Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
File: v0lCu3vSTK23SF6M6lklCaPH2vU.mft (raw, json)
Hash identifier: kx8RoiPm+bXJ8KsTYMhGkBGG0xG1qRt0AJA7pY9iJo0=
Subject key identifier: 43:0D:A6:3B:91:9E:75:74:13:1D:D9:92:33:0C:EA:9B:D4:A8:AD:13
Authority key identifier: BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
Certificate issuer: /CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Certificate serial: 01A0D5A6AA490800553625E3784F5497D4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
Manifest number: 0FA3
Signing time: Thu 24 Sep 2026 23:01:04 +0000
Manifest this update: Thu 24 Sep 2026 23:01:04 +0000
Manifest next update: Fri 25 Sep 2026 23:01:04 +0000
Files and hashes: 1: 8ZLlXBrRkRmEZavAgVbzhYuPhTk.asa (hash: B0eqzhP1emUlL5EQFCd5dAc0ZKS7qm56hxy/fQh8cL4=)
2: v0lCu3vSTK23SF6M6lklCaPH2vU.crl (hash: QBAdqt6eWpffqt3KdvLmIqrL/4WvcV5SDk0Pn54gPPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:aa:49:08:00:55:36:25:e3:78:4f:54:97:d4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Validity
Not Before: Sep 24 23:01:04 2026 GMT
Not After : Sep 25 23:01:04 2026 GMT
Subject: CN=430da63b919e7574131dd992330cea9bd4a8ad13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4b:ed:62:81:17:b6:19:41:2b:ac:7c:b1:93:
5c:8f:c4:b0:a9:9e:cc:7c:cd:98:71:39:6e:2c:94:
79:bf:90:d9:52:14:44:76:b2:80:ff:9a:b9:cc:b7:
27:bd:51:b0:e4:a0:07:1e:ed:fe:85:ad:7b:8d:1a:
6b:3c:13:c3:bf:95:23:b3:ca:f3:8a:4b:1d:e9:77:
45:fa:7a:fc:2d:4e:c2:94:f8:55:c3:f5:e8:2d:55:
dc:8f:0c:ec:da:f9:88:52:60:cb:16:fb:b7:f6:6b:
7b:46:e6:e4:15:f7:b6:db:73:88:39:00:d2:e3:c2:
a7:13:5a:29:e6:a4:6c:d1:44:d0:46:d1:b4:ed:9c:
20:ad:5b:9a:43:d2:27:1e:cd:c9:2d:bb:3b:be:32:
77:8e:4d:98:21:e2:7d:47:99:44:31:73:30:5f:62:
0f:94:6c:84:75:1a:67:01:4b:78:2c:f2:4d:da:5a:
32:f4:64:6c:ed:e0:b7:b6:0e:6e:e4:67:47:ad:cf:
32:e5:00:d4:55:74:13:7c:ad:ff:37:a5:45:67:84:
7b:06:44:2f:29:a3:e9:21:6d:3d:1d:cd:d2:f5:0d:
53:00:92:24:e0:bc:d6:61:60:0c:bd:35:f5:d9:3c:
02:82:ea:36:11:d9:88:59:a1:e4:89:33:02:1d:14:
0d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0D:A6:3B:91:9E:75:74:13:1D:D9:92:33:0C:EA:9B:D4:A8:AD:13
X509v3 Authority Key Identifier:
keyid:BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b9:68:e7:d7:b4:53:da:6d:3c:54:b2:76:1e:a3:4d:3b:99:
35:a3:8e:b7:73:2a:84:5a:59:e8:a3:69:c2:b5:8d:cf:f0:b7:
83:df:f9:23:a0:cf:21:3d:81:33:bd:64:2f:c0:37:24:f9:bf:
77:72:5c:6d:d0:9b:f4:ce:d0:d3:00:59:82:93:25:1e:9f:a1:
d9:99:ec:c9:0b:42:07:98:73:ab:84:65:5f:bd:93:61:d2:4e:
69:64:1f:c7:eb:7d:d6:0a:2e:07:5d:f0:72:1d:84:bc:67:56:
62:42:fa:76:61:7e:f6:d6:89:3d:5d:59:61:0a:fc:99:e8:dc:
92:1b:98:c7:d4:b7:c3:f1:b7:ba:29:a3:31:7a:a0:4d:ab:a2:
9f:e7:06:5a:67:5c:19:e6:93:3b:7d:1e:9d:5d:a1:3d:1d:a3:
3e:a8:73:2c:81:fb:35:fa:fe:25:6f:d8:bd:16:5d:3f:39:72:
c9:b1:4d:e6:a9:03:75:85:8a:db:97:6e:85:84:cb:06:f2:07:
ff:2a:f1:e6:8b:7c:57:0d:8d:3d:1a:3d:69:36:25:7c:00:70:
fd:2b:8e:fd:39:ac:e8:ee:9d:59:16:10:cd:f4:6a:51:35:c8:
08:27:ba:0e:1e:13:7b:ac:08:44:42:c3:ed:19:d9:30:e1:28:
3c:3f:07:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVpqpJCABVNiXjeE9Ul9ToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNDk0MmJiN2JkMjRjYWRiNzQ4NWU4Y2VhNTkyNTA5YTNj
N2RhZjUwHhcNMjYwOTI0MjMwMTA0WhcNMjYwOTI1MjMwMTA0WjAzMTEwLwYDVQQD
Eyg0MzBkYTYzYjkxOWU3NTc0MTMxZGQ5OTIzMzBjZWE5YmQ0YThhZDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EvtYoEXthlBK6x8sZNcj8SwqZ7M
fM2YcTluLJR5v5DZUhREdrKA/5q5zLcnvVGw5KAHHu3+ha17jRprPBPDv5Ujs8rz
iksd6XdF+nr8LU7ClPhVw/XoLVXcjwzs2vmIUmDLFvu39mt7RubkFfe223OIOQDS
48KnE1op5qRs0UTQRtG07ZwgrVuaQ9InHs3JLbs7vjJ3jk2YIeJ9R5lEMXMwX2IP
lGyEdRpnAUt4LPJN2loy9GRs7eC3tg5u5GdHrc8y5QDUVXQTfK3/N6VFZ4R7BkQv
KaPpIW09Hc3S9Q1TAJIk4LzWYWAMvTX12TwCguo2EdmIWaHkiTMCHRQNAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMNpjuRnnV0Ex3ZkjMM6pvUqK0TMB8GA1UdIwQY
MBaAFL9JQrt70kytt0hejOpZJQmjx9r1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjBsQ3UzdlNUSzIzU0Y2TTZsa2xDYVBIMnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hZDJjNDItNGQ4MS00MDdhLWE2NmIt
MmY5NDI1OGFiNjliLzEvdjBsQ3UzdlNUSzIzU0Y2TTZsa2xDYVBIMnZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9hZDJjNDItNGQ4MS00MDdhLWE2NmItMmY5NDI1OGFiNjli
LzEvdjBsQ3UzdlNUSzIzU0Y2TTZsa2xDYVBIMnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLlo59e0
U9ptPFSydh6jTTuZNaOOt3MqhFpZ6KNpwrWNz/C3g9/5I6DPIT2BM71kL8A3JPm/
d3JcbdCb9M7Q0wBZgpMlHp+h2ZnsyQtCB5hzq4RlX72TYdJOaWQfx+t91gouB13w
ch2EvGdWYkL6dmF+9taJPV1ZYQr8mejckhuYx9S3w/G3uimjMXqgTauin+cGWmdc
GeaTO30enV2hPR2jPqhzLIH7Nfr+JW/YvRZdPzlyybFN5qkDdYWK25duhYTLBvIH
/yrx5ot8Vw2NPRo9aTYlfABw/SuO/Tms6O6dWRYQzfRqUTXICCe6Dh4Te6wIRELD
7RnZMOEoPD8HDg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:51:51 2026 by rpki-client