Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File: vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier: tlbNb64oWN1O+I84maw6lw37Bb4ztXyMOHaNlOpsiqM=
Subject key identifier: 08:D0:BE:9B:DD:5C:0B:A6:E5:D9:9E:27:6D:1F:36:4C:6C:FC:76:C8
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 019D2583601675DFA19BEE4D2860525BB16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:00:59 +0000
Manifest this update: Wed 25 Mar 2026 15:00:59 +0000
Manifest next update: Thu 26 Mar 2026 15:00:59 +0000
Files and hashes: 1: _OTzMV2rChEKOe6EQENv97dsl1U.roa (hash: 7nL8A5gb8+P3YcITNFm2f0VLai2fLH11JBAUP9CV0/4=)
2: lTr_UVi_A79a3K8ej8EhTQ-s56o.asa (hash: Kis6ukaDSScAbBexiq/JiDaCOANQ9hpiW6hUa9xiV5s=)
3: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: TE6P5TTFidZ2Red/+7LiWfwQh78lRZc2dg9mUO8EjAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:60:16:75:df:a1:9b:ee:4d:28:60:52:5b:b1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: Mar 25 15:00:59 2026 GMT
Not After : Mar 26 15:00:59 2026 GMT
Subject: CN=08d0be9bdd5c0ba6e5d99e276d1f364c6cfc76c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:de:ef:eb:db:bc:5a:c1:2d:61:2f:93:17:
8a:ff:5b:4b:d3:0a:01:a4:a5:b8:4e:4a:0d:02:59:
9b:5a:66:ed:25:f2:0e:0b:2f:ee:3c:bf:6a:c7:a7:
3c:ba:66:2f:83:17:68:e4:2b:27:05:dd:31:ec:59:
f6:bc:b3:0b:cc:09:2a:6e:52:5e:e2:2c:bd:25:6e:
ce:bd:41:48:bf:42:41:ac:80:dc:91:99:49:58:e1:
6e:c7:34:10:c4:d8:82:72:cf:49:e8:ce:9d:05:f9:
38:32:f5:55:4c:8a:d3:61:7f:78:3e:9c:c2:8a:18:
52:ae:fd:ec:99:c6:a9:47:26:66:ee:b3:86:7d:9c:
3d:5b:44:c1:29:bf:c3:18:85:24:22:27:98:1b:f2:
ea:4c:a6:13:b4:7c:80:75:20:a0:72:d9:e3:82:36:
89:9e:0b:f0:a9:1c:a4:45:1f:6c:99:1b:67:09:6c:
43:9d:37:29:e8:0b:cc:9a:33:06:10:f4:ba:b9:0f:
01:ec:8b:b2:79:f6:69:0b:1a:12:2a:36:3f:82:79:
31:c5:f4:8e:9b:ee:9a:f0:03:10:23:ef:ff:f4:b0:
1a:8f:68:64:46:1c:77:95:06:6d:9c:67:54:f5:67:
07:f2:78:27:42:98:5a:bc:c9:a3:69:fb:1d:3a:c6:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D0:BE:9B:DD:5C:0B:A6:E5:D9:9E:27:6D:1F:36:4C:6C:FC:76:C8
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d8:c4:0f:38:c3:2c:23:3e:f5:f9:93:87:63:9e:28:b9:e5:
b0:6d:9c:4e:ab:66:fe:14:5b:98:31:1c:ea:14:52:2f:27:81:
39:09:49:23:04:32:52:25:5c:a0:d5:fc:c1:45:d7:9c:b2:5e:
c4:aa:b6:4a:07:39:b0:fc:5c:77:ac:8d:13:59:1b:0a:29:7f:
6d:47:8e:05:f0:b3:03:10:f7:92:ac:fc:bf:1b:b8:1d:e7:5e:
c0:9c:00:1d:90:cb:5b:21:e9:78:24:80:e9:95:47:3b:6b:5e:
67:0f:52:7c:2c:a5:2a:1e:d3:5d:ea:ab:f5:4a:6b:0e:bb:c4:
2d:86:4f:b7:d0:09:88:ec:16:91:c0:80:57:f9:f1:28:90:b8:
79:65:2b:1a:5e:66:3e:26:35:c7:d6:81:ff:4f:69:25:00:cf:
b2:ab:83:e1:77:17:78:c4:f2:42:d0:3a:96:e4:0f:4b:27:0b:
a5:bb:76:7c:69:53:4c:9f:9d:d7:71:04:82:b3:70:8d:94:ef:
e0:85:dc:2b:da:74:27:e8:4b:8c:b4:75:83:48:f8:96:74:ee:
14:c6:57:28:3a:69:b4:88:e3:89:fa:1d:0e:72:25:be:4e:e6:
dd:4e:b0:86:df:43:48:f9:eb:cd:a9:9f:5c:2c:59:5c:de:79:
55:69:52:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:46 2026 by rpki-client