Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier: 8KIKMzFtMmC7Y0fn6KjThUTBNaatqONiF2KEsg/cHPY=
Subject key identifier: 32:1E:AE:36:90:7B:23:FF:5C:45:F7:F5:F3:1A:9E:18:8B:D2:44:32
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 01A0D94D334DB1BB2CD07BB015B90CAFA58E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number: 1323
Signing time: Fri 25 Sep 2026 16:01:50 +0000
Manifest this update: Fri 25 Sep 2026 16:01:50 +0000
Manifest next update: Sat 26 Sep 2026 16:01:50 +0000
Files and hashes: 1: MkSFILdBcvHxyl3ayJE96taLdHo.roa (hash: vPrRnOae6/b3XpWFwaeggOdaQgs7BaMzqFikId0Jk+4=)
2: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: bG8irblU5+q3mhhA+2vVULOrG5h3thADoBQulM4olmc=)
3: zeCeXRfPu2t3BPvUAm58rbcGNoI.roa (hash: JizEg6enjfFSyI5GkuML6Yj+9pecrYJP7cQWBwD0cBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:33:4d:b1:bb:2c:d0:7b:b0:15:b9:0c:af:a5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Sep 25 16:01:50 2026 GMT
Not After : Sep 26 16:01:50 2026 GMT
Subject: CN=321eae36907b23ff5c45f7f5f31a9e188bd24432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:e8:da:51:30:b7:d1:81:c3:93:2d:1f:5b:
d6:34:5c:b6:bb:71:f2:e8:6c:ff:6a:0c:d0:d9:1c:
5c:0d:80:d4:af:80:3a:67:15:6a:5c:6f:3f:15:d3:
ed:37:13:4c:32:dc:2f:5c:5f:16:b3:51:52:3b:e7:
b5:fe:05:09:ef:39:3a:65:83:a2:bc:43:46:69:bb:
a6:a8:06:42:6e:3f:5b:92:4b:e5:52:c6:64:79:67:
05:be:13:73:a6:71:8e:ee:4d:32:be:cc:6f:ba:38:
24:d3:b8:6f:bf:1b:41:9c:14:f7:c0:3f:c1:0c:21:
95:a4:c5:35:71:88:f5:45:f9:54:b3:21:91:bb:74:
35:27:83:34:7e:c8:6a:10:5f:f0:40:43:78:bb:a2:
ed:a1:35:b3:d3:ce:ad:3c:ea:72:74:73:6e:36:b3:
9b:04:89:d7:bb:8d:d9:67:e8:27:66:d7:3b:96:2a:
82:2a:48:58:c5:6f:3f:c8:8c:c7:bf:e2:32:95:10:
1c:38:63:5d:27:22:f5:64:db:a8:48:18:2a:f6:e6:
e0:76:b7:29:b5:79:b9:45:48:e3:95:dd:97:4b:fd:
ef:45:63:73:46:74:f6:02:7d:dd:45:07:e0:3f:73:
99:6e:8a:94:68:96:a6:89:27:fd:a2:24:79:9a:9b:
da:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1E:AE:36:90:7B:23:FF:5C:45:F7:F5:F3:1A:9E:18:8B:D2:44:32
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c0:24:ca:87:af:65:0e:58:a4:03:dd:71:60:4c:70:14:e1:
c1:fb:d9:a5:8b:84:d1:1d:aa:f9:c3:85:3e:48:00:fe:b7:79:
e3:1a:23:8c:f9:52:82:8a:f1:e0:9b:f7:ed:f3:6d:a9:70:8d:
85:11:88:65:11:87:28:8d:b3:59:bb:0b:c9:aa:0a:9c:64:c1:
38:1d:f6:5e:7e:57:44:91:71:25:84:fa:14:72:aa:81:7f:be:
b2:87:fd:60:90:ad:84:25:30:75:62:0f:61:97:9e:d1:8d:d6:
48:09:aa:bd:13:af:6d:1d:c3:2b:78:a2:f4:02:9b:02:9e:a5:
0a:02:30:49:83:8c:ea:fb:50:ef:6f:38:c5:ee:ac:f2:66:5d:
bb:21:39:c6:4d:f8:81:6b:c8:93:87:ea:fb:04:5e:e9:ea:8d:
e9:7d:98:fb:b9:28:5b:05:bc:6b:e1:96:22:48:ef:e7:43:b7:
47:71:52:85:34:38:61:e6:09:c1:89:7c:06:36:d8:0c:d9:8b:
9a:7d:85:85:6f:ed:96:8c:b9:20:7a:1a:b5:cd:60:49:97:12:
4d:1b:23:5c:a6:cf:e6:b7:4a:a6:eb:ac:2a:ed:b2:1f:64:eb:
a2:d7:2c:c2:d6:d7:9a:ec:e9:b7:95:d3:ed:14:90:a9:6f:13:
27:d0:da:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:49:23 2026 by rpki-client