Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
File: vCYx1KOVOSlNH55XbmmWIK2Yo40.mft (raw, json)
Hash identifier: pN1i9zSEJPD0+KvKHiZvSzAT4M/js/HxDwhjIuguN6E=
Subject key identifier: 37:3B:90:A0:68:68:04:E6:F7:8F:8B:71:9E:03:A8:3F:89:94:C4:CE
Authority key identifier: BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
Certificate issuer: /CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Certificate serial: 019D2AE0F3657C45243E800929B67BFCA376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
Manifest number: 0807
Signing time: Thu 26 Mar 2026 16:01:18 +0000
Manifest this update: Thu 26 Mar 2026 16:01:18 +0000
Manifest next update: Fri 27 Mar 2026 16:01:18 +0000
Files and hashes: 1: vCYx1KOVOSlNH55XbmmWIK2Yo40.crl (hash: h1PujzZF3DgB/yEPwvGahqYLkZPtyyKZfTxwaNodcSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:f3:65:7c:45:24:3e:80:09:29:b6:7b:fc:a3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Validity
Not Before: Mar 26 16:01:18 2026 GMT
Not After : Mar 27 16:01:18 2026 GMT
Subject: CN=373b90a0686804e6f78f8b719e03a83f8994c4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:41:a0:18:ab:d3:6d:d6:c8:4e:93:e3:c9:
a0:b1:44:96:16:5a:10:5f:83:00:0f:65:0b:24:c1:
90:52:fc:dd:25:a8:6f:ef:6c:19:c9:c4:d4:4c:c6:
59:1d:3d:e9:d0:f0:87:d6:3a:e2:66:4e:08:f3:9f:
17:ce:f1:fa:64:c4:ec:e9:17:35:5e:8d:c3:e3:af:
47:ca:58:33:7d:2b:c1:d8:65:69:c3:2e:68:00:c8:
2e:36:82:89:42:a6:b3:51:36:ee:b0:40:a8:ca:26:
f5:56:96:70:ab:bc:fd:1e:db:9c:d6:bf:30:39:3c:
ad:08:d6:bf:32:0f:d1:1e:f8:ec:a6:df:a8:7a:7b:
7f:8f:4a:0f:16:b7:96:93:6d:e8:dc:90:1f:3f:78:
8f:37:a9:32:7e:0b:a2:5d:97:57:08:1e:07:94:95:
51:88:c9:51:3e:3b:f4:2f:bc:66:db:32:05:38:52:
3e:b5:19:5d:b0:8d:09:88:f4:7a:5e:44:be:4b:65:
a8:3f:26:e5:47:83:99:fd:8e:9f:37:2b:3c:2e:01:
34:d3:6c:63:82:fa:1f:6e:ed:0c:bf:2d:3b:86:58:
46:04:fd:e0:18:8d:30:bd:5d:4a:ee:ea:b9:21:49:
61:d2:ca:ac:de:1f:8b:fa:60:2a:a6:1b:89:6d:c6:
3c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3B:90:A0:68:68:04:E6:F7:8F:8B:71:9E:03:A8:3F:89:94:C4:CE
X509v3 Authority Key Identifier:
keyid:BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:05:63:03:3a:48:c2:4f:7a:58:49:94:1b:03:aa:22:87:f6:
2c:32:b6:35:29:6f:26:2f:94:7e:de:9b:35:a3:41:0d:b7:0d:
78:f7:94:b6:3f:63:a5:58:ef:c2:c0:56:75:6c:63:83:72:eb:
9e:28:5d:a0:8b:12:f4:26:18:fd:c4:8d:7a:85:1f:28:b9:77:
82:fb:f7:bc:df:a8:fe:d7:64:bf:e0:58:d3:86:8e:a7:9d:39:
42:d7:09:51:ad:21:a1:a7:5f:97:59:49:47:6b:1c:43:e7:27:
bb:51:0c:15:53:d5:09:b7:82:02:16:88:dd:33:d1:87:66:6d:
71:5d:c3:60:8c:81:b6:76:3c:f6:59:29:42:4f:61:31:e6:c5:
9f:0b:91:01:4f:18:84:ec:53:bf:5f:bf:eb:c8:b8:88:11:3a:
c5:1c:fb:5f:0c:46:ff:d2:f3:8c:ef:ff:65:8b:73:44:5b:c3:
d0:9d:d4:e2:1d:0a:f7:03:9d:8d:54:5e:d8:40:78:46:72:09:
e2:fc:7b:b3:51:55:a5:8e:09:11:86:8d:eb:2b:13:69:1c:22:
b9:39:27:a6:a3:64:c7:c0:93:11:26:fb:f9:d7:32:9e:10:c4:
59:30:51:92:a6:22:d2:80:46:1c:a9:28:89:44:14:6b:eb:93:
f8:c7:de:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4PNlfEUkPoAJKbZ7/KN2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMjYzMWQ0YTM5NTM5Mjk0ZDFmOWU1NzZlNjk5NjIwYWQ5
OGEzOGQwHhcNMjYwMzI2MTYwMTE4WhcNMjYwMzI3MTYwMTE4WjAzMTEwLwYDVQQD
EygzNzNiOTBhMDY4NjgwNGU2Zjc4ZjhiNzE5ZTAzYTgzZjg5OTRjNGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu9BoBir023WyE6T48mgsUSWFloQ
X4MAD2ULJMGQUvzdJahv72wZycTUTMZZHT3p0PCH1jriZk4I858XzvH6ZMTs6Rc1
Xo3D469HylgzfSvB2GVpwy5oAMguNoKJQqazUTbusECoyib1VpZwq7z9Htuc1r8w
OTytCNa/Mg/RHvjspt+oent/j0oPFreWk23o3JAfP3iPN6kyfguiXZdXCB4HlJVR
iMlRPjv0L7xm2zIFOFI+tRldsI0JiPR6XkS+S2WoPyblR4OZ/Y6fNys8LgE002xj
gvofbu0Mvy07hlhGBP3gGI0wvV1K7uq5IUlh0sqs3h+L+mAqphuJbcY8XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDc7kKBoaATm94+LcZ4DqD+JlMTOMB8GA1UdIwQY
MBaAFLwmMdSjlTkpTR+eV25pliCtmKONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAt
MmY2ZDQ2ZDcyOTk2LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAtMmY2ZDQ2ZDcyOTk2
LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAVjAzpI
wk96WEmUGwOqIof2LDK2NSlvJi+Uft6bNaNBDbcNePeUtj9jpVjvwsBWdWxjg3Lr
nihdoIsS9CYY/cSNeoUfKLl3gvv3vN+o/tdkv+BY04aOp505QtcJUa0hoadfl1lJ
R2scQ+cnu1EMFVPVCbeCAhaI3TPRh2ZtcV3DYIyBtnY89lkpQk9hMebFnwuRAU8Y
hOxTv1+/68i4iBE6xRz7XwxG/9LzjO//ZYtzRFvD0J3U4h0K9wOdjVRe2EB4RnIJ
4vx7s1FVpY4JEYaN6ysTaRwiuTknpqNkx8CTESb7+dcynhDEWTBRkqYi0oBGHKko
iUQUa+uT+Mfe/Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:43 2026 by rpki-client