Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier: 7KQvOqG7cll3FzWbEOCmLGenWDjznrDyQ2M003gte/I=
Subject key identifier: 61:90:EA:BD:DB:E9:14:16:0D:EC:A6:90:34:30:4B:9A:CD:68:D4:CA
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 019F90FF249D1233A443443E4C0E6AA90524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number: 1279
Signing time: Thu 23 Jul 2026 22:01:07 +0000
Manifest this update: Thu 23 Jul 2026 22:01:07 +0000
Manifest next update: Fri 24 Jul 2026 22:01:07 +0000
Files and hashes: 1: MkSFILdBcvHxyl3ayJE96taLdHo.roa (hash: vPrRnOae6/b3XpWFwaeggOdaQgs7BaMzqFikId0Jk+4=)
2: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: bQJWcxHDFikLavx9+99KE+Lzdj1jd7soKUNCInKWfoQ=)
3: zeCeXRfPu2t3BPvUAm58rbcGNoI.roa (hash: JizEg6enjfFSyI5GkuML6Yj+9pecrYJP7cQWBwD0cBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:24:9d:12:33:a4:43:44:3e:4c:0e:6a:a9:05:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Jul 23 22:01:07 2026 GMT
Not After : Jul 24 22:01:07 2026 GMT
Subject: CN=6190eabddbe914160deca69034304b9acd68d4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c7:ec:5f:19:4e:4e:c1:46:ad:5c:d5:1d:32:
eb:b0:c5:34:8d:d1:cc:4c:07:39:f6:1c:f8:55:bf:
b0:bb:49:ac:0f:86:c2:36:46:75:59:d3:82:94:53:
45:3e:c7:29:4f:4a:e4:68:ea:09:e0:5a:a9:e1:b2:
24:7b:02:4d:ec:32:37:be:63:ec:86:b0:97:fc:67:
13:cd:2d:3a:ea:3a:a1:4a:46:2d:b2:72:7d:c5:fe:
93:b3:56:fb:12:00:00:79:ab:c8:2b:ae:7e:1a:9f:
f8:4d:a0:58:72:36:bb:f8:39:5a:56:29:a4:96:8f:
05:fa:02:75:8e:d7:94:75:c6:41:d1:d3:f9:06:1c:
58:d6:86:91:35:6f:4c:67:f1:79:d0:3d:22:fa:0d:
b9:97:01:4a:eb:7f:56:86:03:5e:fa:ed:7a:bc:c0:
43:54:1a:43:46:d0:af:c4:40:04:c9:a4:ec:e4:02:
35:8d:86:2c:f9:30:46:34:4f:cb:36:cc:51:27:47:
95:35:12:91:53:d7:ae:35:1f:77:fc:d2:d9:8f:bf:
63:29:63:0a:d3:28:65:8b:e4:03:e8:34:60:db:e2:
db:ba:b2:ed:eb:e1:ca:84:68:8d:56:45:49:7b:c2:
20:8d:c5:96:8c:8f:7c:8f:df:c2:01:e8:82:c3:c6:
61:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:90:EA:BD:DB:E9:14:16:0D:EC:A6:90:34:30:4B:9A:CD:68:D4:CA
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9a:07:52:b2:24:dc:9d:6a:86:4c:56:69:ba:ca:5c:a9:64:
13:3a:b0:85:7e:95:15:d6:5d:0d:c8:aa:6f:5c:ed:fa:85:19:
e7:e5:25:fa:ee:60:a9:bd:38:08:70:c1:ec:13:3a:49:2d:54:
19:2e:ad:9d:20:43:e5:69:6c:01:c2:18:f5:a7:38:45:90:c1:
03:14:8a:9a:f8:b9:b1:b4:64:54:0d:fb:8e:8c:63:18:21:78:
42:6a:e9:6d:d0:28:89:a4:b4:68:41:d5:b4:31:dd:a7:2e:a9:
d0:80:26:09:4d:2b:85:b5:10:dc:cc:3f:27:7c:6e:41:a6:10:
62:ff:60:a6:29:c0:ae:5b:c2:91:e1:ab:65:bc:1a:23:f6:b6:
4f:db:e4:f8:34:89:89:4f:dd:53:7e:36:b8:61:34:94:03:8a:
4f:98:ab:d9:24:6e:46:e3:c0:d3:44:62:42:d3:5c:ab:85:ec:
0d:17:e6:c6:f5:a7:6f:60:7c:7a:72:32:d7:e1:2c:52:92:87:
05:b3:25:2e:a0:b5:5e:bd:94:66:90:38:29:07:92:6b:69:ae:
10:66:60:bf:90:de:b8:46:2d:75:e3:1a:fe:2b:18:d4:08:83:
d1:f1:04:a4:ff:ee:79:cf:80:0e:7e:fa:c4:b9:8e:ee:c3:ad:
21:47:3a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:20 2026 by rpki-client