Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier: BsVlXtLgETzl2K/172Hqmhsw+iXrEsE17CiI5lqBXvY=
Subject key identifier: E7:56:BC:DC:71:D6:B4:D7:17:17:F9:28:DB:B2:18:83:71:2A:87:91
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 019E1E35170093F4FAF5B73F41ADED900A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number: 11B9
Signing time: Tue 12 May 2026 22:00:56 +0000
Manifest this update: Tue 12 May 2026 22:00:56 +0000
Manifest next update: Wed 13 May 2026 22:00:56 +0000
Files and hashes: 1: MkSFILdBcvHxyl3ayJE96taLdHo.roa (hash: vPrRnOae6/b3XpWFwaeggOdaQgs7BaMzqFikId0Jk+4=)
2: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: MFPZbhV2rm9DX2RvwR1T5L0B/Ygfbmwe/tWIAqaSMvM=)
3: zeCeXRfPu2t3BPvUAm58rbcGNoI.roa (hash: JizEg6enjfFSyI5GkuML6Yj+9pecrYJP7cQWBwD0cBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:17:00:93:f4:fa:f5:b7:3f:41:ad:ed:90:0a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: May 12 22:00:56 2026 GMT
Not After : May 13 22:00:56 2026 GMT
Subject: CN=e756bcdc71d6b4d71717f928dbb21883712a8791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:64:87:d6:ff:5e:02:1a:04:26:ab:42:58:8d:
05:82:6c:bf:99:8e:c3:83:64:4c:fa:81:cf:a9:2b:
5f:02:a7:6b:27:10:d5:60:d1:d1:32:c5:5f:07:22:
46:61:a7:93:4a:d2:ea:f4:01:f8:db:70:95:fe:18:
95:db:59:2e:47:3d:eb:19:83:91:29:10:04:f4:34:
e1:78:9b:60:2d:24:58:08:a7:0d:43:9a:74:fd:1f:
1f:2b:8c:c3:58:bf:46:50:0a:21:9e:85:90:4b:c3:
6f:71:c3:25:5a:23:68:0c:22:dc:83:01:fa:41:ba:
db:09:a5:66:20:7d:54:85:16:f0:66:8f:16:f5:b9:
eb:e8:0d:3b:37:ac:73:ca:8e:4c:bd:e5:76:a6:f8:
8e:8f:65:fb:62:fa:9b:f3:28:55:9c:c5:26:85:00:
2e:bc:14:c5:0f:17:1a:56:70:3b:cb:9e:22:33:05:
10:28:9d:2d:b8:bb:a5:69:b0:7a:f0:27:a4:42:32:
43:2d:95:f9:32:19:d5:7a:0d:4d:f3:25:ed:4a:0a:
43:26:cd:cb:29:ce:ee:fd:70:13:7a:7f:46:ef:5b:
9a:eb:7b:a5:cf:82:63:9e:12:6d:11:a0:c1:84:82:
96:5a:c2:21:99:c2:22:45:03:95:46:d7:c8:b8:df:
f7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:56:BC:DC:71:D6:B4:D7:17:17:F9:28:DB:B2:18:83:71:2A:87:91
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:13:73:d2:47:34:fb:cb:8d:84:53:6f:0a:94:19:e8:51:27:
7d:78:d0:15:4c:f3:cc:8e:6c:fa:4e:ec:ee:fe:7a:b6:19:09:
cf:d5:9c:ac:e5:85:d7:c2:6e:50:17:af:c0:ce:80:42:cd:fa:
c6:f5:6a:bf:c1:06:5b:8f:18:be:c1:4e:e7:b0:89:63:c9:89:
51:7d:2e:8a:be:57:aa:7f:19:8f:c6:ab:63:47:98:90:b9:42:
67:68:e1:c9:43:a3:81:ee:7e:58:b2:46:c7:4a:30:1d:a8:dd:
2f:02:61:e4:e9:06:fe:af:fb:76:ef:6d:5f:2b:0d:a0:0f:34:
12:e7:22:33:b8:e6:d9:8b:4d:dd:aa:b0:c7:f3:21:1f:5d:cd:
1c:b5:8f:83:c9:cb:d3:e0:af:5a:02:7f:c2:f4:6f:c8:b5:19:
49:e3:58:57:1d:49:7b:6d:12:52:00:b0:0c:22:ed:2f:b7:8a:
86:bf:be:51:bf:6f:2b:d9:e6:ea:eb:74:ca:65:4e:a0:34:d4:
85:6b:e1:4a:4f:a2:dd:b7:e2:5b:52:ee:e1:56:0d:70:6b:cf:
f1:48:32:52:89:f2:db:7e:28:81:c7:0d:1e:57:2e:2a:0a:c3:
46:4f:44:fd:88:1c:ac:f0:10:c8:65:f9:0a:85:0a:a5:ce:98:
4b:47:37:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:20:57 2026 by rpki-client