Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
File: vKOYyNMoLIjZ09AComTkKOa67DY.mft (raw, json)
Hash identifier: ajueTtf4Dx5u+EErs9t3Baw1bPkCyXjGlsMG1UDL5RU=
Subject key identifier: C0:8A:87:99:57:00:A8:5F:4B:24:D3:C9:39:56:36:EA:5B:73:EE:4D
Authority key identifier: BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
Certificate issuer: /CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Certificate serial: 01A0D83B6D9251F4AAA522BAE43ADF9997BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
Manifest number: 0CB9
Signing time: Fri 25 Sep 2026 11:02:48 +0000
Manifest this update: Fri 25 Sep 2026 11:02:48 +0000
Manifest next update: Sat 26 Sep 2026 11:02:48 +0000
Files and hashes: 1: C5p8LM7HmRcfUID1rsbb3yCqZtk.roa (hash: docDKAD/tU7EQOVt4NBDcZtyV88C08WONikM1eM5KUQ=)
2: vKOYyNMoLIjZ09AComTkKOa67DY.crl (hash: Rj2fS0gQTG2mP+LDWSeKRahUlJylSiqDh9koFSmt1bY=)
3: zOF_OQ5_cexcvcn-Xy9l4x73efY.asa (hash: No7O/rKN65Nv88He0q0MUpGtQzpjCDUVQmGT5pS0peg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:6d:92:51:f4:aa:a5:22:ba:e4:3a:df:99:97:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Validity
Not Before: Sep 25 11:02:48 2026 GMT
Not After : Sep 26 11:02:48 2026 GMT
Subject: CN=c08a87995700a85f4b24d3c9395636ea5b73ee4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5c:ff:28:43:b0:58:2a:83:52:a5:0b:28:3b:
19:30:45:af:a1:dd:ee:f7:d4:74:b5:f0:20:96:c0:
b7:79:31:bf:24:c2:c9:85:75:61:c6:79:1d:96:c9:
9a:8b:5c:88:af:2e:1e:13:cf:84:4e:66:40:f9:f9:
e6:b8:d4:e4:9a:3d:90:b5:73:04:84:4a:6d:10:66:
0d:0f:37:bb:b6:38:3d:87:e0:87:00:4c:29:8f:f7:
6f:6e:18:b2:19:78:1e:54:59:85:f2:34:6d:26:09:
6a:af:1b:2a:83:b8:27:0c:ac:a3:98:6a:02:51:4c:
4d:7e:42:d6:ca:48:c4:78:9d:a2:9f:76:06:22:f3:
99:bf:fd:96:5f:51:42:16:83:4a:8e:a1:7f:84:da:
fb:0a:a8:c3:99:90:47:b8:c4:2d:59:f2:09:c7:e6:
88:fb:25:01:f6:65:8c:e8:47:a3:ed:dd:b6:db:eb:
b5:6a:ec:df:38:c6:c6:f0:96:e1:56:d2:a3:0c:fe:
33:53:6c:a0:23:f9:4f:cf:b8:9f:f9:5f:74:37:91:
d4:7d:d8:cb:90:d3:25:58:28:29:dc:9e:16:29:a1:
56:e8:c0:95:14:a1:7c:dd:2b:84:68:f4:d9:67:b4:
47:cc:66:29:4d:08:97:89:1c:1c:af:94:01:58:5a:
36:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8A:87:99:57:00:A8:5F:4B:24:D3:C9:39:56:36:EA:5B:73:EE:4D
X509v3 Authority Key Identifier:
keyid:BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8b:89:30:ac:3e:35:ac:07:12:10:a6:b6:c3:7f:e8:6a:37:
67:12:1d:4c:86:68:aa:c7:53:2e:28:05:35:8e:c6:21:25:79:
bb:fb:f9:44:45:8d:17:00:dc:22:b7:27:62:36:f2:2b:02:4d:
1c:b0:f7:fb:ab:3a:67:36:41:a9:36:f6:4c:41:bb:0b:dd:bf:
4b:42:38:43:47:98:45:78:92:ac:3d:74:bd:d8:91:87:88:34:
a4:60:fb:d8:5c:d9:e5:6d:d5:9a:e1:79:1f:44:39:93:10:dc:
74:99:04:69:01:4d:52:93:32:66:8f:23:9a:bc:b6:27:66:da:
47:4b:b3:8e:ea:24:1f:4d:a9:74:bc:ca:11:5c:1a:2c:28:11:
ba:1b:0c:71:92:e0:5e:a3:f6:81:12:1f:32:b3:be:38:ea:da:
30:73:e4:13:61:f9:27:cb:72:95:83:13:e9:c9:91:2f:13:15:
81:b3:3e:38:58:9b:db:ac:bd:56:04:b0:bf:a4:d9:95:69:e8:
cf:a4:e8:11:fb:46:18:83:8d:ed:2a:46:62:3b:62:de:1a:16:
a3:69:fa:80:0b:b6:f4:38:da:62:5f:d7:6f:e0:17:b0:bd:f4:
e8:e3:d6:26:1f:c9:1c:92:7e:21:4d:9f:74:c8:c0:2a:f2:c6:
c8:3f:c5:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYO22SUfSqpSK65DrfmZe/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYTM5OGM4ZDMyODJjODhkOWQzZDAwMmEyNjRlNDI4ZTZi
YWVjMzYwHhcNMjYwOTI1MTEwMjQ4WhcNMjYwOTI2MTEwMjQ4WjAzMTEwLwYDVQQD
EyhjMDhhODc5OTU3MDBhODVmNGIyNGQzYzkzOTU2MzZlYTViNzNlZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFz/KEOwWCqDUqULKDsZMEWvod3u
99R0tfAglsC3eTG/JMLJhXVhxnkdlsmai1yIry4eE8+ETmZA+fnmuNTkmj2QtXME
hEptEGYNDze7tjg9h+CHAEwpj/dvbhiyGXgeVFmF8jRtJglqrxsqg7gnDKyjmGoC
UUxNfkLWykjEeJ2in3YGIvOZv/2WX1FCFoNKjqF/hNr7CqjDmZBHuMQtWfIJx+aI
+yUB9mWM6Eej7d222+u1auzfOMbG8JbhVtKjDP4zU2ygI/lPz7if+V90N5HUfdjL
kNMlWCgp3J4WKaFW6MCVFKF83SuEaPTZZ7RHzGYpTQiXiRwcr5QBWFo2GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCKh5lXAKhfSyTTyTlWNupbc+5NMB8GA1UdIwQY
MBaAFLyjmMjTKCyI2dPQAqJk5Cjmuuw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdktPWXlOTW9MSWpaMDlBQ29tVGtLT2E2N0RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi84NDU0YzYtMzFjNi00ZjhiLTkxZDQt
MjY3YmExNzJkNDZkLzEvdktPWXlOTW9MSWpaMDlBQ29tVGtLT2E2N0RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi84NDU0YzYtMzFjNi00ZjhiLTkxZDQtMjY3YmExNzJkNDZk
LzEvdktPWXlOTW9MSWpaMDlBQ29tVGtLT2E2N0RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIouJMKw+
NawHEhCmtsN/6Go3ZxIdTIZoqsdTLigFNY7GISV5u/v5REWNFwDcIrcnYjbyKwJN
HLD3+6s6ZzZBqTb2TEG7C92/S0I4Q0eYRXiSrD10vdiRh4g0pGD72FzZ5W3VmuF5
H0Q5kxDcdJkEaQFNUpMyZo8jmry2J2baR0uzjuokH02pdLzKEVwaLCgRuhsMcZLg
XqP2gRIfMrO+OOraMHPkE2H5J8tylYMT6cmRLxMVgbM+OFib26y9VgSwv6TZlWno
z6ToEftGGION7SpGYjti3hoWo2n6gAu29DjaYl/Xb+AXsL306OPWJh/JHJJ+IU2f
dMjAKvLGyD/FsA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:01:39 2026 by rpki-client