Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
File: vCYx1KOVOSlNH55XbmmWIK2Yo40.mft (raw, json)
Hash identifier: KfzYhtANK4CNaOwAzh2VybTpET2tWUFKdse5EfGpjHE=
Subject key identifier: 85:3A:1E:34:4E:D1:0C:11:96:12:C4:43:D0:4B:59:88:09:D1:0D:D9
Authority key identifier: BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
Certificate issuer: /CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Certificate serial: 019D386658C5EE7842D0A1D09B06A0ED1ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
Manifest number: 080E
Signing time: Sun 29 Mar 2026 07:02:04 +0000
Manifest this update: Sun 29 Mar 2026 07:02:04 +0000
Manifest next update: Mon 30 Mar 2026 07:02:04 +0000
Files and hashes: 1: vCYx1KOVOSlNH55XbmmWIK2Yo40.crl (hash: gxo1a66jJV8CPuPmLAf/B960AnZH1CvK0HD7T3U7ouU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:58:c5:ee:78:42:d0:a1:d0:9b:06:a0:ed:1a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Validity
Not Before: Mar 29 07:02:04 2026 GMT
Not After : Mar 30 07:02:04 2026 GMT
Subject: CN=853a1e344ed10c119612c443d04b598809d10dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:96:f2:2a:28:94:23:2e:33:ab:37:8b:ef:f1:
6b:42:dd:70:3c:3b:b7:e1:15:bb:c8:86:8b:ab:69:
5e:26:47:0e:56:2d:a3:36:af:95:9b:4f:ed:7c:15:
ba:fc:e7:5e:e4:40:59:a9:64:40:38:1c:24:f9:f6:
9b:49:24:8f:b7:8d:ca:f0:37:ab:6a:a7:2e:6c:a5:
70:40:df:23:c9:c2:bf:84:f3:a1:53:f0:ac:69:f4:
2b:6f:d5:a2:86:b8:40:1f:68:d0:c3:39:5b:cd:84:
b3:7a:f4:b0:cb:fb:e6:f7:a0:82:c4:6b:42:2b:c0:
86:4b:f0:22:55:9c:80:09:3c:0c:cd:6c:44:3c:7d:
fd:a9:d6:47:9f:a3:84:14:d3:d1:47:8e:3f:c3:41:
1a:55:77:37:d2:a1:f0:56:c9:0a:09:da:9d:a5:bf:
e9:d4:93:46:4f:c7:cd:c6:6d:ac:27:ce:ab:16:35:
50:07:ea:e9:86:7c:bd:e3:bb:67:2a:8e:05:e0:5b:
e5:40:2c:6a:47:54:2f:00:87:06:07:05:12:cc:71:
d0:4c:b5:c2:1a:b0:9f:57:78:db:66:3a:6b:6f:96:
05:f2:83:e3:23:eb:a3:85:77:40:df:91:c5:0d:f8:
33:83:79:48:29:b6:bb:26:88:53:40:4b:f0:13:15:
45:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3A:1E:34:4E:D1:0C:11:96:12:C4:43:D0:4B:59:88:09:D1:0D:D9
X509v3 Authority Key Identifier:
keyid:BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b4:3b:33:53:00:a8:55:86:7c:2a:96:db:04:0b:12:af:5c:
a4:a2:2d:0c:a3:7a:65:fb:e8:eb:aa:85:3e:55:de:cc:54:bd:
e5:d3:e6:56:85:13:53:2a:fc:37:6c:94:e2:d7:ce:ec:1b:64:
da:01:06:50:48:b2:e3:eb:f3:56:c3:19:92:ee:fb:ce:e3:eb:
94:af:88:e8:95:e1:de:c7:da:d5:39:b7:e6:ec:e6:c3:c4:c5:
2f:d8:dc:09:06:20:c9:60:1b:24:a5:9f:1c:ae:34:29:95:9d:
ca:1f:8c:4b:bc:70:3d:20:51:59:46:61:7e:1c:a7:f8:12:3d:
8b:ee:2d:37:c6:4d:cf:f6:4c:d6:bb:e1:e3:dd:09:5b:49:27:
15:d5:fa:77:04:6f:a0:70:08:e6:56:07:3f:66:a2:f9:06:de:
c5:2c:ec:3d:2b:b6:f8:c8:c3:49:3c:fc:03:d2:6e:61:ea:69:
a3:33:42:62:b1:f2:9c:a3:c2:aa:41:ea:6f:73:72:93:cf:56:
de:b9:aa:96:2a:97:da:00:f1:e6:8e:9c:b5:05:9c:33:6b:b3:
8c:16:13:43:ba:89:c5:be:7b:f7:21:30:80:3a:ca:d8:6d:da:
84:ef:21:d9:7d:1b:d2:13:59:88:97:71:52:89:2b:ac:7d:db:
fd:dd:75:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZljF7nhC0KHQmwag7RrKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMjYzMWQ0YTM5NTM5Mjk0ZDFmOWU1NzZlNjk5NjIwYWQ5
OGEzOGQwHhcNMjYwMzI5MDcwMjA0WhcNMjYwMzMwMDcwMjA0WjAzMTEwLwYDVQQD
Eyg4NTNhMWUzNDRlZDEwYzExOTYxMmM0NDNkMDRiNTk4ODA5ZDEwZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pbyKiiUIy4zqzeL7/FrQt1wPDu3
4RW7yIaLq2leJkcOVi2jNq+Vm0/tfBW6/Ode5EBZqWRAOBwk+fabSSSPt43K8Der
aqcubKVwQN8jycK/hPOhU/CsafQrb9WihrhAH2jQwzlbzYSzevSwy/vm96CCxGtC
K8CGS/AiVZyACTwMzWxEPH39qdZHn6OEFNPRR44/w0EaVXc30qHwVskKCdqdpb/p
1JNGT8fNxm2sJ86rFjVQB+rphny947tnKo4F4FvlQCxqR1QvAIcGBwUSzHHQTLXC
GrCfV3jbZjprb5YF8oPjI+ujhXdA35HFDfgzg3lIKba7JohTQEvwExVFJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIU6HjRO0QwRlhLEQ9BLWYgJ0Q3ZMB8GA1UdIwQY
MBaAFLwmMdSjlTkpTR+eV25pliCtmKONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAt
MmY2ZDQ2ZDcyOTk2LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAtMmY2ZDQ2ZDcyOTk2
LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbQ7M1MA
qFWGfCqW2wQLEq9cpKItDKN6Zfvo66qFPlXezFS95dPmVoUTUyr8N2yU4tfO7Btk
2gEGUEiy4+vzVsMZku77zuPrlK+I6JXh3sfa1Tm35uzmw8TFL9jcCQYgyWAbJKWf
HK40KZWdyh+MS7xwPSBRWUZhfhyn+BI9i+4tN8ZNz/ZM1rvh490JW0knFdX6dwRv
oHAI5lYHP2ai+QbexSzsPSu2+MjDSTz8A9JuYeppozNCYrHynKPCqkHqb3Nyk89W
3rmqliqX2gDx5o6ctQWcM2uzjBYTQ7qJxb579yEwgDrK2G3ahO8h2X0b0hNZiJdx
UokrrH3b/d112A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:53 2026 by rpki-client