Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
File: KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json)
Hash identifier: 6nDz3asO6TF/fGiG/rIxHSWmrCYSiPcYm45zaf/9Cnk=
Subject key identifier: 23:85:2C:BE:F9:88:A3:8A:18:9C:43:59:70:88:BD:A4:D2:B7:28:8D
Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
Certificate issuer: /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Certificate serial: 019D277223C4D2E5C4A598B0947A55547479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 00:01:24 +0000
Manifest this update: Thu 26 Mar 2026 00:01:24 +0000
Manifest next update: Fri 27 Mar 2026 00:01:24 +0000
Files and hashes: 1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: tgPqZ0DZF33O8zmHWI5lHqF09WPGp0ruEZMoZEZLwHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:23:c4:d2:e5:c4:a5:98:b0:94:7a:55:54:74:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Validity
Not Before: Mar 26 00:01:24 2026 GMT
Not After : Mar 27 00:01:24 2026 GMT
Subject: CN=23852cbef988a38a189c43597088bda4d2b7288d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:a2:68:19:31:84:89:40:55:7d:85:54:a9:
35:76:ea:a8:fd:87:f1:75:15:f6:f6:1d:9d:a6:06:
e3:2c:85:ac:2f:35:99:e1:b9:87:6b:bb:41:47:6d:
7d:80:d5:b9:09:7e:36:2f:b2:79:4f:f9:38:a9:ae:
05:51:3b:bd:1f:7e:9f:d5:e2:c0:40:d4:e5:ff:11:
91:d9:78:40:f9:8d:c8:2c:56:94:34:d3:8e:70:8b:
4c:fd:6b:6b:bb:18:5a:3b:75:86:3b:25:d5:b0:56:
e0:bf:59:9c:14:2e:ea:7a:92:5b:32:e5:c6:63:c0:
55:1f:ee:4b:89:4c:73:d7:ca:c4:2f:64:6d:4b:69:
d1:66:cc:8b:e2:79:b2:b0:db:4b:ce:b1:3a:e7:76:
ee:53:35:9f:a6:18:56:f2:ff:73:93:69:69:2e:54:
07:a1:36:3b:45:dd:b2:19:39:c1:35:a2:99:1c:c3:
7a:8c:dc:9c:f9:a8:26:b8:cc:78:ee:8e:f4:da:9c:
a7:a9:24:32:83:a1:a9:43:27:80:e2:3f:7d:02:3b:
3a:ab:45:46:e8:ea:72:2c:cc:cf:d3:07:a3:d8:7c:
a6:b7:37:28:f1:ec:9c:7d:01:44:42:68:c3:fa:d9:
fa:7d:6a:26:02:63:73:84:4b:53:f3:22:af:b8:ff:
03:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:85:2C:BE:F9:88:A3:8A:18:9C:43:59:70:88:BD:A4:D2:B7:28:8D
X509v3 Authority Key Identifier:
keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:90:4a:ad:63:d3:d8:64:ee:c0:9a:19:37:ad:0e:6c:ea:b8:
29:ef:0e:4b:ae:f2:1d:07:95:a6:79:a0:01:c8:5c:a5:28:dd:
8a:ea:f5:ba:8e:88:cb:12:0c:a0:22:f7:7c:47:45:96:a6:5c:
0c:12:50:5e:0c:3c:05:cc:36:fb:c2:90:1c:53:52:d0:a9:7d:
6f:a0:a1:3b:53:85:b0:d2:5e:83:dd:49:8d:64:de:5e:a5:3f:
9f:ce:e2:10:f9:5f:4d:8d:fd:92:ca:f9:a3:ca:d4:99:ff:cf:
91:a2:3d:62:09:03:bb:bd:6e:71:60:6c:4c:44:ad:c1:d9:0b:
1f:b0:33:d2:77:94:38:91:d3:79:89:c3:8b:3a:55:d4:77:75:
f8:71:e2:fc:60:a4:e8:7b:ef:b3:73:4d:4d:72:4e:3a:2b:4f:
2a:58:a0:f9:f2:3b:5e:e0:71:b2:bb:78:a8:ea:5f:17:f3:24:
23:55:68:74:f8:38:1a:f3:b8:79:a1:e4:ca:48:c9:cb:8f:c1:
96:83:10:c0:52:8d:a5:25:9d:c2:8a:60:4d:ba:eb:54:66:17:
fb:c7:c4:50:bc:8a:36:27:ad:19:aa:7f:bd:1b:f8:2c:32:d8:
68:9f:d2:63:8e:4f:d6:17:b0:72:76:78:b7:73:db:05:01:fe:
df:b7:f9:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nciPE0uXEpZiwlHpVVHR5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhODBiNWZmMzc1MDY4YTc0OTAyMTBlYmM2Y2FmMjI4MjJj
YTBkMGEwHhcNMjYwMzI2MDAwMTI0WhcNMjYwMzI3MDAwMTI0WjAzMTEwLwYDVQQD
EygyMzg1MmNiZWY5ODhhMzhhMTg5YzQzNTk3MDg4YmRhNGQyYjcyODhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmuiaBkxhIlAVX2FVKk1duqo/Yfx
dRX29h2dpgbjLIWsLzWZ4bmHa7tBR219gNW5CX42L7J5T/k4qa4FUTu9H36f1eLA
QNTl/xGR2XhA+Y3ILFaUNNOOcItM/WtruxhaO3WGOyXVsFbgv1mcFC7qepJbMuXG
Y8BVH+5LiUxz18rEL2RtS2nRZsyL4nmysNtLzrE653buUzWfphhW8v9zk2lpLlQH
oTY7Rd2yGTnBNaKZHMN6jNyc+agmuMx47o702pynqSQyg6GpQyeA4j99Ajs6q0VG
6OpyLMzP0wej2Hymtzco8eycfQFEQmjD+tn6fWomAmNzhEtT8yKvuP8DtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOFLL75iKOKGJxDWXCIvaTStyiNMB8GA1UdIwQY
MBaAFCqAtf83UGinSQIQ68bK8igiyg0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQt
MGRkYzUwNDg2Nzg3LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQtMGRkYzUwNDg2Nzg3
LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpBKrWPT
2GTuwJoZN60ObOq4Ke8OS67yHQeVpnmgAchcpSjdiur1uo6IyxIMoCL3fEdFlqZc
DBJQXgw8Bcw2+8KQHFNS0Kl9b6ChO1OFsNJeg91JjWTeXqU/n87iEPlfTY39ksr5
o8rUmf/PkaI9YgkDu71ucWBsTEStwdkLH7Az0neUOJHTeYnDizpV1Hd1+HHi/GCk
6Hvvs3NNTXJOOitPKlig+fI7XuBxsrt4qOpfF/MkI1VodPg4GvO4eaHkykjJy4/B
loMQwFKNpSWdwopgTbrrVGYX+8fEULyKNietGap/vRv4LDLYaJ/SY45P1hewcnZ4
t3PbBQH+37f5BQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:58 2026 by rpki-client