Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier: drYzg3whA/leyBU5qDdHJohzhJubyD48ima6xNos7Z8=
Subject key identifier: 09:DE:2D:D6:EB:27:0D:A4:31:E7:D1:37:A2:9D:D3:BE:54:8F:20:36
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 019E99CE32236B737E489009249925008357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number: 11F9
Signing time: Fri 05 Jun 2026 22:01:27 +0000
Manifest this update: Fri 05 Jun 2026 22:01:27 +0000
Manifest next update: Sat 06 Jun 2026 22:01:27 +0000
Files and hashes: 1: MkSFILdBcvHxyl3ayJE96taLdHo.roa (hash: vPrRnOae6/b3XpWFwaeggOdaQgs7BaMzqFikId0Jk+4=)
2: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: DY4o8yLozCH6vNcY8PagmTobD6UTwyvEJf9r+FJa55k=)
3: zeCeXRfPu2t3BPvUAm58rbcGNoI.roa (hash: JizEg6enjfFSyI5GkuML6Yj+9pecrYJP7cQWBwD0cBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:99:ce:32:23:6b:73:7e:48:90:09:24:99:25:00:83:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Jun 5 22:01:27 2026 GMT
Not After : Jun 6 22:01:27 2026 GMT
Subject: CN=09de2dd6eb270da431e7d137a29dd3be548f2036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:fb:82:e9:42:63:a7:a8:ba:6f:b6:27:0d:
18:45:d6:ba:29:f8:4d:cc:8e:cc:ea:83:a2:b4:e7:
29:5a:51:f0:c0:54:37:f3:f7:2c:55:17:0c:db:c4:
7a:dd:e7:d3:e5:10:78:0b:3f:4d:f3:b8:0a:af:67:
05:8a:31:58:eb:bb:b0:68:0c:b8:94:1c:c2:e0:4c:
dd:3f:aa:d0:cc:65:be:c8:4a:da:2f:00:f8:cb:76:
4d:1c:1c:36:55:5f:8e:82:c5:e1:46:ea:73:68:03:
d3:d8:7b:72:dd:17:90:00:e4:da:9e:74:8c:43:9e:
8c:51:c8:e3:de:40:7d:81:da:4f:79:5b:f0:2b:0e:
b9:8f:62:f4:93:68:92:e9:86:75:5b:19:eb:58:80:
7e:2b:40:7c:4a:0e:03:22:1b:e4:3a:59:d7:d3:a4:
d1:2c:ef:e0:c3:27:d8:55:76:d9:5c:e6:18:58:b1:
c2:b7:f4:d2:55:d8:bc:f3:77:5c:81:b9:15:a1:c8:
7f:af:dd:06:f0:43:21:e9:b3:00:3e:9d:e5:b8:95:
04:ea:62:15:e6:f6:b1:0e:9e:b7:25:c3:0d:80:58:
3e:05:c7:7a:eb:f7:55:d4:3a:95:9a:21:a2:d0:b9:
43:78:ff:fa:29:fd:e9:0e:ab:00:0a:3f:57:c3:32:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DE:2D:D6:EB:27:0D:A4:31:E7:D1:37:A2:9D:D3:BE:54:8F:20:36
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:73:b6:63:08:60:81:f1:41:2d:a2:73:78:6a:b7:da:77:00:
38:76:5d:87:0a:bd:05:22:83:af:03:29:fc:e4:bd:61:4c:04:
f1:89:7c:5f:d0:f2:ea:41:f1:2f:8c:74:62:9c:3f:02:0c:31:
d9:0d:da:d9:b4:c9:a8:7a:d7:7e:de:44:d4:84:06:e5:a0:9a:
3e:c3:5b:47:77:28:9a:26:ba:6b:02:8c:39:c8:aa:62:1a:a0:
d1:af:cc:44:9c:3b:fc:13:42:1e:ba:22:ea:f4:fd:ff:e2:51:
c8:57:14:bd:0b:c1:65:b4:a0:64:94:8f:22:40:a2:d1:bb:96:
ab:af:3f:72:32:ec:11:08:18:bc:5e:04:5f:21:66:3e:37:4a:
e9:5f:0f:69:db:8f:f6:6a:8d:ce:2f:57:fc:16:a5:21:db:7f:
99:a9:2d:5c:2f:ff:85:60:41:06:77:33:b5:74:d7:43:b9:3e:
74:52:8c:08:c4:7c:2f:d8:d6:9f:58:da:89:70:e8:b0:e6:42:
f8:3e:27:b8:77:03:78:21:4b:d9:13:9b:96:04:29:40:34:3d:
a2:f4:11:47:84:09:5a:87:6a:1e:b3:d4:73:c4:6f:92:2c:f2:
0c:68:4f:34:d6:62:87:83:05:9e:b7:60:6d:e9:10:cf:98:c6:
a9:26:9e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:19:57 2026 by rpki-client