Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File: vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier: SmaAKOMy335FykZKoIXLTTnVUZPUFSeFwOrNL9ziRrw=
Subject key identifier: 86:17:EA:44:AF:C2:17:F8:20:27:26:CB:31:6C:CC:35:B2:84:FE:E1
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 019D38D2E52E844B153525842290A8B9EFBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:00:38 +0000
Manifest this update: Sun 29 Mar 2026 09:00:38 +0000
Manifest next update: Mon 30 Mar 2026 09:00:38 +0000
Files and hashes: 1: _OTzMV2rChEKOe6EQENv97dsl1U.roa (hash: 7nL8A5gb8+P3YcITNFm2f0VLai2fLH11JBAUP9CV0/4=)
2: lTr_UVi_A79a3K8ej8EhTQ-s56o.asa (hash: Kis6ukaDSScAbBexiq/JiDaCOANQ9hpiW6hUa9xiV5s=)
3: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: czGcteD91rANNNkHv/GjYf3wwfsSsKrEydMrMyNTaRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e5:2e:84:4b:15:35:25:84:22:90:a8:b9:ef:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: Mar 29 09:00:38 2026 GMT
Not After : Mar 30 09:00:38 2026 GMT
Subject: CN=8617ea44afc217f8202726cb316ccc35b284fee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ac:b3:d7:0f:b8:7a:3b:bb:f0:07:48:77:21:
77:a4:f2:a9:1c:13:cf:65:42:e1:99:96:d6:19:75:
27:44:06:e9:cc:ea:4a:64:f9:48:c5:0b:e4:7f:96:
6c:d8:e7:3a:6f:9e:89:9a:67:8c:ef:1f:a9:3f:bc:
34:79:1a:c2:8c:c2:c0:07:c2:55:a6:75:d6:48:e0:
8a:16:70:a3:cf:b9:86:08:bf:92:b5:91:43:f0:9a:
ce:bc:27:3f:97:a6:a2:f6:57:50:45:6f:42:5e:f0:
6a:fd:bb:7e:8f:aa:f9:87:5c:72:7b:52:25:93:18:
b3:3d:06:76:ca:8b:3f:29:9d:47:8e:32:23:55:f1:
3d:af:82:ca:77:51:e9:73:6c:c5:29:7b:93:24:5d:
cb:0c:d5:61:1d:d0:9a:17:62:7a:34:de:3c:fb:c3:
fd:3c:9e:7d:e2:4b:33:75:c4:42:be:62:97:05:69:
64:6c:2b:c2:9f:b7:c0:5c:b9:e0:3d:1b:d9:29:40:
8e:1d:8e:58:36:8c:0b:cd:51:14:86:62:03:a7:bc:
8b:33:d1:12:f5:75:05:69:eb:ec:b3:a4:53:0b:24:
fd:3d:5a:4f:85:67:e6:92:36:70:f8:2c:13:9a:b3:
21:06:84:d1:df:4b:77:74:b8:e4:cb:27:6a:91:e5:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:17:EA:44:AF:C2:17:F8:20:27:26:CB:31:6C:CC:35:B2:84:FE:E1
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f9:60:03:b0:f1:bc:a7:a4:f6:56:22:7d:8c:c0:f9:c9:0e:
c2:0d:40:44:5e:8d:54:89:ed:df:7f:33:8b:dc:9a:30:69:5d:
9c:38:06:52:54:73:55:33:7b:0d:01:98:ca:31:c2:74:9c:66:
bd:3e:f4:9f:e2:bb:41:84:30:27:46:33:ef:a8:49:ea:70:85:
70:bc:58:28:a8:1b:83:62:56:0a:6a:91:6e:7c:59:9a:02:b0:
3d:7f:16:b2:4e:3d:9d:c8:f2:f0:15:e5:2b:3c:9d:b4:c8:04:
26:17:af:df:1f:fa:41:b4:24:75:97:e0:42:2c:53:44:1d:58:
62:88:9c:4d:7d:63:7c:55:b8:bf:3e:43:d6:06:d0:12:4f:ca:
ac:40:5d:b0:54:81:9c:7f:88:5c:09:42:51:f2:fb:32:68:af:
d3:09:5b:5a:0e:3e:06:70:b7:04:2b:b9:b0:5d:e1:4e:60:6b:
a2:bd:b6:24:1b:47:cc:aa:0b:31:17:61:e7:dc:5f:3f:1e:ea:
66:0f:3d:9a:ae:9f:83:8c:cb:32:92:a0:47:99:75:fa:be:d1:
4b:c4:ee:ab:12:93:7f:7b:72:30:ff:4d:b6:47:26:73:57:a1:
0d:c9:dc:d3:44:a2:c5:09:fa:b1:d9:23:5d:98:b7:bd:cc:9c:
da:89:54:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:01 2026 by rpki-client