Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier: EmSqnR8bgqqKvADpcqc8ATsjJnv7gUyhMPHgnNotH5Q=
Subject key identifier: F4:00:26:CA:12:E4:25:E4:24:AB:44:63:CF:1A:CE:E7:AA:43:8F:11
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 01A1268C4A488E196985DEFC2EFAB9198516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number: 134B
Signing time: Sat 10 Oct 2026 16:01:30 +0000
Manifest this update: Sat 10 Oct 2026 16:01:30 +0000
Manifest next update: Sun 11 Oct 2026 16:01:30 +0000
Files and hashes: 1: MkSFILdBcvHxyl3ayJE96taLdHo.roa (hash: vPrRnOae6/b3XpWFwaeggOdaQgs7BaMzqFikId0Jk+4=)
2: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: G/dirHOgnK27b0l215V3psQuqLaeGa/LMbUZiTp6Jag=)
3: zeCeXRfPu2t3BPvUAm58rbcGNoI.roa (hash: JizEg6enjfFSyI5GkuML6Yj+9pecrYJP7cQWBwD0cBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:8c:4a:48:8e:19:69:85:de:fc:2e:fa:b9:19:85:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Oct 10 16:01:30 2026 GMT
Not After : Oct 11 16:01:30 2026 GMT
Subject: CN=f40026ca12e425e424ab4463cf1acee7aa438f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:03:06:38:f8:81:98:01:b5:94:c9:2b:df:
67:b8:3c:b3:0c:4d:57:83:eb:7f:be:d2:a2:ce:c3:
fa:30:74:1f:57:32:43:4f:e4:25:5b:38:19:8e:98:
29:c1:37:fe:5b:b6:dd:6a:aa:97:c9:87:c5:d9:28:
4d:02:e7:f3:ce:4f:d9:d5:15:6d:68:3d:75:3c:7b:
44:22:32:02:57:9f:bd:63:9e:fd:03:72:0c:68:fe:
eb:ba:a5:cd:a4:a8:a3:4d:47:8f:f5:49:34:0d:3c:
32:02:ea:b3:52:f5:43:b6:8c:3c:62:09:c1:37:11:
15:0c:b6:3c:4e:f2:2a:cc:c7:97:1f:b5:de:e1:f7:
8e:85:42:de:7e:0c:81:00:c1:0f:0f:c9:2f:d4:5e:
e5:b8:c1:66:2c:c3:b9:b0:1c:66:91:49:48:83:a3:
ae:63:2a:97:44:fa:47:a6:91:75:44:de:60:37:b3:
d9:a0:aa:a8:ab:3a:78:b3:66:43:4a:02:58:96:2f:
a8:dc:4b:1a:bd:7e:d2:8a:8b:26:be:3c:5c:50:27:
3b:e0:8c:53:0d:bb:16:7f:57:ad:90:bf:ed:db:4f:
8a:f0:05:1b:eb:ff:98:2e:a1:24:8b:58:37:22:64:
d9:ba:50:73:bf:0c:3c:59:c5:67:8f:2c:73:3a:ed:
4c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:00:26:CA:12:E4:25:E4:24:AB:44:63:CF:1A:CE:E7:AA:43:8F:11
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d9:2f:a5:89:8e:22:16:6c:4b:70:eb:0d:8b:08:c9:cc:ca:
ea:dd:81:0a:76:df:28:97:98:d0:2c:c1:79:df:74:66:37:5a:
07:1c:ef:ca:83:7f:87:58:b4:58:94:1c:f0:99:16:bb:fe:d3:
71:9b:69:fa:46:2e:7e:eb:ae:b0:6f:54:9f:cb:da:83:a9:70:
74:ae:95:1b:56:c0:25:e4:1b:dd:59:de:26:7a:d0:e7:0b:41:
48:ef:0d:1f:ea:19:7e:22:e2:25:b2:ed:52:2e:fa:03:27:4b:
a9:ba:77:02:f1:11:ca:af:d5:4f:3d:3a:88:80:30:08:83:05:
f6:c1:02:8a:70:7a:a7:b8:4c:10:03:60:75:fd:b8:76:51:40:
ad:20:71:fb:3c:bd:fc:77:d6:8d:27:6b:5b:ce:d2:ca:8b:c6:
a0:ab:27:93:ce:4a:42:89:83:66:0d:5f:1c:6c:43:a3:a4:58:
d3:69:12:d2:a6:9f:91:ae:bf:aa:ad:2f:23:42:ab:16:5f:f2:
37:ee:8b:c4:f0:40:c6:15:51:98:29:ce:24:41:e5:d1:06:f7:
8e:21:72:18:bc:cf:70:82:98:23:5d:52:60:23:9d:40:ea:f2:
84:74:f8:46:64:72:be:f8:77:cf:a4:bc:60:0e:88:d9:ab:40:
33:f4:b4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:17:15 2026 by rpki-client