Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
File: vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft (raw, json)
Hash identifier: iQJvCAtoId1E+onb2OuISxZ+Rf6p5fJ7C8x2CXK6vLs=
Subject key identifier: 72:E2:89:13:8D:7F:F4:19:1E:74:41:57:AB:38:F5:58:A9:A1:B2:8E
Authority key identifier: BE:DD:C5:BB:A2:00:CF:D1:9B:25:DC:E1:3C:1E:2E:1A:2A:19:88:A7
Certificate issuer: /CN=beddc5bba200cfd19b25dce13c1e2e1a2a1988a7
Certificate serial: 019DDD9F44BEA2D9FF62C340BECB097F0A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
Manifest number: 53
Signing time: Thu 30 Apr 2026 09:01:35 +0000
Manifest this update: Thu 30 Apr 2026 09:01:35 +0000
Manifest next update: Fri 01 May 2026 09:01:35 +0000
Files and hashes: 1: QjlLqXwrKuX4WWijKXyWQlrwzSI.roa (hash: RrqtKaSOGqQ6cVJgOKK900pw+4nXE4aG5H706/A/L7s=)
2: dBuZbSPKal6c4zm6YNTPS1fr3GQ.asa (hash: ogSY4EAD3D6IaYFiG2filgxMUAq2W39XeRjlBqtFTic=)
3: vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl (hash: kO4b2Nb9Nx2RwRgdnOqAKeQ/lGUE5ThKoRsFB/B6dSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:9f:44:be:a2:d9:ff:62:c3:40:be:cb:09:7f:0a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beddc5bba200cfd19b25dce13c1e2e1a2a1988a7
Validity
Not Before: Apr 30 09:01:35 2026 GMT
Not After : May 1 09:01:35 2026 GMT
Subject: CN=72e289138d7ff4191e744157ab38f558a9a1b28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:a0:5d:e3:d8:c6:ec:8e:9a:b4:a1:6e:e2:
af:4f:72:e4:27:fe:ff:83:2b:4a:40:98:ea:29:47:
2f:22:68:be:19:b3:74:93:82:1d:72:25:90:4e:40:
9b:95:b2:7d:f2:b5:42:18:d3:f3:36:50:ee:1d:2c:
67:cd:91:76:1d:c8:e5:b3:65:48:71:ed:c2:37:91:
46:96:52:89:98:ce:c6:f1:69:e2:81:02:2d:7a:4e:
e0:37:2d:b2:fb:ae:82:34:80:d5:0c:33:b5:de:ab:
ff:3b:3e:eb:f1:bd:f0:15:f1:a9:1c:da:76:9a:bf:
79:10:29:b4:26:e3:23:3f:87:9a:e8:47:31:ef:4f:
3b:d6:da:dd:e0:09:1d:d2:d3:90:9a:55:85:b4:33:
93:0a:90:01:b7:3e:e7:27:45:91:7f:4f:fd:0d:3f:
52:0c:3e:8b:8e:86:fc:7d:a8:ec:ed:f4:62:e6:e5:
d0:91:3e:d6:65:3c:5a:35:76:22:0a:4b:5e:a8:97:
e7:43:e9:f0:75:32:6b:42:07:39:c2:ec:bf:59:d4:
51:70:0c:52:95:14:63:d8:1b:b2:79:81:65:93:15:
bf:bd:03:41:b5:77:aa:65:4f:d5:2c:e4:56:0f:7e:
f1:3c:34:87:24:a3:a7:18:eb:59:30:11:48:8a:36:
a7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E2:89:13:8D:7F:F4:19:1E:74:41:57:AB:38:F5:58:A9:A1:B2:8E
X509v3 Authority Key Identifier:
keyid:BE:DD:C5:BB:A2:00:CF:D1:9B:25:DC:E1:3C:1E:2E:1A:2A:19:88:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5d:e8:a2:b7:16:14:29:2f:33:c1:d1:58:77:15:29:57:ec:
47:c0:7a:35:12:03:4b:4e:bf:42:a8:ed:21:db:9b:06:90:db:
62:56:c8:fd:16:35:06:76:72:ce:bb:1a:4c:8b:d3:46:82:ed:
11:f4:0a:a1:2f:07:a4:3e:a6:4c:b4:af:ae:a7:69:ec:c1:47:
97:c7:9a:cf:1e:91:d7:ff:77:d6:dc:16:aa:24:74:65:48:68:
b7:ed:59:2c:d7:b7:cf:63:53:8c:77:e7:0c:56:d8:32:e8:fc:
0d:3d:19:8f:20:d2:0d:62:9f:56:d0:ae:2a:9b:a1:fc:a0:ea:
dc:36:3a:e8:59:11:54:5c:5a:16:a2:19:d0:82:cb:88:6a:81:
5e:21:f3:dd:c3:44:c5:59:25:f1:b8:c9:8e:cd:d3:c3:e3:ea:
d4:35:21:ec:d6:09:7e:a1:65:37:6f:38:35:32:02:74:8d:fb:
08:de:a0:97:4f:a7:7d:dd:2d:0e:c6:1b:7e:6a:46:99:40:6b:
f4:98:e2:78:86:d5:a4:8b:ab:45:9a:e3:a3:b1:15:01:10:e7:
21:c2:d9:b5:2a:d1:b5:7e:21:77:d4:d2:6f:2b:9c:c2:10:ee:
f6:97:02:61:fe:1a:4a:bc:ff:fb:5c:f5:ec:c1:34:c1:04:da:
a6:b0:c9:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3dn0S+otn/YsNAvssJfwpxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZGRjNWJiYTIwMGNmZDE5YjI1ZGNlMTNjMWUyZTFhMmEx
OTg4YTcwHhcNMjYwNDMwMDkwMTM1WhcNMjYwNTAxMDkwMTM1WjAzMTEwLwYDVQQD
Eyg3MmUyODkxMzhkN2ZmNDE5MWU3NDQxNTdhYjM4ZjU1OGE5YTFiMjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL2gXePYxuyOmrShbuKvT3LkJ/7/
gytKQJjqKUcvImi+GbN0k4IdciWQTkCblbJ98rVCGNPzNlDuHSxnzZF2Hcjls2VI
ce3CN5FGllKJmM7G8WnigQItek7gNy2y+66CNIDVDDO13qv/Oz7r8b3wFfGpHNp2
mr95ECm0JuMjP4ea6Ecx70871trd4Akd0tOQmlWFtDOTCpABtz7nJ0WRf0/9DT9S
DD6Ljob8fajs7fRi5uXQkT7WZTxaNXYiCkteqJfnQ+nwdTJrQgc5wuy/WdRRcAxS
lRRj2BuyeYFlkxW/vQNBtXeqZU/VLORWD37xPDSHJKOnGOtZMBFIijaniQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLiiRONf/QZHnRBV6s49VipobKOMB8GA1UdIwQY
MBaAFL7dxbuiAM/RmyXc4TweLhoqGYinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnQzRnU2SUF6OUdiSmR6aFBCNHVHaW9aaUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iODNjYWEtOGRkMC00MzM3LWJmYzkt
Njg0NjJmYjQwNDk0LzEvdnQzRnU2SUF6OUdiSmR6aFBCNHVHaW9aaUtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iODNjYWEtOGRkMC00MzM3LWJmYzktNjg0NjJmYjQwNDk0
LzEvdnQzRnU2SUF6OUdiSmR6aFBCNHVHaW9aaUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAl3oorcW
FCkvM8HRWHcVKVfsR8B6NRIDS06/QqjtIdubBpDbYlbI/RY1BnZyzrsaTIvTRoLt
EfQKoS8HpD6mTLSvrqdp7MFHl8eazx6R1/931twWqiR0ZUhot+1ZLNe3z2NTjHfn
DFbYMuj8DT0ZjyDSDWKfVtCuKpuh/KDq3DY66FkRVFxaFqIZ0ILLiGqBXiHz3cNE
xVkl8bjJjs3Tw+Pq1DUh7NYJfqFlN284NTICdI37CN6gl0+nfd0tDsYbfmpGmUBr
9JjieIbVpIurRZrjo7EVARDnIcLZtSrRtX4hd9TSbyucwhDu9pcCYf4aSrz/+1z1
7ME0wQTaprDJlg==
-----END CERTIFICATE-----
Generated at Thu Apr 30 12:40:14 2026 by rpki-client