Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File: vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier: sFVLJjQjGv65vJdI1Ik2x/eTeE33bkFG46UwotVndiI=
Subject key identifier: 39:18:97:80:9C:C6:D2:B8:DF:58:46:CC:E9:7C:21:8A:30:9D:B6:E5
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 019F8FB523A709DDD1AF84BCFA790647EE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 16:00:40 +0000
Manifest this update: Thu 23 Jul 2026 16:00:40 +0000
Manifest next update: Fri 24 Jul 2026 16:00:40 +0000
Files and hashes: 1: ElvcpU3TMsmMMwxmUDpBI9j8a-U.asa (hash: pMbfMn8GoeeG6ylSUjS62TeRwsoRtXBNLz07ylZ0fpc=)
2: o3neLyji5IioxyX3Ca35svHR-7M.roa (hash: hvV86OxH4a8ZTKhcyjTKk6ffNETXTnUcBs1BRqExbys=)
3: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: NN7XLOtRVlQbRdtYq7CJbdurr55LGT1A0lCXftFEAdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:23:a7:09:dd:d1:af:84:bc:fa:79:06:47:ee:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: Jul 23 16:00:40 2026 GMT
Not After : Jul 24 16:00:40 2026 GMT
Subject: CN=391897809cc6d2b8df5846cce97c218a309db6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:28:b5:ea:2c:0c:28:93:0d:0f:1b:17:6b:
3a:e7:87:f7:73:b3:ed:bc:78:ef:8d:0c:52:d9:3a:
c1:f5:7b:5e:25:d6:7e:2c:79:e1:63:5d:90:cf:ab:
83:fe:e4:42:a8:75:88:f2:65:63:19:26:a8:85:b0:
4d:77:cd:2a:6d:aa:27:07:7c:0a:16:62:21:fb:29:
c2:5e:0f:32:0e:45:80:58:6d:c4:2d:36:4f:6f:1e:
ed:f2:4e:00:15:3e:8a:3a:5f:ff:84:0b:8f:2a:81:
bc:80:ea:44:c0:d7:c4:1e:1b:a2:43:80:3b:43:5e:
fe:43:c3:b3:5c:a5:25:4a:29:74:6d:cc:37:2f:55:
c7:75:6d:fa:c6:d6:67:cd:f7:80:11:45:9e:94:3b:
75:91:91:a7:27:a4:28:b6:74:48:fe:60:d5:f2:ca:
20:7d:50:bf:0c:f2:a1:3c:aa:19:78:ac:0a:b9:01:
ae:04:44:b5:80:2d:53:c6:0b:1b:13:d1:13:e1:bd:
2d:da:b9:2e:e3:fa:da:de:31:91:27:f4:a1:08:54:
75:fd:c3:9b:5e:e7:cd:26:af:6d:90:db:25:f4:54:
d1:be:f4:66:73:5e:bc:fc:30:dd:3b:d2:4c:2c:90:
80:1a:49:eb:cc:ac:18:15:74:0b:f8:b4:5b:98:5f:
e3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:18:97:80:9C:C6:D2:B8:DF:58:46:CC:E9:7C:21:8A:30:9D:B6:E5
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:56:8a:85:13:69:5a:ea:29:c9:5f:5d:b1:0e:eb:7c:11:fc:
65:b7:c8:e4:64:5a:f8:ed:1c:69:3d:3d:4c:32:ef:a5:e5:12:
0d:1c:99:a9:27:9c:2c:52:61:6a:ba:2c:d8:73:70:e5:e5:08:
77:f1:9d:c3:58:82:8b:d0:d3:ed:4a:ad:1c:96:d5:f7:f7:3d:
1a:fd:9f:28:c6:0a:59:92:75:6f:6f:66:88:b3:73:4e:b8:4f:
6f:e2:9f:34:15:be:d6:be:ac:25:b7:95:b6:c9:ac:5a:32:75:
1b:95:fe:55:23:b3:c2:9c:8f:24:78:41:d1:81:2d:d7:41:8b:
59:e8:07:3a:6a:d4:e2:66:7f:ec:1b:9e:40:27:3f:78:41:80:
fb:56:91:38:bc:65:11:c1:b2:18:65:9a:91:18:db:1d:fc:14:
fe:34:24:df:86:40:98:13:9b:21:6a:13:a1:38:02:57:e0:80:
ca:a6:43:d2:e7:fe:bc:dc:98:78:1d:d2:0a:aa:c1:85:9d:ec:
f9:5e:43:10:08:3e:2e:74:89:14:f8:c1:3c:c1:7d:d6:65:ae:
0e:ab:34:0f:97:06:4d:9f:e8:f7:08:26:7d:77:96:51:d9:a8:
c4:b5:6a:dd:db:bb:60:a8:5d:40:c0:95:27:20:0a:8c:1d:5d:
eb:5c:3d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:25 2026 by rpki-client