Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
File: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft (raw, json)
Hash identifier: nf+tophRrBH6OZ79V9T44Zb0hVYQ4ITE7PftlyZW5rE=
Subject key identifier: BD:2D:A2:F7:0E:94:69:39:7E:BD:25:EE:98:BF:5A:B0:31:AA:74:37
Authority key identifier: D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
Certificate issuer: /CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Certificate serial: 019D2884CCE0509A9D68FD723CE8BA013867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
Manifest number: 0F92
Signing time: Thu 26 Mar 2026 05:01:24 +0000
Manifest this update: Thu 26 Mar 2026 05:01:24 +0000
Manifest next update: Fri 27 Mar 2026 05:01:24 +0000
Files and hashes: 1: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl (hash: KNbXqkjo50Mif6YEY1QLsPK6sLJDZGjeBShKtTMFiiw=)
2: VM-fKezFR4SnE_FueP0yvublPPU.roa (hash: NLdH6ARZYMD17vttDtKMAsBhjz+U3ES+mnznmPgNe9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:cc:e0:50:9a:9d:68:fd:72:3c:e8:ba:01:38:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Validity
Not Before: Mar 26 05:01:24 2026 GMT
Not After : Mar 27 05:01:24 2026 GMT
Subject: CN=bd2da2f70e9469397ebd25ee98bf5ab031aa7437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6f:f8:73:25:4a:85:61:74:6d:7a:d4:57:ed:
3e:aa:1d:87:6d:cc:99:13:e3:ab:84:b8:ec:36:39:
fa:03:de:04:cf:54:97:a1:d5:f1:9a:77:ae:c1:af:
23:6a:36:df:27:3e:f1:ea:6c:11:56:2d:b5:c8:cc:
dc:b9:58:c7:e2:1e:85:20:f1:42:ee:62:6e:a6:6f:
f3:96:c6:c0:e9:e0:15:cf:5a:7c:02:7b:71:a2:71:
cd:1c:a3:a2:6a:86:67:80:0f:bd:40:0d:30:bd:71:
1d:9e:10:95:76:90:b0:e6:4b:b3:18:42:fc:aa:5b:
75:01:48:99:99:c9:28:36:39:70:e6:57:cb:bc:93:
68:f4:d1:f4:00:41:27:67:2d:63:1d:bc:07:5d:bb:
14:74:b9:03:41:25:ea:d8:c7:e4:fe:e8:0e:f5:23:
62:ed:64:64:11:04:2b:4a:55:1c:f5:b0:1c:eb:de:
6f:db:6a:37:da:fe:19:b3:c1:62:27:0f:ee:65:e3:
c6:ef:a1:87:e3:2e:52:3a:0c:e1:bc:f6:4f:cd:36:
33:09:e7:b0:56:f7:c9:87:f3:a4:8b:2d:53:4a:b6:
d6:68:e6:1e:90:6d:4b:f4:8f:1b:cc:ca:80:87:6b:
96:91:7c:96:f9:de:75:1c:dd:b1:60:db:12:a1:23:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2D:A2:F7:0E:94:69:39:7E:BD:25:EE:98:BF:5A:B0:31:AA:74:37
X509v3 Authority Key Identifier:
keyid:D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7c:55:42:28:b7:46:fd:53:d3:38:a3:43:a3:e3:5d:c7:c3:
74:e1:ee:2b:a7:a7:1e:05:d5:93:d1:40:ab:5f:f8:e4:d4:60:
18:52:68:5c:91:e0:4a:03:e8:a4:52:42:86:16:47:dd:57:71:
90:ad:67:05:68:59:ad:94:ed:a8:c9:62:00:e5:30:6f:b3:3b:
29:60:c6:be:bd:cd:b9:04:57:d5:60:82:f4:4d:c5:a9:9a:17:
48:3c:59:5c:59:47:e9:3d:fe:61:89:c9:ea:73:c6:bd:51:5d:
ae:67:a0:52:1b:c8:7d:c6:6b:f1:f0:ec:32:24:3b:c1:9e:9b:
fb:5d:a5:08:3f:14:ce:e0:43:de:b6:1c:a0:91:9b:08:aa:52:
7f:98:f0:6d:75:87:6b:75:ed:58:0d:25:3f:c9:d9:1a:83:0a:
b2:bf:12:72:ea:20:22:9b:81:4e:01:64:52:c2:97:fb:b1:17:
ac:1a:f7:a8:57:64:ac:00:d5:c9:aa:9c:78:04:d4:2e:e9:cb:
e2:72:76:6c:26:0c:cf:e7:ea:2d:ef:cb:8a:a6:94:30:9e:ef:
45:52:13:69:16:34:37:7a:7e:8e:c0:8f:63:d8:75:0f:9f:a6:
fb:bc:ee:6a:c9:47:1e:a7:98:e3:0d:a6:65:98:89:b4:31:57:
75:46:ca:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohMzgUJqdaP1yPOi6AThnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYTEwOTQ0NzA0ZDcyM2M4ZGQ5Y2U3MzBjYWJmOTZmZTI2
YmFiMjUwHhcNMjYwMzI2MDUwMTI0WhcNMjYwMzI3MDUwMTI0WjAzMTEwLwYDVQQD
EyhiZDJkYTJmNzBlOTQ2OTM5N2ViZDI1ZWU5OGJmNWFiMDMxYWE3NDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m/4cyVKhWF0bXrUV+0+qh2HbcyZ
E+OrhLjsNjn6A94Ez1SXodXxmneuwa8jajbfJz7x6mwRVi21yMzcuVjH4h6FIPFC
7mJupm/zlsbA6eAVz1p8AntxonHNHKOiaoZngA+9QA0wvXEdnhCVdpCw5kuzGEL8
qlt1AUiZmckoNjlw5lfLvJNo9NH0AEEnZy1jHbwHXbsUdLkDQSXq2Mfk/ugO9SNi
7WRkEQQrSlUc9bAc695v22o32v4Zs8FiJw/uZePG76GH4y5SOgzhvPZPzTYzCeew
VvfJh/Okiy1TSrbWaOYekG1L9I8bzMqAh2uWkXyW+d51HN2xYNsSoSNodQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0tovcOlGk5fr0l7pi/WrAxqnQ3MB8GA1UdIwQY
MBaAFNChCURwTXI8jdnOcwyr+W/ia6slMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEtFSlJIQk5janlOMmM1ekRLdjViLUpycXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9mODUyZTUtOTE2Zi00ZDVlLWEzMDUt
OGEwZjA0NTA1NjQ3LzEvMEtFSlJIQk5janlOMmM1ekRLdjViLUpycXlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9mODUyZTUtOTE2Zi00ZDVlLWEzMDUtOGEwZjA0NTA1NjQ3
LzEvMEtFSlJIQk5janlOMmM1ekRLdjViLUpycXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHxVQii3
Rv1T0zijQ6PjXcfDdOHuK6enHgXVk9FAq1/45NRgGFJoXJHgSgPopFJChhZH3Vdx
kK1nBWhZrZTtqMliAOUwb7M7KWDGvr3NuQRX1WCC9E3FqZoXSDxZXFlH6T3+YYnJ
6nPGvVFdrmegUhvIfcZr8fDsMiQ7wZ6b+12lCD8UzuBD3rYcoJGbCKpSf5jwbXWH
a3XtWA0lP8nZGoMKsr8ScuogIpuBTgFkUsKX+7EXrBr3qFdkrADVyaqceATULunL
4nJ2bCYMz+fqLe/LiqaUMJ7vRVITaRY0N3p+jsCPY9h1D5+m+7zuaslHHqeY4w2m
ZZiJtDFXdUbKtg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:47:50 2026 by rpki-client