Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier: j0kcnd5P+KUSaazAr+I9qzn2yv7U3BbRtonpD44ZQ5U=
Subject key identifier: 8B:A5:89:A1:8C:4E:22:62:D0:80:95:E2:9F:9D:B9:C5:43:6A:19:39
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 01A0E2F4EDB4B8AD7923C833D8EED73E2D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number: 1328
Signing time: Sun 27 Sep 2026 13:01:37 +0000
Manifest this update: Sun 27 Sep 2026 13:01:37 +0000
Manifest next update: Mon 28 Sep 2026 13:01:37 +0000
Files and hashes: 1: MkSFILdBcvHxyl3ayJE96taLdHo.roa (hash: vPrRnOae6/b3XpWFwaeggOdaQgs7BaMzqFikId0Jk+4=)
2: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: HKa64Ag5XdxBW4u1QjCMArCm775StzmLtDe508QOi+Y=)
3: zeCeXRfPu2t3BPvUAm58rbcGNoI.roa (hash: JizEg6enjfFSyI5GkuML6Yj+9pecrYJP7cQWBwD0cBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f4:ed:b4:b8:ad:79:23:c8:33:d8:ee:d7:3e:2d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Sep 27 13:01:37 2026 GMT
Not After : Sep 28 13:01:37 2026 GMT
Subject: CN=8ba589a18c4e2262d08095e29f9db9c5436a1939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:92:44:f2:b7:08:c6:a0:22:b7:38:8b:ad:56:
83:e7:05:44:91:d6:e4:fd:ac:84:4d:9e:82:91:1c:
50:b8:9c:9b:d1:b8:82:c6:7c:cc:77:0b:cc:f1:a5:
c0:d0:63:14:e8:f3:11:e7:9a:4e:c5:38:09:39:70:
ff:aa:0f:02:63:72:ac:a6:07:b3:ff:d6:f0:43:22:
6d:63:a9:72:03:39:e7:89:7e:fb:ce:ed:47:a2:90:
31:14:ee:21:2c:0b:58:2d:e3:db:7a:e5:c6:65:67:
e5:c0:48:6d:93:9c:99:d4:09:a3:b7:73:cd:f6:62:
3b:4f:bd:fe:92:a7:e2:68:d9:5c:4e:ee:04:fd:95:
b3:d5:c0:e9:5a:f4:b6:4f:a2:fc:7a:ce:f6:9a:89:
47:29:02:27:ad:31:10:fb:bc:4c:d2:17:c1:65:4a:
6b:46:b0:b3:3c:0e:d2:9f:70:bf:4d:3e:7a:4a:9a:
2a:5d:c2:0e:1c:a0:dd:a8:a8:c6:1b:71:aa:cf:ef:
ac:ef:b3:ea:be:12:2f:90:ee:5e:ac:14:ea:7c:61:
52:3c:c4:bb:af:4a:7e:00:16:7b:6c:59:96:20:3f:
1a:02:a0:54:57:cb:60:1e:c8:61:ff:24:e8:6d:2e:
c9:09:a5:81:09:62:05:1d:89:d9:23:d9:4a:3b:43:
d8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A5:89:A1:8C:4E:22:62:D0:80:95:E2:9F:9D:B9:C5:43:6A:19:39
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ec:36:4c:a5:69:b6:73:fa:b0:e3:94:9e:f0:6c:4f:05:6a:
2c:6f:9a:e4:99:81:f9:ff:e3:a2:b0:1b:db:b2:7b:0a:36:7b:
14:48:3b:08:9f:3f:d1:9c:ec:2b:65:0f:a7:ab:12:0b:3d:f4:
6d:03:95:76:fb:53:fa:c1:72:8f:f3:8d:80:f9:4a:c9:05:71:
00:2e:2f:59:85:3a:4e:eb:a6:51:13:1c:eb:5d:21:9c:33:c8:
85:90:60:02:bf:0f:85:ac:ea:c8:8c:a0:15:fb:ed:c8:82:be:
8c:22:3e:4f:42:f5:af:9f:2f:62:ca:b9:97:ed:4f:67:66:78:
59:be:b8:41:42:f5:f5:89:70:a1:18:05:0d:21:bc:eb:84:ac:
7d:0d:9d:7a:28:e9:e0:97:1f:67:8e:9c:28:ea:f9:76:e2:ca:
e8:fb:b3:f9:7a:7a:97:91:9e:e4:bc:e8:07:6b:11:1e:9d:b1:
6d:e7:4d:64:a0:12:4c:79:d2:85:b4:cc:81:75:ce:df:8f:1a:
a3:1e:7c:ca:fb:96:5f:30:8d:ab:b8:b3:9b:58:bd:9e:1a:f8:
e6:77:1c:10:0b:40:3c:0e:4d:34:f4:45:b5:e9:0d:74:91:d3:
d1:eb:39:de:fe:75:a3:12:43:7e:8a:d0:db:6e:82:27:14:99:
a6:90:76:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:32:39 2026 by rpki-client