Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File: vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier: bthQGAsMWjgIm318Yq5pj1dgvyhYJwzn10Q1b7BEVEg=
Subject key identifier: 3E:D4:27:53:26:D2:25:4F:5A:AC:4A:99:C9:F0:C7:47:D5:2E:73:04
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 019E1EA3625E4DCC926822BEF79CB4F7FC4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 00:01:24 +0000
Manifest this update: Wed 13 May 2026 00:01:24 +0000
Manifest next update: Thu 14 May 2026 00:01:24 +0000
Files and hashes: 1: _OTzMV2rChEKOe6EQENv97dsl1U.roa (hash: 7nL8A5gb8+P3YcITNFm2f0VLai2fLH11JBAUP9CV0/4=)
2: lTr_UVi_A79a3K8ej8EhTQ-s56o.asa (hash: Kis6ukaDSScAbBexiq/JiDaCOANQ9hpiW6hUa9xiV5s=)
3: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: RZZuhVU7Q2o103n4yvjjizdZfpr498adIKPGFehTobo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:62:5e:4d:cc:92:68:22:be:f7:9c:b4:f7:fc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: May 13 00:01:24 2026 GMT
Not After : May 14 00:01:24 2026 GMT
Subject: CN=3ed4275326d2254f5aac4a99c9f0c747d52e7304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:d6:4f:a4:87:e9:2a:72:09:b3:33:4f:6a:
1d:ca:ed:ee:63:91:5f:87:68:72:d5:f0:fb:8a:09:
6b:79:c7:15:86:2c:53:2e:b3:6f:80:cb:b4:8a:3f:
1a:fb:0a:77:03:d0:50:81:3a:bb:f0:01:3d:b0:72:
d2:9d:26:57:b4:57:97:14:f9:d2:bc:cc:52:1f:f9:
03:e5:c3:3f:f5:0c:98:c2:96:3c:c9:d3:29:f2:60:
a5:76:46:17:e4:b3:6f:f6:cb:3d:9d:43:06:dc:0c:
e8:b0:ec:54:3a:f1:9b:f9:ed:df:bf:39:ba:67:bb:
a0:ad:17:59:54:30:64:3c:e8:01:cb:73:a4:64:a2:
91:ba:67:f4:8a:e2:40:a0:01:29:54:81:ce:9b:49:
19:5c:3e:79:f8:6a:71:2d:57:6b:54:65:66:f6:ed:
57:70:6d:05:10:fa:a4:03:a3:3f:da:49:eb:17:ae:
d1:81:d1:23:e5:98:31:18:b0:e7:7f:4d:27:d7:76:
b5:38:a0:7b:10:d7:fb:8a:23:7f:39:a2:7d:f6:0f:
5a:69:e3:3c:c8:17:7d:f8:d2:c4:89:b8:47:81:65:
18:01:04:68:8f:66:52:fa:0b:dc:cb:f9:a4:b5:6f:
57:55:fe:0b:cb:9d:29:52:1a:9b:6c:e0:ee:88:44:
76:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D4:27:53:26:D2:25:4F:5A:AC:4A:99:C9:F0:C7:47:D5:2E:73:04
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:bd:fd:69:51:19:54:ed:05:70:da:59:b1:1f:82:41:1a:8e:
1a:3c:9b:de:96:e9:da:88:99:f5:3c:7b:4d:48:76:eb:76:20:
41:5d:8b:5f:3e:52:cd:00:5e:8e:00:6e:2a:13:c1:72:79:6f:
eb:f3:2b:96:8d:2e:94:00:55:9d:6d:c3:49:d1:28:c5:f4:23:
72:0e:15:d7:7e:37:bf:3a:c9:75:3e:21:58:27:a5:7c:ba:55:
5a:96:9b:50:56:a2:14:57:c9:53:1e:cf:80:9c:50:89:a5:5b:
d1:f8:0f:3a:80:98:4a:73:d7:f4:6d:d2:4c:3b:35:21:2c:f1:
99:ed:ea:df:6f:2f:cd:f3:81:61:af:11:91:d5:1d:90:82:ca:
88:e0:36:eb:49:c7:9d:d7:ed:cd:10:81:20:4c:df:f6:d3:5a:
04:b4:6c:08:6f:fa:97:e3:4d:09:f0:97:45:cb:0f:25:fe:c5:
ce:d0:d3:0f:78:86:cc:ea:87:d8:41:a0:5f:a1:1f:90:2f:c7:
70:76:52:fc:63:c8:6a:ed:10:01:b1:11:be:dd:bf:b2:95:50:
b2:a4:07:74:c0:95:d3:d7:f8:21:24:da:e6:8f:ee:00:ed:d4:
97:02:cd:14:01:0f:89:2a:7e:2e:15:2c:a3:6b:68:17:f9:e9:
e0:f8:4d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:03:07 2026 by rpki-client