Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier: BlwFItAIQJe/7uqutA8VKY3JWOcURPzLjIMW7lhVMZg=
Subject key identifier: 94:C5:1F:3E:4C:66:6D:F1:99:6D:59:BE:49:88:DA:BE:4A:D8:A1:3B
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 019F8B33C071FB144B9E7A2995BB104665B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number: 1276
Signing time: Wed 22 Jul 2026 19:00:52 +0000
Manifest this update: Wed 22 Jul 2026 19:00:52 +0000
Manifest next update: Thu 23 Jul 2026 19:00:52 +0000
Files and hashes: 1: MkSFILdBcvHxyl3ayJE96taLdHo.roa (hash: vPrRnOae6/b3XpWFwaeggOdaQgs7BaMzqFikId0Jk+4=)
2: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: eGPeX9+dcBgaZbrR6D47SRiIKbCG6i3UEuHcY56yzNw=)
3: zeCeXRfPu2t3BPvUAm58rbcGNoI.roa (hash: JizEg6enjfFSyI5GkuML6Yj+9pecrYJP7cQWBwD0cBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:33:c0:71:fb:14:4b:9e:7a:29:95:bb:10:46:65:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Jul 22 19:00:52 2026 GMT
Not After : Jul 23 19:00:52 2026 GMT
Subject: CN=94c51f3e4c666df1996d59be4988dabe4ad8a13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:c8:72:77:74:ef:77:6f:b2:a9:b3:d0:45:
84:1b:cc:8d:a2:6f:d8:a6:ff:25:75:aa:e6:fc:76:
8c:ef:71:4d:0e:6c:fa:7c:54:15:6f:20:6c:b7:4f:
f0:a5:c8:ff:f8:b5:28:f7:89:e0:ef:0e:62:e8:97:
7b:5e:80:20:9d:97:27:08:8a:4a:32:4d:eb:63:f3:
59:13:10:b0:c5:83:90:98:38:f4:44:10:17:03:f8:
a7:c9:8e:6d:e4:da:3b:c3:44:6d:72:bd:3e:b2:62:
63:44:bf:57:39:fb:16:e8:9a:56:fc:b0:ac:dd:91:
b2:08:48:49:c7:d4:71:a0:5e:3a:a3:06:f3:b7:a1:
2c:cc:2c:93:f9:aa:53:f9:e1:e4:64:55:d0:02:7e:
cd:68:e2:0f:1e:6b:f8:25:00:29:ba:6f:4b:97:a9:
b2:a5:53:ba:43:22:22:58:67:89:78:bb:20:03:a1:
d0:63:4e:2f:f6:90:e7:92:be:a4:86:14:b8:53:c7:
d5:80:92:21:9e:3f:dc:d3:07:ad:24:26:67:3a:a9:
2e:fa:f4:7f:9c:50:44:1e:42:9c:dd:cc:8f:79:6f:
67:59:52:52:e3:c9:89:4c:cd:18:62:b7:da:47:b5:
b2:02:47:be:b3:1b:e6:f5:0a:4d:b1:dd:60:bc:2a:
13:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C5:1F:3E:4C:66:6D:F1:99:6D:59:BE:49:88:DA:BE:4A:D8:A1:3B
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:99:8f:e0:67:52:9a:ec:0a:89:1c:5f:d6:f2:83:22:ff:7f:
63:09:6c:02:07:0a:ea:f0:02:53:d2:18:f6:9c:99:04:e2:f1:
26:1f:09:f3:8b:5e:cd:46:95:b8:40:85:c5:39:44:28:42:07:
c4:03:06:9b:9f:81:93:01:89:d7:6d:86:f6:e2:5c:a0:2c:ef:
e4:87:c1:04:c9:24:91:c1:ce:e7:06:5c:20:c4:39:a2:0f:b0:
56:26:5d:aa:e0:97:29:46:7e:de:21:92:1a:cf:d4:79:83:40:
44:dd:f8:8d:0b:68:b4:f8:aa:31:30:db:3a:e4:a7:96:ea:88:
bc:6a:a7:a6:d8:1c:5a:c2:30:a8:01:1d:54:92:c4:27:cc:73:
c7:fb:09:60:74:78:34:4a:47:53:10:2c:6b:c4:85:15:45:0c:
49:6f:95:39:94:37:47:a1:1f:5e:cc:ff:a0:2c:ce:95:14:81:
7e:f6:05:8b:c2:28:67:c0:80:a5:36:18:f2:7b:cd:31:be:e9:
d3:e1:7f:79:33:da:d8:b8:11:41:13:73:0e:2e:87:e2:b4:fc:
11:fe:cf:8c:c0:1d:b5:90:d4:5f:94:e8:88:0c:b5:41:a6:16:
34:f6:81:75:d9:31:1c:bc:3e:25:2a:69:40:72:78:c8:98:2c:
0b:43:dc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 23:06:09 2026 by rpki-client