de:28:e4:c8:d4:f2:6d:86:1b:cf:4f:05:
73:fd:26:5e:2a:07:16:f6:23:d4:2a:74:9f:8e:b4:de:86:64:
31:62:ab:00:4b:e2:5a:f5:f4:fa:0e:5a:38:b2:cc:40:97:79:
ee:3f:10:8a:c8:f8:07:41:9b:09:ae:e9:3c:f9:9a:c7:1b:21:
f5:82:2a:86:66:23:ed:a1:20:bb:51:96:74:6b:48:7b:9e:a8:
c2:32:3b:4f:6a:51:04:c8:3d:20:f8:f4:17:3b:fa:83:38:db:
ef:17:9a:c4:d6:d7:48:d4:18:d4:eb:52:bb:ce:28:c2:76:21:
eb:aa:c5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:27:48 2026 by rpki-client