Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier: K7M0fz5dKRwAAt7BNndmijQG/4ETfUd9lKFO3AOQ178=
Subject key identifier: E5:15:47:90:02:C1:DD:85:0C:A8:17:47:3B:A6:07:2A:B1:EF:93:9F
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 019FAA195E9A8EB89CE5BE324953E69988C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number: 1286
Signing time: Tue 28 Jul 2026 19:00:16 +0000
Manifest this update: Tue 28 Jul 2026 19:00:16 +0000
Manifest next update: Wed 29 Jul 2026 19:00:16 +0000
Files and hashes: 1: MkSFILdBcvHxyl3ayJE96taLdHo.roa (hash: vPrRnOae6/b3XpWFwaeggOdaQgs7BaMzqFikId0Jk+4=)
2: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: tyxJ1A4xvE/YVybmNlE+fUCC5mlt43PMvgaWlOgcGXE=)
3: zeCeXRfPu2t3BPvUAm58rbcGNoI.roa (hash: JizEg6enjfFSyI5GkuML6Yj+9pecrYJP7cQWBwD0cBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:5e:9a:8e:b8:9c:e5:be:32:49:53:e6:99:88:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Jul 28 19:00:16 2026 GMT
Not After : Jul 29 19:00:16 2026 GMT
Subject: CN=e515479002c1dd850ca817473ba6072ab1ef939f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a0:42:ed:9e:34:76:f5:a1:03:8b:3d:ed:12:
b9:60:6b:66:37:0e:5c:0f:e4:5e:78:29:b4:b1:e8:
c5:b1:28:e7:94:33:f4:c8:54:dc:69:69:18:90:62:
9b:e3:ba:40:cd:5d:7e:2c:a4:8f:f5:e6:9d:3c:75:
6a:62:e8:66:dd:23:32:17:b1:da:20:f4:c9:a7:a4:
00:47:dc:e6:9b:a1:6d:c9:42:b2:e5:44:57:df:47:
13:3c:c8:c4:65:6e:19:72:2b:0e:09:79:52:5f:04:
d2:c6:56:c8:0f:c7:4b:82:1e:e2:68:05:63:37:7a:
ff:dd:c6:e8:24:3c:eb:f4:31:b8:7f:37:94:35:1f:
34:e9:74:b4:31:e3:3d:78:65:c0:3a:0b:96:fa:ef:
c4:88:6c:0c:26:78:76:1f:7e:e0:68:f7:7c:77:fb:
e6:f2:5f:4b:06:f5:99:44:32:23:a5:8b:21:49:9a:
23:a2:b3:5a:9b:b2:f3:3b:fe:54:e8:7c:94:39:f9:
bf:8e:9f:67:14:0f:1c:50:6b:dd:d2:67:bc:b0:96:
4a:ef:40:be:59:46:53:03:50:89:42:2e:f2:65:29:
18:23:73:5a:45:c3:ea:d8:9d:3a:a1:c4:7d:75:eb:
01:e1:0f:b3:60:d5:3a:6d:37:18:74:3f:ab:97:05:
28:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:15:47:90:02:C1:DD:85:0C:A8:17:47:3B:A6:07:2A:B1:EF:93:9F
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4b:b3:98:66:0d:b4:ca:df:e0:67:a5:53:42:21:96:d2:83:
29:47:70:30:94:a4:59:51:ab:b0:1c:b2:ff:93:0b:4a:46:23:
58:51:a0:67:f1:fe:45:9f:b5:19:1b:bd:3a:4e:03:1e:5e:a9:
b6:04:52:e0:a4:3d:04:4f:91:76:6b:a0:6c:1b:b5:2f:20:b0:
ce:87:14:47:4f:f8:fe:61:80:66:4d:cf:2a:d5:f7:6b:ab:da:
a9:9b:14:b3:af:03:ce:e7:13:a1:fe:4d:2b:b3:a3:a5:cd:b5:
b5:19:c1:7e:43:5b:d1:d4:7f:bf:2c:0c:6b:c8:a2:b8:af:9a:
d7:05:fd:71:e8:7e:b5:d9:8a:01:91:75:a4:ee:3c:d3:c7:d2:
d3:19:ea:01:02:b3:f2:b4:6e:a2:01:57:4b:51:24:f7:33:2e:
8b:d9:3a:78:ef:ef:73:c9:b7:17:32:3a:f2:22:3c:4a:c1:68:
2e:ee:41:74:43:4d:65:1d:44:7e:67:46:d0:a5:d9:d3:0d:c4:
53:b5:32:17:f8:e4:7f:a9:9d:51:2d:d1:79:42:8a:a3:9a:da:
46:2a:b6:df:69:24:fd:4b:77:f5:ef:c6:b1:f3:8c:4b:73:83:
60:18:4c:b7:d1:55:ec:08:3c:54:5a:b0:a7:9e:71:77:76:62:
b7:cf:5f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:01:23 2026 by rpki-client