Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
File: vKOYyNMoLIjZ09AComTkKOa67DY.mft (raw, json)
Hash identifier: knwqhpw0yp3N+EUoicjYdN10CNsHXvhrkTxs+LCSEPY=
Subject key identifier: 5B:5C:92:C8:F7:88:64:5F:99:84:F8:FB:86:65:A1:B6:AD:CE:62:A5
Authority key identifier: BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
Certificate issuer: /CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Certificate serial: 019D27047FDBC115F46DBB38BEC21FA2B087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
Manifest number: 0ACD
Signing time: Wed 25 Mar 2026 22:01:39 +0000
Manifest this update: Wed 25 Mar 2026 22:01:39 +0000
Manifest next update: Thu 26 Mar 2026 22:01:39 +0000
Files and hashes: 1: vKOYyNMoLIjZ09AComTkKOa67DY.crl (hash: jhjRRJK2+XIYtuSOUYXC0vXtqnVwy0R8ExEoDFzd9rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:7f:db:c1:15:f4:6d:bb:38:be:c2:1f:a2:b0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Validity
Not Before: Mar 25 22:01:39 2026 GMT
Not After : Mar 26 22:01:39 2026 GMT
Subject: CN=5b5c92c8f788645f9984f8fb8665a1b6adce62a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:cf:84:2d:ad:ed:14:c7:ab:c2:42:cf:be:
29:49:1b:45:83:b8:ae:03:a3:09:c1:db:fe:a1:e4:
12:a3:ce:49:03:22:fa:8b:00:91:35:ff:bd:25:2d:
0b:f1:0c:84:55:8e:30:1a:3d:e1:8a:45:9c:eb:11:
ab:1b:12:8b:bd:35:ea:fe:34:45:99:de:12:4a:6d:
f7:dd:7f:2c:f1:67:35:28:76:3c:73:59:1c:c3:33:
15:ba:b3:c2:d0:b2:f3:9e:7c:38:c9:cf:28:ee:e1:
52:f6:17:db:c0:bc:d5:da:c3:10:ac:93:2c:c6:fd:
d1:5f:55:46:cc:fb:d4:e7:c8:63:d2:01:be:59:27:
d1:21:a0:18:7c:f1:75:7c:95:9a:19:f7:0e:cd:71:
20:01:7a:3c:a2:23:4e:fe:55:0b:a5:4c:7e:07:e4:
84:6d:10:3f:b9:91:da:4a:7c:cf:3a:f6:d7:0d:70:
8a:77:fc:84:2d:8e:86:b8:1e:12:57:ec:49:ad:0b:
29:f2:cd:d9:b1:8b:05:f9:19:00:8a:eb:43:d6:98:
f0:1f:e4:92:25:a9:55:bb:7d:fa:a4:29:89:6c:68:
b9:65:95:f1:f5:3b:ee:30:f2:59:43:e0:89:7b:d5:
a6:ed:93:c9:2e:30:66:50:74:ee:82:b0:1a:8b:4b:
af:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5C:92:C8:F7:88:64:5F:99:84:F8:FB:86:65:A1:B6:AD:CE:62:A5
X509v3 Authority Key Identifier:
keyid:BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ed:31:fd:17:d1:bb:d5:3a:08:ae:9b:32:ac:14:1d:c5:a7:
1b:4c:1e:2f:33:91:8f:04:e8:77:37:3a:f6:68:6c:5c:2c:5c:
aa:f3:9d:5c:23:36:01:af:f8:74:a7:31:96:c9:7f:1d:73:21:
d2:14:28:11:3f:c0:0e:e3:b7:2d:3e:60:80:44:d5:fd:eb:3a:
ff:21:db:53:a4:79:d2:5c:d1:d0:9f:aa:7a:17:a7:31:13:4f:
a4:5b:a9:36:da:61:67:2c:01:08:71:54:d2:0e:ec:12:3e:46:
c7:ae:00:76:b8:d8:5d:1c:ce:e4:06:42:1f:65:4d:09:fc:1c:
6f:a1:50:9d:30:30:2e:0d:3c:5e:6d:29:42:c3:a5:92:96:fa:
05:b0:2c:68:d6:dd:f5:be:7d:ce:6e:10:aa:8c:4c:cb:24:16:
65:c2:3c:10:e3:7d:bf:62:29:72:ea:e7:fe:bd:19:b3:23:bf:
dc:50:8d:f2:7c:bf:d6:d1:d0:46:50:6b:52:3f:82:b7:01:6e:
90:c8:b5:a2:68:84:08:50:2c:b5:dd:9a:6e:2c:b7:50:37:51:
1b:1a:09:d7:25:6b:0f:07:a1:a6:b9:b8:1a:c7:69:41:c9:c6:
07:27:0e:bd:60:4c:e3:c4:37:1a:f9:94:b6:48:51:64:d8:35:
58:ee:22:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBH/bwRX0bbs4vsIforCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYTM5OGM4ZDMyODJjODhkOWQzZDAwMmEyNjRlNDI4ZTZi
YWVjMzYwHhcNMjYwMzI1MjIwMTM5WhcNMjYwMzI2MjIwMTM5WjAzMTEwLwYDVQQD
Eyg1YjVjOTJjOGY3ODg2NDVmOTk4NGY4ZmI4NjY1YTFiNmFkY2U2MmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEzPhC2t7RTHq8JCz74pSRtFg7iu
A6MJwdv+oeQSo85JAyL6iwCRNf+9JS0L8QyEVY4wGj3hikWc6xGrGxKLvTXq/jRF
md4SSm333X8s8Wc1KHY8c1kcwzMVurPC0LLznnw4yc8o7uFS9hfbwLzV2sMQrJMs
xv3RX1VGzPvU58hj0gG+WSfRIaAYfPF1fJWaGfcOzXEgAXo8oiNO/lULpUx+B+SE
bRA/uZHaSnzPOvbXDXCKd/yELY6GuB4SV+xJrQsp8s3ZsYsF+RkAiutD1pjwH+SS
JalVu336pCmJbGi5ZZXx9TvuMPJZQ+CJe9Wm7ZPJLjBmUHTugrAai0uvTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtcksj3iGRfmYT4+4ZlobatzmKlMB8GA1UdIwQY
MBaAFLyjmMjTKCyI2dPQAqJk5Cjmuuw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdktPWXlOTW9MSWpaMDlBQ29tVGtLT2E2N0RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi84NDU0YzYtMzFjNi00ZjhiLTkxZDQt
MjY3YmExNzJkNDZkLzEvdktPWXlOTW9MSWpaMDlBQ29tVGtLT2E2N0RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi84NDU0YzYtMzFjNi00ZjhiLTkxZDQtMjY3YmExNzJkNDZk
LzEvdktPWXlOTW9MSWpaMDlBQ29tVGtLT2E2N0RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPu0x/RfR
u9U6CK6bMqwUHcWnG0weLzORjwTodzc69mhsXCxcqvOdXCM2Aa/4dKcxlsl/HXMh
0hQoET/ADuO3LT5ggETV/es6/yHbU6R50lzR0J+qehenMRNPpFupNtphZywBCHFU
0g7sEj5Gx64AdrjYXRzO5AZCH2VNCfwcb6FQnTAwLg08Xm0pQsOlkpb6BbAsaNbd
9b59zm4QqoxMyyQWZcI8EON9v2Ipcurn/r0ZsyO/3FCN8ny/1tHQRlBrUj+CtwFu
kMi1omiECFAstd2abiy3UDdRGxoJ1yVrDwehprm4GsdpQcnGBycOvWBM48Q3GvmU
tkhRZNg1WO4i6Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:57:14 2026 by rpki-client