Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier: wXWyqxo6tQztGeORRyUZkTuyzD01e8Sehwpcpx+XC1Q=
Subject key identifier: 44:82:40:38:1D:A2:65:B0:F7:87:90:F1:F8:A5:12:10:97:A5:DF:2A
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 019CAB6B43B04FCECE98EFAC0F24B0799109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number: 10F9
Signing time: Sun 01 Mar 2026 22:00:59 +0000
Manifest this update: Sun 01 Mar 2026 22:00:59 +0000
Manifest next update: Mon 02 Mar 2026 22:00:59 +0000
Files and hashes: 1: MkSFILdBcvHxyl3ayJE96taLdHo.roa (hash: vPrRnOae6/b3XpWFwaeggOdaQgs7BaMzqFikId0Jk+4=)
2: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: a3QVdKyow2Y5Mx8zYJZUUa7oU9GpcW1+ocM/SCE/4vY=)
3: zeCeXRfPu2t3BPvUAm58rbcGNoI.roa (hash: JizEg6enjfFSyI5GkuML6Yj+9pecrYJP7cQWBwD0cBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:43:b0:4f:ce:ce:98:ef:ac:0f:24:b0:79:91:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Mar 1 22:00:59 2026 GMT
Not After : Mar 2 22:00:59 2026 GMT
Subject: CN=448240381da265b0f78790f1f8a5121097a5df2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:4b:19:a5:40:f3:46:e4:77:0e:3c:90:fe:
f3:f6:4a:28:22:43:97:4b:45:9d:e6:b5:54:7a:bd:
16:f1:d3:97:4f:71:42:04:5d:18:8b:e8:d2:f1:f4:
91:a0:0d:67:ec:82:5a:9d:cf:14:07:15:fa:89:82:
18:ec:12:bc:e5:b6:d2:fb:1e:09:eb:74:23:75:b0:
12:03:06:eb:f4:23:96:9a:ba:ea:34:3c:55:2d:80:
ad:91:eb:1c:ce:1b:12:44:1b:55:a9:71:08:5b:b5:
78:7c:e2:e4:56:21:d4:22:1a:e1:fe:b4:8c:02:89:
2a:4a:58:35:cb:03:76:16:a2:c4:7e:fc:6f:9f:20:
7a:fa:65:8c:1f:da:5b:de:ea:98:cd:c7:d1:ce:e1:
7b:81:6e:c1:b0:b2:32:43:7d:a9:8a:34:52:11:89:
c5:07:cd:af:73:a4:f7:0d:bf:9d:4f:65:e1:e5:ce:
97:33:db:07:1c:e5:d9:01:92:ab:bc:d5:f1:eb:51:
3c:e0:cf:6b:1c:ac:d6:eb:fd:4a:07:1d:8b:fa:62:
c5:1b:e6:be:76:94:39:b5:d9:38:11:bf:fa:fb:b0:
f5:63:66:ab:b0:ec:e9:24:41:64:da:2a:10:24:88:
a2:4c:99:1e:c4:64:8c:5f:d6:a1:23:b5:d8:2f:06:
99:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:82:40:38:1D:A2:65:B0:F7:87:90:F1:F8:A5:12:10:97:A5:DF:2A
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2d:8e:12:54:27:6d:58:ac:1d:0c:3c:bc:3f:d7:a4:00:3b:
8e:d8:2a:a1:5b:4f:e6:56:5c:07:4b:57:4c:fc:91:4d:1f:c1:
bf:52:a0:5d:50:09:d6:d1:46:f6:8f:8c:32:92:6b:ef:16:94:
20:10:91:59:f6:2b:62:61:84:51:6d:14:cc:3f:e2:f9:23:fd:
8a:1b:c2:02:ce:22:94:c7:38:ef:12:c8:69:c5:39:d0:fd:69:
16:81:32:f4:93:71:b0:42:83:c8:e6:21:12:82:5a:25:3e:d3:
83:cc:f8:50:d5:b2:c3:0c:f4:77:b2:89:f1:4f:31:c3:8d:a5:
e5:9f:79:64:58:07:fe:b2:5b:a5:d2:6c:37:44:78:5e:01:ae:
22:61:cb:cb:67:f9:ca:92:a5:0d:fa:bc:d7:6b:41:e8:46:ef:
56:e7:53:b6:13:43:89:89:4a:1f:93:cb:d9:57:ce:e1:b5:e8:
3b:4a:69:7e:22:4b:b9:52:7e:eb:3f:a5:ce:04:1d:6f:55:15:
48:ef:c2:67:7c:b0:2f:94:db:5c:dd:10:53:b5:b3:b8:5c:24:
76:ae:64:bb:34:6a:96:bb:c7:81:7d:5b:34:df:bb:1d:88:6b:
a4:e6:b5:8e:8c:ec:c8:ca:f0:d3:11:ed:bc:94:00:11:63:93:
8b:63:9f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:54:28 2026 by rpki-client