Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
File: KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json)
Hash identifier: o6i0fBOE614q4dVuWZMP+zG7DO0QddTF0aIthU5iRF4=
Subject key identifier: F4:74:32:6E:EE:16:FD:E9:AA:9A:CF:6B:DB:B4:D5:1A:B2:5F:C9:60
Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
Certificate issuer: /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Certificate serial: 019D38D398231097B58323F56FD06CEE4E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:01:23 +0000
Manifest this update: Sun 29 Mar 2026 09:01:23 +0000
Manifest next update: Mon 30 Mar 2026 09:01:23 +0000
Files and hashes: 1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: WPOyHF156Mle9Ex2V9KOnmnMDQNaivz3NrQwe+OZeqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:98:23:10:97:b5:83:23:f5:6f:d0:6c:ee:4e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Validity
Not Before: Mar 29 09:01:23 2026 GMT
Not After : Mar 30 09:01:23 2026 GMT
Subject: CN=f474326eee16fde9aa9acf6bdbb4d51ab25fc960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9a:e9:d5:61:f1:bc:8c:cb:6c:a2:19:df:0f:
d1:2a:f6:18:a9:f6:43:52:21:d5:77:c7:ab:46:05:
75:75:a6:cc:d9:b0:2a:1a:4a:cf:02:a6:5b:e0:12:
01:d8:10:01:75:e4:f4:f9:71:3c:4f:52:b3:de:1c:
c7:48:60:1b:0f:ec:cd:09:09:ed:8b:1d:5b:bc:88:
a7:64:6e:f5:32:0e:64:91:39:9f:90:56:69:f2:2d:
1c:58:ec:24:1e:e4:99:49:5d:0d:85:f7:f4:f7:51:
5b:af:4d:77:b6:f1:72:01:ce:1f:f9:e6:96:95:48:
39:d2:7d:c4:ae:dd:41:2f:3d:e1:96:80:c2:fa:8e:
79:a7:fb:62:8e:a1:d4:fa:8b:4a:7a:3a:fd:0b:5f:
c1:4c:f9:88:39:db:fa:c8:30:7b:4b:6f:d1:88:fb:
59:fe:a9:62:80:97:c4:f3:ac:f4:91:75:3d:ee:be:
22:9c:e3:18:77:08:f9:db:09:d6:6d:e1:1e:e6:2d:
6d:e5:16:a5:bd:bb:1e:d2:1d:0f:c7:79:19:3a:eb:
67:70:fe:a0:51:c2:70:56:f2:8e:58:3d:42:a4:ba:
53:a0:8e:7e:d4:6d:bf:a7:d4:f0:ea:e8:16:b3:13:
46:4b:3b:db:14:5f:6c:6d:43:6e:83:57:ba:8b:93:
a8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:74:32:6E:EE:16:FD:E9:AA:9A:CF:6B:DB:B4:D5:1A:B2:5F:C9:60
X509v3 Authority Key Identifier:
keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:68:dc:90:1f:ac:91:4d:f5:f8:5f:fb:bb:2c:2d:ff:5b:0c:
31:ed:ce:8f:33:82:6b:8d:60:fc:f1:68:da:dc:18:ac:67:1a:
69:34:40:75:80:f2:37:e6:c6:26:f1:d4:f3:43:98:36:98:1b:
3a:56:c9:eb:ea:6a:ea:ad:61:af:c7:6f:47:48:8f:01:c3:7b:
16:e8:74:e6:47:85:1b:f7:a8:c7:db:cd:fd:15:f7:40:7a:25:
bb:f3:e7:2d:22:97:7e:56:86:7a:f8:d4:cf:bb:c2:82:ab:3b:
37:40:c6:88:85:6f:54:af:b7:3e:b7:23:51:3b:ce:3d:e4:47:
00:7e:58:28:58:90:3f:52:b9:8e:30:27:40:fd:6b:39:04:d8:
2c:30:fc:f2:0a:1e:29:07:6a:a4:d5:0d:9f:fa:b2:9b:a1:04:
f0:5f:64:16:2b:a2:60:e1:f1:a7:f0:6f:88:9d:a6:49:ec:44:
4a:9f:12:23:4a:68:59:37:3b:65:78:36:a7:17:1e:bc:e6:4a:
9d:58:45:2f:8f:4e:21:a0:03:f7:bf:75:4f:5a:62:f9:07:5e:
c8:a5:de:ae:c7:dd:5c:44:d6:79:56:dc:82:79:08:18:e1:53:
e3:1d:ff:50:d3:12:96:d2:06:58:0b:31:e3:69:8b:e3:41:32:
a2:24:23:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0405gjEJe1gyP1b9Bs7k56MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhODBiNWZmMzc1MDY4YTc0OTAyMTBlYmM2Y2FmMjI4MjJj
YTBkMGEwHhcNMjYwMzI5MDkwMTIzWhcNMjYwMzMwMDkwMTIzWjAzMTEwLwYDVQQD
EyhmNDc0MzI2ZWVlMTZmZGU5YWE5YWNmNmJkYmI0ZDUxYWIyNWZjOTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3prp1WHxvIzLbKIZ3w/RKvYYqfZD
UiHVd8erRgV1dabM2bAqGkrPAqZb4BIB2BABdeT0+XE8T1Kz3hzHSGAbD+zNCQnt
ix1bvIinZG71Mg5kkTmfkFZp8i0cWOwkHuSZSV0Nhff091Fbr013tvFyAc4f+eaW
lUg50n3Ert1BLz3hloDC+o55p/tijqHU+otKejr9C1/BTPmIOdv6yDB7S2/RiPtZ
/qligJfE86z0kXU97r4inOMYdwj52wnWbeEe5i1t5Ralvbse0h0Px3kZOutncP6g
UcJwVvKOWD1CpLpToI5+1G2/p9Tw6ugWsxNGSzvbFF9sbUNug1e6i5OolQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPR0Mm7uFv3pqprPa9u01RqyX8lgMB8GA1UdIwQY
MBaAFCqAtf83UGinSQIQ68bK8igiyg0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQt
MGRkYzUwNDg2Nzg3LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQtMGRkYzUwNDg2Nzg3
LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2mjckB+s
kU31+F/7uywt/1sMMe3OjzOCa41g/PFo2twYrGcaaTRAdYDyN+bGJvHU80OYNpgb
OlbJ6+pq6q1hr8dvR0iPAcN7Fuh05keFG/eox9vN/RX3QHolu/PnLSKXflaGevjU
z7vCgqs7N0DGiIVvVK+3PrcjUTvOPeRHAH5YKFiQP1K5jjAnQP1rOQTYLDD88goe
KQdqpNUNn/qym6EE8F9kFiuiYOHxp/BviJ2mSexESp8SI0poWTc7ZXg2pxcevOZK
nVhFL49OIaAD9791T1pi+QdeyKXersfdXETWeVbcgnkIGOFT4x3/UNMSltIGWAsx
42mL40EyoiQjFg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:41 2026 by rpki-client