Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File: vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier: jwbkaeZb3wzRIyZRxU8GhTijugOWMLGFuk2jd5J/aOA=
Subject key identifier: 19:7C:2B:17:5A:A0:F7:F7:40:66:E1:8C:6D:D3:4F:54:8C:6F:32:DB
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 019D9B5163B48274ED4796D7EEACD583C162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 12:01:35 +0000
Manifest this update: Fri 17 Apr 2026 12:01:35 +0000
Manifest next update: Sat 18 Apr 2026 12:01:35 +0000
Files and hashes: 1: _OTzMV2rChEKOe6EQENv97dsl1U.roa (hash: 7nL8A5gb8+P3YcITNFm2f0VLai2fLH11JBAUP9CV0/4=)
2: lTr_UVi_A79a3K8ej8EhTQ-s56o.asa (hash: Kis6ukaDSScAbBexiq/JiDaCOANQ9hpiW6hUa9xiV5s=)
3: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: maeAZqdUKX+asBqoWZNpgCnNDvhWxxefCxfJPIUqMF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:63:b4:82:74:ed:47:96:d7:ee:ac:d5:83:c1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: Apr 17 12:01:35 2026 GMT
Not After : Apr 18 12:01:35 2026 GMT
Subject: CN=197c2b175aa0f7f74066e18c6dd34f548c6f32db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:52:14:6b:60:10:c9:2b:22:68:12:c5:89:85:
70:59:d2:4f:1d:97:10:27:ef:52:83:1f:94:8e:54:
0d:9a:f7:41:41:a4:65:8b:ea:5b:01:6a:d1:54:3a:
26:b1:cc:39:bf:58:da:92:ee:86:1d:a9:56:7f:f5:
5e:e0:73:3c:10:50:c3:92:a3:d9:78:31:94:bc:4c:
32:5d:62:ee:cd:1b:10:46:ea:65:60:a6:7f:86:10:
79:65:98:18:55:36:52:32:4f:c8:f9:c9:2a:08:08:
ea:6d:e2:8f:ef:f3:7a:5e:ef:eb:7a:30:a1:b8:a3:
af:31:21:5e:8d:34:75:4d:69:1c:cf:7c:de:00:6d:
97:48:51:f8:08:8d:fd:ec:b0:69:49:fd:5b:6a:6c:
49:3b:db:2f:f4:78:98:14:13:77:2f:8c:20:0d:d5:
13:56:46:d4:e1:fd:be:4e:7b:4a:c3:73:51:b8:17:
51:6e:6d:3e:e6:f4:05:0c:62:bd:12:08:96:37:17:
06:d6:28:a3:e9:a3:1a:42:4f:02:fe:6d:83:8f:ae:
7b:51:bb:5a:c0:92:3f:b2:5e:66:48:a9:6f:40:17:
8e:84:b6:a4:19:8a:08:11:0e:72:ef:92:8d:03:42:
c3:86:80:0a:dc:27:44:74:8d:76:2b:3a:4f:35:8c:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7C:2B:17:5A:A0:F7:F7:40:66:E1:8C:6D:D3:4F:54:8C:6F:32:DB
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1a:9c:25:c2:41:90:15:3b:f4:dc:22:f5:d4:30:b0:9a:89:
f6:d3:40:6b:78:43:aa:6b:22:1d:fc:53:ef:34:df:6a:c1:68:
0b:f2:8e:af:0b:b3:37:0e:56:34:5d:31:6c:4d:ec:c9:b5:97:
9b:a3:4c:4d:a0:78:c2:b7:7f:43:7e:7a:5c:b5:5d:19:6a:85:
01:7c:46:75:c9:6d:83:00:ed:fd:a5:cd:f9:cb:ff:2c:9e:aa:
18:1d:31:1a:a4:fe:22:4b:2f:37:df:63:77:64:54:d9:90:50:
03:29:b0:10:31:bc:cc:dc:c3:e9:15:35:6c:70:2b:86:d8:7e:
03:a1:cf:4a:f5:b6:c4:3f:3f:7a:92:f3:64:9d:44:ed:d4:45:
6f:a1:96:34:0d:35:94:2d:53:74:4e:56:39:a5:15:7c:e7:06:
d0:51:6c:98:50:0f:05:67:83:11:cb:be:75:7b:93:00:d4:bc:
9a:98:4c:1d:92:fb:55:7b:db:08:30:fe:64:3f:97:a1:2c:f0:
63:d9:15:3d:9b:11:39:ce:1a:05:30:a4:55:32:d9:1f:34:85:
33:64:f9:40:22:b8:bd:b4:41:75:9a:fd:77:50:34:2c:44:59:
1f:ad:23:b1:0a:dd:93:68:0b:4b:0a:95:2c:8b:e5:f7:e2:6d:
2c:c3:a2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:51:11 2026 by rpki-client