Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier: quU+STE879Nx7jyzxhVPF2/95/pSJIQDFIcRC1/a39U=
Subject key identifier: F0:BD:89:D4:1D:A7:4C:59:51:3D:5C:03:0D:9F:E6:E4:B1:A7:4C:D8
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 019D2704795FCBDA83229CB1634901B5DD43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number: 1139
Signing time: Wed 25 Mar 2026 22:01:37 +0000
Manifest this update: Wed 25 Mar 2026 22:01:37 +0000
Manifest next update: Thu 26 Mar 2026 22:01:37 +0000
Files and hashes: 1: MkSFILdBcvHxyl3ayJE96taLdHo.roa (hash: vPrRnOae6/b3XpWFwaeggOdaQgs7BaMzqFikId0Jk+4=)
2: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: VP7F5pGXI+UJKtqE6e+UW+8t6dp58/Vm0evBbBrIlPE=)
3: zeCeXRfPu2t3BPvUAm58rbcGNoI.roa (hash: JizEg6enjfFSyI5GkuML6Yj+9pecrYJP7cQWBwD0cBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:79:5f:cb:da:83:22:9c:b1:63:49:01:b5:dd:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Mar 25 22:01:37 2026 GMT
Not After : Mar 26 22:01:37 2026 GMT
Subject: CN=f0bd89d41da74c59513d5c030d9fe6e4b1a74cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:92:38:31:aa:f8:08:15:c2:39:8e:26:22:3b:
2b:ca:6b:33:db:ec:de:b1:85:55:c1:46:d5:30:28:
8a:27:84:af:27:7f:89:a6:2c:be:df:8a:8c:4f:c7:
4e:7e:9c:d2:d5:3c:f2:8e:b6:2a:49:7e:58:fa:90:
10:7b:ca:19:c7:a3:6f:a1:fb:1b:ef:87:f9:d9:1d:
8e:a1:f8:12:65:b4:64:fb:0e:90:84:09:95:8d:b7:
69:48:8f:31:37:46:af:4d:6c:5e:21:14:2c:2d:e1:
29:97:67:c1:a2:cc:da:c4:4c:a3:74:35:40:36:38:
bd:d4:5a:d1:f1:de:86:4c:e3:11:47:7d:f4:85:60:
65:b6:3e:2a:b3:f0:63:dd:e8:a9:09:77:a5:28:6e:
d7:49:a2:bf:95:e5:26:b5:79:59:9a:30:04:8e:6e:
10:03:64:df:73:03:09:fa:51:74:06:f5:06:20:79:
34:d3:7d:df:74:02:51:35:6c:ca:f4:f5:00:48:aa:
18:fc:8f:5a:75:6d:f2:6b:01:41:cd:9c:93:84:92:
e6:1f:25:af:a8:41:e1:43:16:ca:bb:ae:cc:6b:48:
cf:14:25:2d:10:5e:08:72:c8:26:53:35:f9:2d:b8:
99:d5:6c:d6:08:2c:3c:e2:1f:ab:a6:93:61:81:41:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BD:89:D4:1D:A7:4C:59:51:3D:5C:03:0D:9F:E6:E4:B1:A7:4C:D8
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:95:1a:6e:a9:b0:2b:ec:d3:b7:bd:e7:fb:1d:d2:76:8f:29:
45:24:fb:b4:8d:43:42:fc:b6:57:23:e3:94:66:a1:69:6a:5d:
1a:5a:ef:56:eb:9c:58:45:e2:ff:13:bd:2d:cd:13:cf:8d:60:
54:37:7f:58:0b:9d:21:42:85:a6:fd:22:95:28:c6:68:54:56:
24:00:85:fa:df:ba:8b:ab:3e:b4:c6:98:96:66:2b:2f:38:a7:
30:19:e0:01:33:81:6c:d2:bd:55:c9:bd:7d:49:77:98:32:44:
34:ae:c6:38:3e:66:1e:f6:52:c9:ed:85:c9:29:08:15:5d:8b:
e6:19:04:a6:29:a6:58:da:15:8f:c5:67:d4:1f:df:ac:97:5d:
d6:1f:4d:55:66:1e:0c:02:d5:f8:ee:05:f7:f3:1b:ad:60:28:
f9:75:7a:e9:fe:bc:97:43:da:95:3a:fb:0f:41:3e:78:2d:4d:
cd:ba:3e:dd:8e:1d:dd:01:ef:89:93:33:a9:45:59:3f:47:62:
cf:36:fd:74:d6:08:c5:78:08:7e:f2:e9:16:2d:5c:9e:fd:8d:
83:61:b0:4b:78:f8:3f:c9:0a:7b:ab:1a:6a:14:4b:a7:fc:8a:
a1:db:15:fd:37:e4:c7:33:11:21:e8:0e:5a:a1:a9:d8:d2:83:
ec:95:f4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:28 2026 by rpki-client