
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
File: vCYx1KOVOSlNH55XbmmWIK2Yo40.mft (raw, json)
Hash identifier: zkERE1LX93WkPPeZfwm2F8273TgbWq0kwSOm2MbiLFU=
Subject key identifier: 70:66:3C:8D:75:FC:C3:71:05:3D:C2:99:BC:B0:32:F9:58:17:1A:59
Authority key identifier: BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
Certificate issuer: /CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Certificate serial: 019CAB6BE0A4CA3E4D3705E36333351BF36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
Manifest number: 07C5
Signing time: Sun 01 Mar 2026 22:01:39 +0000
Manifest this update: Sun 01 Mar 2026 22:01:39 +0000
Manifest next update: Mon 02 Mar 2026 22:01:39 +0000
Files and hashes: 1: vCYx1KOVOSlNH55XbmmWIK2Yo40.crl (hash: MX58u0OO2Q9K/FsNtq5uFR3WJOPtna8McuhKchi7ETg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:e0:a4:ca:3e:4d:37:05:e3:63:33:35:1b:f3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Validity
Not Before: Mar 1 22:01:39 2026 GMT
Not After : Mar 2 22:01:39 2026 GMT
Subject: CN=70663c8d75fcc371053dc299bcb032f958171a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:5e:30:6d:d2:a0:68:35:20:16:58:14:c8:
c9:21:79:65:0a:76:2e:38:a4:e2:28:4d:75:a6:cb:
40:09:49:f7:e7:6d:d1:64:3b:35:51:81:9b:9b:29:
05:b3:21:da:16:61:d8:c8:c2:13:43:dc:c7:5c:ec:
94:2a:d9:87:c7:84:c3:d8:dc:57:67:47:a2:13:33:
43:1b:71:5a:45:f2:9c:ce:fb:24:1e:87:cd:b5:b8:
22:9a:b5:84:b7:e9:b0:ff:bf:62:bd:cb:c0:73:6f:
1e:b6:ad:2a:2b:55:3b:28:61:a5:34:0c:e2:a0:63:
3a:75:00:db:98:74:9d:d4:87:dd:f1:30:d5:d3:00:
86:b8:ec:80:ad:be:d3:d5:1f:27:fb:66:79:56:76:
0c:df:c0:0a:e9:a3:22:2f:44:74:94:9f:b9:39:84:
ca:32:36:df:e5:41:ab:f7:df:c9:3a:51:3f:de:e4:
19:e9:df:4a:9d:2e:93:76:47:01:6e:2f:65:65:7c:
7c:0a:e8:a2:56:58:88:85:9e:72:40:54:2b:2c:8d:
d2:1a:47:6b:cd:58:9d:c3:77:dc:e6:f3:4d:5a:86:
de:77:41:be:31:6e:19:1f:1d:c3:d3:f7:6a:04:f3:
fa:6b:04:e7:ba:f7:e0:91:95:98:d9:d9:04:82:e1:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:66:3C:8D:75:FC:C3:71:05:3D:C2:99:BC:B0:32:F9:58:17:1A:59
X509v3 Authority Key Identifier:
keyid:BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:32:c4:c1:6d:b2:5d:6b:b5:9e:0c:60:bd:f2:01:09:33:b2:
f2:0e:25:b2:20:19:0c:5b:27:ae:92:5c:57:58:5a:91:e7:5d:
71:79:35:9f:51:08:27:0c:de:1c:24:56:a0:81:9a:d5:92:d9:
09:6a:d9:c4:98:ee:00:9e:23:04:66:24:4a:2b:ff:b5:f7:f1:
1c:89:c0:2a:5f:22:66:c9:8a:33:87:f3:80:1f:27:31:5c:1b:
61:cf:03:37:03:4d:10:ac:af:09:41:4f:93:34:bc:a1:6a:46:
91:b9:54:58:09:76:45:da:aa:18:9a:92:d3:e4:ef:ca:fb:e0:
1b:2f:d9:eb:88:bd:dc:f0:bd:1d:25:1b:0e:31:a5:2c:da:41:
7a:50:60:ee:8f:10:9e:6b:04:2e:bb:76:e0:42:e7:65:d8:4a:
88:ca:4c:2f:43:7a:fc:18:f6:cd:c7:d0:3d:e8:3a:7d:10:d8:
dd:17:58:9d:b9:f8:5e:02:f7:96:01:c3:a1:b1:6f:45:fe:ac:
05:7e:e9:7e:8f:5d:ea:3f:42:6e:42:66:8c:2c:cc:74:55:2f:
14:25:9f:95:5a:af:ab:d2:e7:5d:4f:d6:2a:6e:95:4f:67:92:
a4:12:6c:15:77:a1:72:f4:42:ea:81:09:10:8e:9d:ab:a5:d2:
65:1b:ec:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:46:56 2026 by rpki-client