Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier: Uu7smmI9fw6vRhNkMsYqacqYaYRVobidUUozOQ+pWmk=
Subject key identifier: 08:FF:81:71:F2:76:05:0C:59:96:1D:62:C4:40:C6:9C:D0:06:24:33
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 019EC06DF9DB8DAB9E99C0D089F3BDBB1E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number: 120D
Signing time: Sat 13 Jun 2026 10:01:33 +0000
Manifest this update: Sat 13 Jun 2026 10:01:33 +0000
Manifest next update: Sun 14 Jun 2026 10:01:33 +0000
Files and hashes: 1: MkSFILdBcvHxyl3ayJE96taLdHo.roa (hash: vPrRnOae6/b3XpWFwaeggOdaQgs7BaMzqFikId0Jk+4=)
2: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: Msm1goXS4ub07JBpa5v/MA9Rnf+SNg6iCNg4+PTyups=)
3: zeCeXRfPu2t3BPvUAm58rbcGNoI.roa (hash: JizEg6enjfFSyI5GkuML6Yj+9pecrYJP7cQWBwD0cBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:f9:db:8d:ab:9e:99:c0:d0:89:f3:bd:bb:1e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Jun 13 10:01:33 2026 GMT
Not After : Jun 14 10:01:33 2026 GMT
Subject: CN=08ff8171f276050c59961d62c440c69cd0062433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:36:e4:d6:a2:8d:3c:4a:18:1f:f7:a9:63:15:
1a:ed:88:a7:bf:df:a9:de:92:4d:2e:c8:b0:38:e6:
3e:e4:f3:67:1e:4e:3b:10:c5:aa:cb:9d:19:41:1a:
70:c8:1f:4e:5f:b0:af:15:2c:cf:93:ed:2d:2e:1c:
15:12:88:28:64:91:b2:ea:9d:6c:8f:a0:46:f7:ff:
18:8f:e7:b4:97:b5:63:26:2e:5a:d3:2b:15:c7:12:
bf:0c:d7:62:54:44:07:83:3b:a8:fb:cb:f8:30:0c:
ae:6b:d1:53:36:5c:8e:77:e8:7d:cf:72:a6:b7:35:
1b:0b:f1:b1:c0:77:66:e8:f6:11:36:ee:dc:39:8e:
78:df:f6:47:a4:dc:0a:3a:e0:8d:0d:4b:eb:9c:db:
6f:4d:09:ea:32:c4:dc:4c:2b:f0:8a:c2:b5:3c:aa:
4f:d4:db:61:16:c5:43:73:f6:7e:c5:2c:62:19:1c:
ec:5e:b7:c7:c9:bf:94:f0:00:fc:72:29:7f:73:87:
12:ea:5e:46:49:e0:89:ed:63:65:5a:99:a6:9c:76:
eb:02:a1:c7:2c:b2:53:6f:96:5d:91:3b:52:73:ed:
af:6d:3f:81:ab:0d:4a:ed:61:fd:ac:c6:fc:5d:8c:
9d:f9:02:e8:79:9a:72:f9:d3:50:d2:36:c9:11:72:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FF:81:71:F2:76:05:0C:59:96:1D:62:C4:40:C6:9C:D0:06:24:33
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:84:14:87:5f:2f:db:f4:4e:f7:99:ec:28:83:4d:d6:2a:26:
7c:88:d2:ea:8b:a6:e0:9e:cf:40:3b:ea:bd:88:36:62:a3:95:
7a:27:0d:f2:5b:73:9d:5f:53:f2:1a:96:79:9f:e6:7f:b7:7b:
f5:4e:04:a2:ca:89:03:5f:7f:d6:bf:80:36:81:49:11:fe:76:
cd:9f:08:5a:d7:78:dd:8a:9c:30:84:c2:49:2d:e5:2c:13:29:
db:dd:db:1e:03:35:a5:1b:06:37:8e:93:67:07:d5:d4:7c:cc:
43:fb:85:b7:3b:80:df:63:b1:8f:95:00:7f:14:51:9f:94:bd:
35:00:6a:55:51:d9:3d:2c:16:14:6e:3c:e9:43:61:2f:27:5c:
d1:f3:9c:6f:a0:4e:01:b1:06:b6:50:e4:ef:6d:2e:47:2b:34:
4c:d7:36:c1:11:91:0c:37:24:6a:e7:f6:74:99:a0:32:16:97:
5c:1f:bf:83:76:c5:a5:5d:de:c1:01:7d:35:75:97:59:f2:50:
e9:51:25:a7:10:21:77:8f:25:77:53:0c:b5:59:e7:e6:f5:e6:
c0:d4:d7:a6:39:43:fe:0a:3b:74:64:e4:dc:7f:4a:23:a3:8d:
9d:51:38:04:4c:c6:42:fb:f7:cc:61:62:bb:ab:42:97:85:2f:
b6:2e:18:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:22:40 2026 by rpki-client