Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier: 2C3RHlHNxR5tyjDiw80zfhpFjLXDFNRJuZSCrGPRfSY=
Subject key identifier: 38:D2:C0:55:44:33:E7:0C:96:C7:91:87:ED:AB:82:6D:3B:C4:27:10
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 019D9AE3146EE2D00784D84648EAA7C5BAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number: 1175
Signing time: Fri 17 Apr 2026 10:01:06 +0000
Manifest this update: Fri 17 Apr 2026 10:01:06 +0000
Manifest next update: Sat 18 Apr 2026 10:01:06 +0000
Files and hashes: 1: MkSFILdBcvHxyl3ayJE96taLdHo.roa (hash: vPrRnOae6/b3XpWFwaeggOdaQgs7BaMzqFikId0Jk+4=)
2: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: qlVZwYznNcVc1wdFVzLbsaYLLM6sfptvDiFu58zIu6w=)
3: zeCeXRfPu2t3BPvUAm58rbcGNoI.roa (hash: JizEg6enjfFSyI5GkuML6Yj+9pecrYJP7cQWBwD0cBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:14:6e:e2:d0:07:84:d8:46:48:ea:a7:c5:ba:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Apr 17 10:01:06 2026 GMT
Not After : Apr 18 10:01:06 2026 GMT
Subject: CN=38d2c0554433e70c96c79187edab826d3bc42710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9e:e2:79:46:41:41:4d:6b:9a:4c:49:d0:b4:
c9:34:d6:8d:40:9d:63:85:7e:8c:fd:14:86:7b:a4:
11:4f:57:1f:aa:5c:b8:79:d7:bb:37:5f:c1:b6:2c:
92:b5:82:e3:bc:ca:78:fc:fc:6a:0a:84:9f:70:ba:
30:ee:e1:f9:7a:e3:a8:e8:6f:69:d1:be:bd:b2:77:
2b:90:41:19:b4:d3:e0:f6:9a:94:f4:59:39:c5:1d:
db:83:0c:33:a6:21:d7:5e:c9:97:e4:56:c2:da:85:
d3:39:08:48:27:e0:42:1c:51:8a:4b:2a:f2:7d:b3:
6d:1d:f6:55:64:d3:23:77:be:7a:e7:66:ef:0c:07:
95:18:f2:ca:4d:0d:a4:7a:5e:21:fc:83:de:52:3d:
38:8b:2c:c5:3c:be:fd:eb:55:bc:d2:01:9f:5e:e4:
08:15:b8:74:36:72:2c:47:f6:b7:df:df:fa:b9:3f:
ed:70:a0:d7:8e:26:ad:5e:e4:8c:1e:5a:13:e5:f5:
0f:e5:1d:aa:54:1f:a4:3c:69:18:19:5c:5a:2c:4b:
45:2f:13:0a:5f:a3:8b:79:36:63:7d:cf:25:a8:3d:
a9:9e:02:70:cc:21:be:ed:5f:75:8c:fe:d2:44:a0:
11:f8:a3:7b:b4:e4:c6:fd:5c:fb:71:b7:f1:40:b8:
70:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D2:C0:55:44:33:E7:0C:96:C7:91:87:ED:AB:82:6D:3B:C4:27:10
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:f2:5c:3b:59:cb:82:f5:18:d1:dc:9b:40:cc:ac:00:96:a4:
b5:6f:0f:d5:ba:be:5d:a2:f0:15:4f:a0:09:6b:4e:fd:bc:cb:
8d:40:cf:e5:b5:7d:ae:dd:a1:60:30:11:34:9b:47:8b:74:02:
5d:04:c0:a1:80:04:85:6d:be:a2:e7:3a:f8:95:bd:6a:6f:bd:
df:1e:98:da:03:2c:ed:5e:e7:fa:aa:0b:b5:56:3d:2b:6c:d1:
7a:c2:8d:30:98:00:9f:d9:dd:b9:c8:20:2d:46:fa:96:bb:65:
b8:fd:8d:cf:54:99:26:62:72:0d:52:2f:95:3d:ff:7e:83:05:
f7:2d:46:6e:5f:60:b1:12:1c:37:5c:ab:bc:60:08:c0:fb:e2:
e9:24:13:da:ba:8d:ea:fd:4f:e3:80:f6:77:77:63:be:8d:e0:
2a:6b:d9:c4:d7:a7:d5:87:0c:bf:11:02:4c:ad:c1:d7:5a:65:
e0:c6:2d:91:99:f6:de:4f:38:6f:ee:dd:9d:60:dd:16:7a:9b:
40:0b:8f:2e:37:c9:d0:8b:df:ee:d2:08:52:c3:b6:e4:ae:91:
af:0a:c3:7c:3d:9f:52:30:8e:68:58:e5:d7:be:8f:77:cb:66:
ba:fa:66:aa:a2:ab:ff:39:fc:33:46:1f:fe:ca:61:5e:f7:db:
28:ac:e0:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4xRu4tAHhNhGSOqnxbqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDBiM2MyYmU3ODM1ZDdiMzdiNTgyNjEwMmY4NzQ2YTUx
OTlkNDkwHhcNMjYwNDE3MTAwMTA2WhcNMjYwNDE4MTAwMTA2WjAzMTEwLwYDVQQD
EygzOGQyYzA1NTQ0MzNlNzBjOTZjNzkxODdlZGFiODI2ZDNiYzQyNzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ7ieUZBQU1rmkxJ0LTJNNaNQJ1j
hX6M/RSGe6QRT1cfqly4ede7N1/BtiyStYLjvMp4/PxqCoSfcLow7uH5euOo6G9p
0b69sncrkEEZtNPg9pqU9Fk5xR3bgwwzpiHXXsmX5FbC2oXTOQhIJ+BCHFGKSyry
fbNtHfZVZNMjd75652bvDAeVGPLKTQ2kel4h/IPeUj04iyzFPL7961W80gGfXuQI
Fbh0NnIsR/a339/6uT/tcKDXjiatXuSMHloT5fUP5R2qVB+kPGkYGVxaLEtFLxMK
X6OLeTZjfc8lqD2pngJwzCG+7V91jP7SRKAR+KN7tOTG/Vz7cbfxQLhwGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjSwFVEM+cMlseRh+2rgm07xCcQMB8GA1UdIwQY
MBaAFL5As8K+eDXXs3tYJhAvh0alGZ1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNzE2MzYtZWRkOC00ZDExLTg1ZTgt
YjgzNGZhZjZhY2VkLzEvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jNzE2MzYtZWRkOC00ZDExLTg1ZTgtYjgzNGZhZjZhY2Vk
LzEvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4vJcO1nL
gvUY0dybQMysAJaktW8P1bq+XaLwFU+gCWtO/bzLjUDP5bV9rt2hYDARNJtHi3QC
XQTAoYAEhW2+ouc6+JW9am+93x6Y2gMs7V7n+qoLtVY9K2zResKNMJgAn9nducgg
LUb6lrtluP2Nz1SZJmJyDVIvlT3/foMF9y1Gbl9gsRIcN1yrvGAIwPvi6SQT2rqN
6v1P44D2d3djvo3gKmvZxNen1YcMvxECTK3B11pl4MYtkZn23k84b+7dnWDdFnqb
QAuPLjfJ0Ivf7tIIUsO25K6RrwrDfD2fUjCOaFjl176Pd8tmuvpmqqKr/zn8M0Yf
/sphXvfbKKzgxw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:15:13 2026 by rpki-client