Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
File: vKOYyNMoLIjZ09AComTkKOa67DY.mft (raw, json)
Hash identifier: fnkgpCSsXzW7W1yOBXBQLuEZ9Xgq/JPxE3dTmGp+ars=
Subject key identifier: 5F:1D:96:E3:EC:43:43:86:A0:A8:46:CA:E2:31:A1:F9:B0:EF:3E:65
Authority key identifier: BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
Certificate issuer: /CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Certificate serial: 019F8F4797A562CFE52F7FF308E7D4B987EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
Manifest number: 0C0E
Signing time: Thu 23 Jul 2026 14:01:01 +0000
Manifest this update: Thu 23 Jul 2026 14:01:01 +0000
Manifest next update: Fri 24 Jul 2026 14:01:01 +0000
Files and hashes: 1: Ccgqgl_xeBpoZypCyGgZftVZrgc.roa (hash: P0QRGk/LlMbbzXEE4SiHxc8S3mAURlsFipejT2weeBQ=)
2: vKOYyNMoLIjZ09AComTkKOa67DY.crl (hash: O1NaErlMYF7/vhohE8Aq3H7WG3arDg8GJWrGmz71QkU=)
3: zOF_OQ5_cexcvcn-Xy9l4x73efY.asa (hash: No7O/rKN65Nv88He0q0MUpGtQzpjCDUVQmGT5pS0peg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:97:a5:62:cf:e5:2f:7f:f3:08:e7:d4:b9:87:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Validity
Not Before: Jul 23 14:01:01 2026 GMT
Not After : Jul 24 14:01:01 2026 GMT
Subject: CN=5f1d96e3ec434386a0a846cae231a1f9b0ef3e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:14:79:00:ef:f0:28:8e:da:21:82:fc:f2:
8a:1e:a8:7b:4b:66:28:e4:ff:f6:91:45:eb:c1:99:
64:d6:a1:44:85:ed:47:09:96:b6:71:51:9f:e6:19:
7a:4f:50:73:a8:72:6c:02:75:6e:5e:10:36:65:87:
69:1e:5c:be:6c:74:80:70:23:bb:9c:15:36:a8:7a:
87:ed:f4:67:90:a3:8a:1e:a0:e8:a9:fe:55:e0:5e:
10:df:b6:50:83:4a:62:4f:78:ea:a8:59:b4:45:a2:
95:52:e5:e2:11:cc:fa:f6:b4:fa:04:a2:19:d9:4d:
5e:2a:e0:e2:45:6f:1c:a3:d3:c2:f6:16:94:52:cd:
2c:77:f0:85:ee:b2:52:13:b5:d7:04:32:49:2f:ec:
bc:bd:bb:34:7f:c7:a1:8a:03:8c:9d:ad:23:f3:e6:
3a:9e:d6:ed:31:13:3a:52:14:59:ee:0a:b4:62:16:
30:40:19:0c:0f:72:ce:53:9e:16:54:89:e3:4e:ca:
dd:ba:16:e4:a6:65:9d:31:76:54:14:98:6f:52:a2:
67:50:8d:e3:f0:59:58:c6:e2:a8:58:ab:5b:95:78:
40:29:43:9a:01:95:e9:4c:4c:64:ad:c9:ec:b8:54:
84:81:d7:85:49:2f:79:39:50:dd:8d:e9:cf:57:b8:
d9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1D:96:E3:EC:43:43:86:A0:A8:46:CA:E2:31:A1:F9:B0:EF:3E:65
X509v3 Authority Key Identifier:
keyid:BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b3:33:6d:4f:f4:74:ba:68:83:39:10:fe:61:eb:a0:06:96:
08:e8:e1:aa:cf:48:9b:8d:6f:31:98:69:0d:6e:82:b8:06:87:
f8:75:c7:42:3b:4c:0c:84:cf:3c:e0:c1:22:c4:f5:f3:da:1c:
9a:86:3d:b9:b0:30:18:84:58:66:23:d5:98:e7:22:c5:9c:36:
02:45:11:e5:0f:3d:87:a6:cf:90:2c:d5:1e:a2:82:8f:2a:36:
7e:63:65:cb:a2:03:74:ea:f2:0e:e3:9d:29:b0:91:7a:2f:29:
49:df:b1:ee:4f:6b:53:53:7c:a5:e2:8c:3c:6f:a0:80:63:b5:
fc:21:bc:f1:5e:73:3e:8f:53:5f:4d:61:fd:5c:f6:44:83:80:
d9:a9:dd:0c:a3:45:f3:2a:86:f2:94:86:ca:8b:11:23:bf:e4:
21:73:1a:47:70:85:54:f7:49:7c:86:db:0f:ed:c2:42:0c:57:
fb:67:6b:5e:cd:98:91:3d:62:37:a0:aa:b7:8d:9c:d8:e0:cd:
ca:c5:56:4b:86:a4:0b:2e:98:e8:15:77:f5:05:55:39:57:2c:
0a:ed:f0:11:21:f7:2e:78:b7:a6:ce:6c:0f:6c:58:4a:23:ba:
d3:51:4d:7f:f2:b7:74:92:03:80:87:7f:e9:f0:f4:b1:15:b4:
ea:3e:3e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:16:14 2026 by rpki-client