Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
File: knpH10d_JWifZNBks-yglkfozqI.mft (raw, json)
Hash identifier: 0h+sWK/fcjMSm2/dY57eBUuHcwZk+UNB+YfJ5LVIAsk=
Subject key identifier: 67:24:54:C5:E1:D9:EF:FB:65:94:F9:DC:3D:BE:6B:1A:05:55:6F:8F
Authority key identifier: 92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
Certificate issuer: /CN=927a47d7477f25689f64d064b3eca09647e8cea2
Certificate serial: 019D265FC8E24A532F96BBAEB6F668884499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
Manifest number: 1384
Signing time: Wed 25 Mar 2026 19:01:44 +0000
Manifest this update: Wed 25 Mar 2026 19:01:44 +0000
Manifest next update: Thu 26 Mar 2026 19:01:44 +0000
Files and hashes: 1: knpH10d_JWifZNBks-yglkfozqI.crl (hash: G/wcpnC2oXbmgnnJf/ybgq2oPuILlAD3Bx86FM28xwg=)
2: s9wft5exBNkYskV_dZzV8PgTmN8.roa (hash: SqDQE0wx9TjgCXIZt8Rvz7S4lvxi/pWK/bn1VcvBoIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c8:e2:4a:53:2f:96:bb:ae:b6:f6:68:88:44:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a47d7477f25689f64d064b3eca09647e8cea2
Validity
Not Before: Mar 25 19:01:44 2026 GMT
Not After : Mar 26 19:01:44 2026 GMT
Subject: CN=672454c5e1d9effb6594f9dc3dbe6b1a05556f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:91:e3:07:15:ae:82:64:c1:7f:d2:98:f7:02:
ec:1b:b8:87:01:06:09:3b:95:7c:cb:59:08:a8:2c:
cf:c5:ad:f1:98:27:0e:70:f1:31:16:9d:42:c5:3d:
bd:31:e3:4a:1a:40:c4:69:49:d3:87:46:4a:d3:7b:
58:74:23:1a:97:87:30:63:cc:27:06:2b:b1:23:ed:
ca:1c:b3:5b:a4:3f:a0:c5:cf:a9:53:bc:7d:4c:fa:
57:91:ab:92:e3:43:57:d6:32:02:f0:99:7e:10:12:
eb:dd:d7:65:ed:b8:35:dd:e2:e5:97:be:f9:d3:8f:
fe:b2:e2:93:68:b3:b3:a5:92:4b:63:13:b9:bb:e5:
84:46:ca:da:dd:3c:6d:0a:f2:d1:23:fe:07:91:07:
ca:f3:ae:ab:26:25:cf:3d:1c:eb:ad:67:dc:7b:ac:
72:89:f4:e1:ce:20:f3:5c:75:0d:fd:b2:52:2d:dd:
77:b3:5b:65:e3:c2:de:ed:83:43:55:f2:e2:1f:36:
1d:66:fa:70:41:97:69:d3:20:99:40:f0:26:f4:e0:
e4:fb:8d:cf:69:e5:64:17:a9:3d:8a:16:22:e2:48:
68:07:99:b1:72:eb:4d:ef:0b:58:37:21:0a:f4:26:
47:cb:cb:b0:c7:22:09:59:73:39:bf:ed:04:59:3c:
5f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:24:54:C5:E1:D9:EF:FB:65:94:F9:DC:3D:BE:6B:1A:05:55:6F:8F
X509v3 Authority Key Identifier:
keyid:92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ab:46:b4:f5:59:b9:95:ea:d6:9b:75:5e:37:dd:6d:05:29:
89:01:82:25:2b:5e:71:6e:3b:9a:b1:76:c6:b0:59:a9:f4:c9:
cd:b4:42:e7:75:65:fd:e1:75:6a:09:7e:00:8a:5b:cd:26:f8:
17:42:50:ab:08:7c:f6:03:18:dc:c7:01:2f:e7:f7:b4:ae:6f:
a8:80:c4:f5:a5:1f:05:43:11:04:f2:87:02:bb:a5:6e:73:fd:
15:96:f3:27:60:6b:aa:19:08:8f:75:d9:c3:7d:5c:7a:89:6f:
75:ad:8c:75:89:bc:30:a0:9c:9c:78:bf:63:bb:31:b8:58:df:
e7:4a:27:41:d7:5f:76:91:86:56:5f:26:a4:c4:3a:6f:7d:60:
0d:f9:92:62:09:89:39:b2:96:0d:bb:bd:ea:0e:d3:46:63:39:
b8:5f:42:de:61:b8:0e:67:1b:aa:99:b5:62:90:45:c6:30:33:
4d:bb:fe:79:00:7c:fd:d2:52:ac:6c:73:f6:82:ac:3e:8f:3e:
44:dc:0b:7e:62:db:ab:fa:ab:94:fd:42:f5:6d:9f:be:a3:5f:
f0:56:43:89:27:ea:ec:30:d6:92:5c:28:8d:ec:0f:6d:53:55:
d9:82:3d:b5:45:98:87:cb:17:51:a3:0c:12:b4:4e:0d:af:32:
78:b1:01:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX8jiSlMvlruutvZoiESZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyN2E0N2Q3NDc3ZjI1Njg5ZjY0ZDA2NGIzZWNhMDk2NDdl
OGNlYTIwHhcNMjYwMzI1MTkwMTQ0WhcNMjYwMzI2MTkwMTQ0WjAzMTEwLwYDVQQD
Eyg2NzI0NTRjNWUxZDllZmZiNjU5NGY5ZGMzZGJlNmIxYTA1NTU2ZjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5HjBxWugmTBf9KY9wLsG7iHAQYJ
O5V8y1kIqCzPxa3xmCcOcPExFp1CxT29MeNKGkDEaUnTh0ZK03tYdCMal4cwY8wn
BiuxI+3KHLNbpD+gxc+pU7x9TPpXkauS40NX1jIC8Jl+EBLr3ddl7bg13eLll775
04/+suKTaLOzpZJLYxO5u+WERsra3TxtCvLRI/4HkQfK866rJiXPPRzrrWfce6xy
ifThziDzXHUN/bJSLd13s1tl48Le7YNDVfLiHzYdZvpwQZdp0yCZQPAm9ODk+43P
aeVkF6k9ihYi4khoB5mxcutN7wtYNyEK9CZHy8uwxyIJWXM5v+0EWTxf8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGckVMXh2e/7ZZT53D2+axoFVW+PMB8GA1UdIwQY
MBaAFJJ6R9dHfyVon2TQZLPsoJZH6M6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25wSDEwZF9KV2lmWk5Ca3MteWdsa2ZvenFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iOGM2ODctYTIzZC00N2IwLTg0NjIt
OTMyNTIwMTRjY2Y4LzEva25wSDEwZF9KV2lmWk5Ca3MteWdsa2ZvenFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iOGM2ODctYTIzZC00N2IwLTg0NjItOTMyNTIwMTRjY2Y4
LzEva25wSDEwZF9KV2lmWk5Ca3MteWdsa2ZvenFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcatGtPVZ
uZXq1pt1XjfdbQUpiQGCJStecW47mrF2xrBZqfTJzbRC53Vl/eF1agl+AIpbzSb4
F0JQqwh89gMY3McBL+f3tK5vqIDE9aUfBUMRBPKHArulbnP9FZbzJ2BrqhkIj3XZ
w31ceolvda2MdYm8MKCcnHi/Y7sxuFjf50onQddfdpGGVl8mpMQ6b31gDfmSYgmJ
ObKWDbu96g7TRmM5uF9C3mG4Dmcbqpm1YpBFxjAzTbv+eQB8/dJSrGxz9oKsPo8+
RNwLfmLbq/qrlP1C9W2fvqNf8FZDiSfq7DDWklwojewPbVNV2YI9tUWYh8sXUaMM
ErRODa8yeLEBAQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:00:34 2026 by rpki-client