Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
File: vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft (raw, json)
Hash identifier: 8Ilt18LJ6yRr6yF9yn0470MZGJnsJwzAmVzAHMEu4mI=
Subject key identifier: 9C:3F:4C:EF:1D:EE:FD:CE:CC:F2:E6:7E:E0:37:A1:97:E5:D9:F2:E3
Authority key identifier: BC:90:A0:C5:8F:91:29:22:5E:19:19:24:AA:B7:2C:7C:03:B4:3C:5A
Certificate issuer: /CN=bc90a0c58f9129225e191924aab72c7c03b43c5a
Certificate serial: 019D27049791D7C97ADDD7E14155A1C53A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJCgxY-RKSJeGRkkqrcsfAO0PFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
Manifest number: 033A
Signing time: Wed 25 Mar 2026 22:01:45 +0000
Manifest this update: Wed 25 Mar 2026 22:01:45 +0000
Manifest next update: Thu 26 Mar 2026 22:01:45 +0000
Files and hashes: 1: vJCgxY-RKSJeGRkkqrcsfAO0PFo.crl (hash: uIzdmqeThm7aZ+Ya9mTxGxlNpNHTc+UQd9k41PuA8KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJCgxY-RKSJeGRkkqrcsfAO0PFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:97:91:d7:c9:7a:dd:d7:e1:41:55:a1:c5:3a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc90a0c58f9129225e191924aab72c7c03b43c5a
Validity
Not Before: Mar 25 22:01:45 2026 GMT
Not After : Mar 26 22:01:45 2026 GMT
Subject: CN=9c3f4cef1deefdceccf2e67ee037a197e5d9f2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:76:fe:78:8b:67:f0:ff:13:dd:ae:31:7b:10:
8b:54:91:10:f7:b2:cf:0a:c9:e4:0c:ab:3e:cb:49:
3f:80:ba:bf:4e:40:6b:68:22:69:bc:5c:01:e3:28:
7c:cf:16:58:eb:23:43:39:d7:01:90:1c:a5:e9:79:
79:6e:d4:66:5a:e7:5e:06:ff:b7:22:8c:38:a7:f8:
d8:c0:1c:e5:bc:82:3e:ea:e6:a3:73:75:5b:f2:80:
30:c3:0b:eb:42:4d:8a:43:fa:b6:1d:9d:08:10:ff:
08:f4:44:1a:51:88:c6:d1:40:ee:77:a2:0a:31:74:
3c:6a:8a:b7:97:7d:31:ca:d4:ec:91:78:10:d3:82:
a3:ae:59:20:5f:93:b8:c9:8c:62:32:d8:32:90:3c:
2a:50:99:64:fb:e4:a4:a0:2f:52:8f:14:32:e7:61:
9d:f3:7f:18:11:60:53:c1:ce:0f:dd:f7:b8:d0:10:
07:db:47:12:3a:67:a1:e4:57:58:1c:8c:64:b3:dd:
86:f1:2d:0e:18:f7:9a:66:c1:78:a2:97:00:17:b1:
a7:57:e0:79:db:29:5d:67:15:0c:cd:2f:71:73:07:
f2:bb:55:cd:e2:0d:00:a4:e8:dd:50:3d:82:2c:67:
20:74:22:92:03:6a:a1:0c:1f:ca:4a:11:63:9c:12:
57:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3F:4C:EF:1D:EE:FD:CE:CC:F2:E6:7E:E0:37:A1:97:E5:D9:F2:E3
X509v3 Authority Key Identifier:
keyid:BC:90:A0:C5:8F:91:29:22:5E:19:19:24:AA:B7:2C:7C:03:B4:3C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJCgxY-RKSJeGRkkqrcsfAO0PFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e7:a4:26:a4:94:65:4f:9e:ef:0c:23:03:71:22:9b:0d:d6:
bb:d5:1f:44:ec:bb:a1:1e:cc:0d:aa:f2:e2:64:a9:7e:e5:a7:
a8:a1:b6:44:3a:c6:c8:36:01:6d:ef:99:b5:ff:29:34:96:a5:
fe:f8:23:6b:a2:eb:4f:49:31:9c:8f:72:41:e9:b6:7e:3c:be:
66:ea:31:62:df:c3:d4:f8:2a:af:3d:37:09:0b:59:73:18:a9:
84:12:b8:dd:e6:f5:de:e0:29:6f:ac:87:1b:0b:3e:10:7b:31:
ef:d0:0d:fd:9d:56:81:fa:d7:07:73:aa:3a:ce:b7:fd:9d:c0:
de:31:c7:31:46:4d:f7:19:5d:c3:25:a5:08:37:49:96:f1:c6:
b8:b2:5b:25:fd:b6:ae:e6:ac:b2:22:26:35:77:c3:eb:ce:ae:
02:d2:6c:c9:69:80:bb:8b:be:a5:3a:8d:79:2a:ab:44:28:bd:
b8:d9:78:31:ae:d8:ce:c8:16:5a:a4:c7:94:94:b9:f5:97:49:
42:19:6a:be:4d:79:91:37:07:71:fd:99:24:e6:e6:74:ad:22:
27:91:2a:60:eb:cf:05:a1:a6:59:ae:6d:7f:90:58:b3:3f:f1:
df:55:71:02:0e:65:c9:2a:a8:cb:6c:e6:0d:1f:ba:fd:9d:41:
8c:42:2e:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBJeR18l63dfhQVWhxTqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOTBhMGM1OGY5MTI5MjI1ZTE5MTkyNGFhYjcyYzdjMDNi
NDNjNWEwHhcNMjYwMzI1MjIwMTQ1WhcNMjYwMzI2MjIwMTQ1WjAzMTEwLwYDVQQD
Eyg5YzNmNGNlZjFkZWVmZGNlY2NmMmU2N2VlMDM3YTE5N2U1ZDlmMmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknb+eItn8P8T3a4xexCLVJEQ97LP
CsnkDKs+y0k/gLq/TkBraCJpvFwB4yh8zxZY6yNDOdcBkByl6Xl5btRmWudeBv+3
Iow4p/jYwBzlvII+6uajc3Vb8oAwwwvrQk2KQ/q2HZ0IEP8I9EQaUYjG0UDud6IK
MXQ8aoq3l30xytTskXgQ04KjrlkgX5O4yYxiMtgykDwqUJlk++SkoC9SjxQy52Gd
838YEWBTwc4P3fe40BAH20cSOmeh5FdYHIxks92G8S0OGPeaZsF4opcAF7GnV+B5
2yldZxUMzS9xcwfyu1XN4g0ApOjdUD2CLGcgdCKSA2qhDB/KShFjnBJXhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJw/TO8d7v3OzPLmfuA3oZfl2fLjMB8GA1UdIwQY
MBaAFLyQoMWPkSkiXhkZJKq3LHwDtDxaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkpDZ3hZLVJLU0plR1Jra3FyY3NmQU8wUEZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xMDdiMzEtMmZjZi00Yjg5LWIwYzEt
ZWQ1ZGU3NzE0MzQ4LzEvdkpDZ3hZLVJLU0plR1Jra3FyY3NmQU8wUEZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8xMDdiMzEtMmZjZi00Yjg5LWIwYzEtZWQ1ZGU3NzE0MzQ4
LzEvdkpDZ3hZLVJLU0plR1Jra3FyY3NmQU8wUEZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOekJqSU
ZU+e7wwjA3Eimw3Wu9UfROy7oR7MDary4mSpfuWnqKG2RDrGyDYBbe+Ztf8pNJal
/vgja6LrT0kxnI9yQem2fjy+ZuoxYt/D1Pgqrz03CQtZcxiphBK43eb13uApb6yH
Gws+EHsx79AN/Z1WgfrXB3OqOs63/Z3A3jHHMUZN9xldwyWlCDdJlvHGuLJbJf22
ruassiImNXfD686uAtJsyWmAu4u+pTqNeSqrRCi9uNl4Ma7YzsgWWqTHlJS59ZdJ
Qhlqvk15kTcHcf2ZJObmdK0iJ5EqYOvPBaGmWa5tf5BYsz/x31VxAg5lySqoy2zm
DR+6/Z1BjEIuZA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:20 2026 by rpki-client