Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File: vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier: 34cbguL64vd/lWzzt1467Xg2yrr0Ona2KxFsPYk71OY=
Subject key identifier: FD:51:FB:75:AB:91:3A:04:A7:FC:18:3E:9A:A6:52:7C:44:C0:14:91
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 01A14BE1C58BE47D505195BE2AF455212F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number: 1AB0
Signing time: Sat 17 Oct 2026 22:00:49 +0000
Manifest this update: Sat 17 Oct 2026 22:00:49 +0000
Manifest next update: Sun 18 Oct 2026 22:00:49 +0000
Files and hashes: 1: ElvcpU3TMsmMMwxmUDpBI9j8a-U.asa (hash: pMbfMn8GoeeG6ylSUjS62TeRwsoRtXBNLz07ylZ0fpc=)
2: o3neLyji5IioxyX3Ca35svHR-7M.roa (hash: hvV86OxH4a8ZTKhcyjTKk6ffNETXTnUcBs1BRqExbys=)
3: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: ozpFnUo4eXnkQ3UWINp7ycc1OfBo9OHOWXHvpCmncc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:e1:c5:8b:e4:7d:50:51:95:be:2a:f4:55:21:2f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: Oct 17 22:00:49 2026 GMT
Not After : Oct 18 22:00:49 2026 GMT
Subject: CN=fd51fb75ab913a04a7fc183e9aa6527c44c01491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:db:a8:b5:a1:7b:dd:24:a9:ce:bf:ac:49:
df:f3:27:32:2e:1d:0b:5f:4c:45:f6:8e:10:d6:92:
88:02:84:c5:ad:68:e6:1b:f3:84:e6:be:b6:0a:8a:
1f:5e:7c:9d:07:bf:69:47:7e:aa:9e:2d:b6:5b:8b:
f6:01:78:7b:18:6a:3c:44:cf:cb:9f:e8:2b:1e:20:
1e:d3:6c:c5:cb:62:ce:80:38:5a:1d:4f:89:ae:6f:
36:b4:73:f6:f1:fe:46:87:7d:2c:49:33:d1:c5:71:
05:e1:7e:8c:e0:7a:74:84:13:3f:7b:5c:c4:a4:ca:
bd:cc:5f:ad:f7:9f:a0:85:70:4d:9c:72:05:ea:3c:
b7:84:f2:6a:12:e9:12:30:9b:0e:ab:31:5a:47:ea:
6e:c1:31:11:cf:ba:b2:19:74:fd:24:a4:27:41:72:
2f:31:fc:34:56:dd:ad:42:d6:49:d1:ca:fa:2a:fc:
4f:8a:79:73:11:d3:4a:45:02:66:59:30:48:25:03:
08:c3:4c:29:96:e4:d2:ac:a0:7e:6c:6e:47:ae:ee:
0c:19:1b:74:57:ed:b1:12:62:fd:21:b3:24:b2:22:
74:9f:49:d2:56:ea:3b:ec:10:8d:c2:3c:9c:90:3f:
c6:e6:31:73:a0:c2:44:d1:78:bb:51:c3:03:55:f5:
d7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:51:FB:75:AB:91:3A:04:A7:FC:18:3E:9A:A6:52:7C:44:C0:14:91
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:9b:61:e1:45:bd:bc:18:66:fb:af:e1:43:45:aa:d7:b6:53:
7e:1f:90:71:1d:7b:af:2b:4f:4f:44:c7:59:7d:3c:be:5c:7c:
28:1b:21:4d:38:23:e5:a1:5a:00:2d:4e:75:cb:e3:8e:80:58:
5c:0a:a9:99:5d:12:61:af:6f:df:4c:20:07:54:96:f1:79:63:
64:95:93:d3:1d:0d:9b:9a:9c:a9:ff:11:28:c6:90:ff:13:3c:
c2:72:12:44:ab:81:44:eb:38:7b:ff:7c:5b:87:66:60:b9:ea:
0a:ba:90:41:60:ff:03:c3:7b:a7:ed:b7:35:39:0c:62:fb:0e:
37:af:7a:46:89:32:f0:52:e9:89:bf:f5:46:52:49:12:65:f1:
89:bb:db:06:21:26:f0:6e:68:dd:69:40:13:23:a1:05:9e:de:
23:66:f9:f9:9a:f6:dc:e7:35:81:82:fe:31:3f:09:88:90:c8:
e6:98:ca:76:aa:c3:5a:e4:11:7d:1d:88:14:09:c4:ad:f8:c3:
9a:20:6a:e5:59:3f:d8:17:d7:7a:8e:24:f8:26:be:a7:fb:ff:
39:a5:5c:d9:a6:e6:ec:ac:d7:cd:5e:fe:8f:26:83:a3:e9:44:
36:66:5f:d6:ea:99:98:e0:c1:14:9e:38:9f:59:b7:9c:d8:26:
fd:ca:5b:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFL4cWL5H1QUZW+KvRVIS+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOTcyZDQ0Mjc2ZWE0MTAyZWY2YWVkMzBmMmFlNThlOTli
M2U3NTEwHhcNMjYxMDE3MjIwMDQ5WhcNMjYxMDE4MjIwMDQ5WjAzMTEwLwYDVQQD
EyhmZDUxZmI3NWFiOTEzYTA0YTdmYzE4M2U5YWE2NTI3YzQ0YzAxNDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWTbqLWhe90kqc6/rEnf8ycyLh0L
X0xF9o4Q1pKIAoTFrWjmG/OE5r62CoofXnydB79pR36qni22W4v2AXh7GGo8RM/L
n+grHiAe02zFy2LOgDhaHU+Jrm82tHP28f5Gh30sSTPRxXEF4X6M4Hp0hBM/e1zE
pMq9zF+t95+ghXBNnHIF6jy3hPJqEukSMJsOqzFaR+puwTERz7qyGXT9JKQnQXIv
Mfw0Vt2tQtZJ0cr6KvxPinlzEdNKRQJmWTBIJQMIw0wpluTSrKB+bG5Hru4MGRt0
V+2xEmL9IbMksiJ0n0nSVuo77BCNwjyckD/G5jFzoMJE0Xi7UcMDVfXXjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1R+3WrkToEp/wYPpqmUnxEwBSRMB8GA1UdIwQY
MBaAFL2XLUQnbqQQLvau0w8q5Y6Zs+dRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80MTlkMWItNThiMC00NDgzLTkyZDIt
ODZjMWVlMmE5ZWJhLzEvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80MTlkMWItNThiMC00NDgzLTkyZDItODZjMWVlMmE5ZWJh
LzEvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJth4UW9
vBhm+6/hQ0Wq17ZTfh+QcR17rytPT0THWX08vlx8KBshTTgj5aFaAC1OdcvjjoBY
XAqpmV0SYa9v30wgB1SW8XljZJWT0x0Nm5qcqf8RKMaQ/xM8wnISRKuBROs4e/98
W4dmYLnqCrqQQWD/A8N7p+23NTkMYvsON696Roky8FLpib/1RlJJEmXxibvbBiEm
8G5o3WlAEyOhBZ7eI2b5+Zr23Oc1gYL+MT8JiJDI5pjKdqrDWuQRfR2IFAnErfjD
miBq5Vk/2BfXeo4k+Ca+p/v/OaVc2abm7KzXzV7+jyaDo+lENmZf1uqZmODBFJ44
n1m3nNgm/cpb3A==
-----END CERTIFICATE-----
Generated at Sun Oct 18 03:22:18 2026 by rpki-client