
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File: vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier: h8lYM4+J1j68emZYpLJDuBrNaMnk7cmXxOHVsj9asp8=
Subject key identifier: 11:2B:E0:B4:6E:3B:18:B7:0F:DA:D8:82:49:CE:CB:B1:98:E8:F1:BD
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 019F122EC103BF75D58EC0E7871AB66B4045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number: 1989
Signing time: Mon 29 Jun 2026 07:01:21 +0000
Manifest this update: Mon 29 Jun 2026 07:01:21 +0000
Manifest next update: Tue 30 Jun 2026 07:01:21 +0000
Files and hashes: 1: ElvcpU3TMsmMMwxmUDpBI9j8a-U.asa (hash: pMbfMn8GoeeG6ylSUjS62TeRwsoRtXBNLz07ylZ0fpc=)
2: o3neLyji5IioxyX3Ca35svHR-7M.roa (hash: hvV86OxH4a8ZTKhcyjTKk6ffNETXTnUcBs1BRqExbys=)
3: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: yuySxlRDnb69S3DqqwhAgVSItiDQNPYxwFJ+t5kggQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:c1:03:bf:75:d5:8e:c0:e7:87:1a:b6:6b:40:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: Jun 29 07:01:21 2026 GMT
Not After : Jun 30 07:01:21 2026 GMT
Subject: CN=112be0b46e3b18b70fdad88249cecbb198e8f1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:97:49:52:0f:85:42:e3:55:59:63:7f:f2:
f5:8c:cc:0b:91:c8:bf:92:44:d8:68:77:58:f1:3a:
c4:e3:17:da:0a:73:55:34:a6:43:3e:69:c3:c1:43:
cf:11:4c:97:85:5b:31:4c:e9:11:48:9b:b2:91:21:
7a:2b:e2:8b:2c:a2:57:37:02:e7:91:6d:9f:f5:f1:
87:4b:e5:11:d3:18:11:75:93:8c:60:71:8e:d8:d4:
b4:9b:41:85:fa:0a:9a:0a:cd:7c:6d:25:05:24:83:
4c:10:ff:81:cc:ca:9c:0b:f4:57:c3:14:98:c0:fc:
74:98:7e:3c:98:7d:27:52:10:f8:70:c7:5d:ab:fe:
bc:a9:ff:3f:8b:5c:5a:cf:a6:db:15:25:33:18:1a:
16:ba:21:9f:bc:ef:0e:f9:ae:e3:ac:e8:87:77:fd:
04:ff:7f:47:0c:5a:f9:f0:bc:1a:67:6c:5a:85:81:
c7:9a:60:7b:c5:ed:ce:20:49:96:8e:0d:69:85:fa:
84:2a:bf:1f:b3:01:43:93:d9:cc:b6:06:72:bc:1d:
4b:6c:50:4d:79:49:65:fa:70:96:4a:ee:4d:6c:3f:
f4:87:c7:d5:5e:88:7a:4f:b9:28:4c:b0:cf:3d:41:
d2:0f:73:1a:f6:d2:f5:9c:56:5a:76:01:23:d3:6d:
f1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2B:E0:B4:6E:3B:18:B7:0F:DA:D8:82:49:CE:CB:B1:98:E8:F1:BD
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f9:0d:48:98:2f:05:ec:20:7b:85:0e:a6:0d:62:4a:97:86:
af:b8:dc:2e:4c:e4:30:ba:0b:90:75:29:7f:98:94:f9:f0:62:
87:8d:db:35:35:9a:ba:1c:91:88:fb:73:c8:88:d6:c8:35:a6:
91:3b:59:6f:97:ad:ce:c0:b3:66:8e:9f:3e:55:36:0f:f5:0c:
5c:97:b4:ad:ef:bc:13:d8:25:f0:80:38:91:8b:ae:eb:57:47:
64:ac:ab:39:8c:a4:cb:1b:d7:61:fb:33:ff:ff:aa:2b:45:0d:
59:7b:be:ba:d3:a2:34:82:54:91:97:50:74:b9:8a:5e:3a:5b:
ff:cd:72:69:5f:05:1d:9d:48:c9:b5:10:16:b7:05:9a:03:a3:
d2:98:66:cf:68:45:b7:88:02:cd:4f:ec:12:1c:c0:8f:e8:79:
22:c5:85:32:76:b6:e2:b3:f4:c4:b2:47:3b:f0:42:32:1e:fc:
d3:88:f0:49:e2:fe:c6:77:a5:3a:f0:b9:f9:90:e5:b4:a1:e7:
cf:49:1c:69:1c:ea:ce:b1:e8:4a:6f:03:c4:25:3b:e7:35:ae:
dc:b5:72:6a:e1:5e:7d:57:cb:01:07:21:9d:90:c7:c4:13:a2:
cb:35:fc:a0:69:40:f8:fb:a8:d9:ca:c8:2f:3a:32:50:d9:95:
9d:e9:99:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SLsEDv3XVjsDnhxq2a0BFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOTcyZDQ0Mjc2ZWE0MTAyZWY2YWVkMzBmMmFlNThlOTli
M2U3NTEwHhcNMjYwNjI5MDcwMTIxWhcNMjYwNjMwMDcwMTIxWjAzMTEwLwYDVQQD
EygxMTJiZTBiNDZlM2IxOGI3MGZkYWQ4ODI0OWNlY2JiMTk4ZThmMWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsceXSVIPhULjVVljf/L1jMwLkci/
kkTYaHdY8TrE4xfaCnNVNKZDPmnDwUPPEUyXhVsxTOkRSJuykSF6K+KLLKJXNwLn
kW2f9fGHS+UR0xgRdZOMYHGO2NS0m0GF+gqaCs18bSUFJINMEP+BzMqcC/RXwxSY
wPx0mH48mH0nUhD4cMddq/68qf8/i1xaz6bbFSUzGBoWuiGfvO8O+a7jrOiHd/0E
/39HDFr58LwaZ2xahYHHmmB7xe3OIEmWjg1phfqEKr8fswFDk9nMtgZyvB1LbFBN
eUll+nCWSu5NbD/0h8fVXoh6T7koTLDPPUHSD3Ma9tL1nFZadgEj023x0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEr4LRuOxi3D9rYgknOy7GY6PG9MB8GA1UdIwQY
MBaAFL2XLUQnbqQQLvau0w8q5Y6Zs+dRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80MTlkMWItNThiMC00NDgzLTkyZDIt
ODZjMWVlMmE5ZWJhLzEvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80MTlkMWItNThiMC00NDgzLTkyZDItODZjMWVlMmE5ZWJh
LzEvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPkNSJgv
Bewge4UOpg1iSpeGr7jcLkzkMLoLkHUpf5iU+fBih43bNTWauhyRiPtzyIjWyDWm
kTtZb5etzsCzZo6fPlU2D/UMXJe0re+8E9gl8IA4kYuu61dHZKyrOYykyxvXYfsz
//+qK0UNWXu+utOiNIJUkZdQdLmKXjpb/81yaV8FHZ1IybUQFrcFmgOj0phmz2hF
t4gCzU/sEhzAj+h5IsWFMna24rP0xLJHO/BCMh7804jwSeL+xnelOvC5+ZDltKHn
z0kcaRzqzrHoSm8DxCU75zWu3LVyauFefVfLAQchnZDHxBOiyzX8oGlA+Puo2crI
LzoyUNmVnemZQA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:45 2026 by rpki-client