Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft
File: vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft (raw, json)
Hash identifier: IHcul5Eyw16ZaVQq57qbicmuCli3CjN+DYh5DYMN3fM=
Subject key identifier: 6E:92:15:70:23:4C:D2:27:22:BC:BC:3E:EB:FE:C7:9E:69:61:CC:F8
Authority key identifier: BC:AA:11:46:AF:D4:F4:5F:11:70:95:A1:5A:7D:E0:BB:F9:78:14:4A
Certificate issuer: /CN=bcaa1146afd4f45f117095a15a7de0bbf978144a
Certificate serial: 019D28BB4EA15375FD50F88F58BA27B14624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKoRRq_U9F8RcJWhWn3gu_l4FEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft
Manifest number: 03F9
Signing time: Thu 26 Mar 2026 06:00:57 +0000
Manifest this update: Thu 26 Mar 2026 06:00:57 +0000
Manifest next update: Fri 27 Mar 2026 06:00:57 +0000
Files and hashes: 1: vKoRRq_U9F8RcJWhWn3gu_l4FEo.crl (hash: kw0lyGY8LyS2HGaLnXra1cTszkBjtfOWzx+EShsJ5j8=)
2: w5XzmEXW43VSoovsUGYhXAVueg0.roa (hash: EAiFQLFWJa8Sm5zDP29zAvgzVkCLLSccHJFgQ5JfQ5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKoRRq_U9F8RcJWhWn3gu_l4FEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:4e:a1:53:75:fd:50:f8:8f:58:ba:27:b1:46:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcaa1146afd4f45f117095a15a7de0bbf978144a
Validity
Not Before: Mar 26 06:00:57 2026 GMT
Not After : Mar 27 06:00:57 2026 GMT
Subject: CN=6e921570234cd22722bcbc3eebfec79e6961ccf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:14:0e:f3:b8:50:11:c9:87:0f:6c:33:da:
27:5e:e4:78:ac:f4:e9:ae:bd:45:57:a7:bd:c6:ce:
78:8f:66:1c:b6:b2:fe:13:d5:bf:23:c2:08:2f:ae:
c0:84:ad:12:a0:dc:a4:80:0a:a4:39:d9:5e:3d:f2:
bd:75:e8:41:b5:2c:ea:a1:08:c9:ae:e2:9f:4a:ba:
2d:41:2f:46:21:76:47:73:3d:ab:21:8c:b5:a1:48:
e8:28:e8:78:a5:a2:66:34:ad:3a:31:f8:e9:38:64:
1e:db:55:5f:98:ad:b4:39:e9:ac:83:3a:1b:5a:fb:
0c:c8:4c:87:3d:58:5d:5e:80:86:65:c6:50:ed:a7:
59:9a:70:4b:5b:3e:96:01:43:5d:54:5d:fd:ec:ae:
81:1e:a1:b3:be:75:35:59:3c:c7:72:18:a4:a3:ff:
36:4c:69:8b:c4:56:9b:7a:68:5a:7b:6e:da:48:3b:
89:f4:80:29:ac:8a:4e:c5:70:c9:34:da:48:72:56:
6b:a9:82:40:7f:20:25:ba:3a:a8:ce:75:ef:2b:b2:
5b:b8:78:f1:01:a1:bd:35:0a:99:d3:a0:83:4f:6e:
8f:f0:ab:a2:2c:ee:a7:f3:e7:f3:a5:ff:9c:86:a8:
b7:e2:1b:e1:64:d3:41:0f:76:cc:48:98:4e:33:17:
07:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:92:15:70:23:4C:D2:27:22:BC:BC:3E:EB:FE:C7:9E:69:61:CC:F8
X509v3 Authority Key Identifier:
keyid:BC:AA:11:46:AF:D4:F4:5F:11:70:95:A1:5A:7D:E0:BB:F9:78:14:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKoRRq_U9F8RcJWhWn3gu_l4FEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5b:0e:d8:31:9e:31:89:22:b4:1d:0d:87:c5:67:ae:fc:3f:
61:38:4c:a9:22:c5:bf:96:3f:f1:ce:a8:d8:85:25:be:55:61:
b0:49:3f:97:5f:a8:7c:45:5f:78:41:ec:08:fd:da:11:3e:d1:
c9:ed:54:21:83:cb:f0:f9:98:67:72:6c:44:37:9d:d7:98:03:
6c:ee:4e:8f:41:80:b2:a5:92:2a:8f:a3:69:7d:12:c0:65:86:
02:ef:00:cf:66:57:be:1c:41:1e:6c:7a:62:32:ca:ee:e8:49:
94:f4:36:ce:c6:80:da:8d:e3:32:ce:e7:f5:2c:7b:4d:19:10:
97:eb:c2:ea:f5:7d:be:0c:a2:9f:70:b0:d9:a1:1b:0a:ee:9b:
2c:f9:39:6f:d0:80:98:d3:e7:82:8e:dd:94:57:b2:5e:40:d1:
9c:21:d5:4d:bd:28:0e:84:a9:8c:eb:a2:ce:ba:19:21:d8:68:
cb:89:cb:75:a7:ef:19:73:9a:7e:5a:de:cf:4d:fd:c6:a2:86:
84:d9:f6:29:24:3f:8e:4a:2f:44:36:ce:c3:72:19:79:c3:95:
26:6d:a4:07:f3:85:78:74:ec:f5:21:47:74:4d:52:08:f3:53:
03:a6:93:ea:fc:c6:19:1b:0e:53:0f:8d:59:89:1c:37:e0:2d:
61:7d:dc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:07 2026 by rpki-client