Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier: jIfFWvOWfHXFFvTAL0GSlX/gsPy6xicVVbiJLwGHv08=
Subject key identifier: 3A:7E:8F:6B:5D:0D:63:40:9C:C9:09:06:3E:27:C5:6A:50:87:C0:43
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 019DB210148E8E176CB32E47718D32D96D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number: 1181
Signing time: Tue 21 Apr 2026 22:01:31 +0000
Manifest this update: Tue 21 Apr 2026 22:01:31 +0000
Manifest next update: Wed 22 Apr 2026 22:01:31 +0000
Files and hashes: 1: MkSFILdBcvHxyl3ayJE96taLdHo.roa (hash: vPrRnOae6/b3XpWFwaeggOdaQgs7BaMzqFikId0Jk+4=)
2: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: Ez6QkwRQqW9Yd2VdPrNp0KBqOyFawRGL6FF/jSAp/9Q=)
3: zeCeXRfPu2t3BPvUAm58rbcGNoI.roa (hash: JizEg6enjfFSyI5GkuML6Yj+9pecrYJP7cQWBwD0cBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:10:14:8e:8e:17:6c:b3:2e:47:71:8d:32:d9:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Apr 21 22:01:31 2026 GMT
Not After : Apr 22 22:01:31 2026 GMT
Subject: CN=3a7e8f6b5d0d63409cc909063e27c56a5087c043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:57:85:60:0a:f4:7f:7b:de:07:7c:b5:df:
6b:c9:7d:e1:d1:3d:52:a7:46:c7:99:d0:82:8d:f3:
8c:44:56:2f:b3:ed:c5:cf:ec:c3:13:f1:50:48:01:
21:ad:cd:5f:70:7b:2b:f5:8d:59:c3:68:a6:87:44:
2a:03:36:44:d7:36:11:d1:ee:5b:87:f8:63:6a:79:
53:7f:77:2d:c4:e2:a1:23:ad:da:1a:ec:19:f9:bf:
6c:21:79:df:c4:bb:f4:f0:6d:7f:28:b8:02:e0:cb:
cc:21:7a:98:30:8e:1a:2e:51:62:7e:e2:4e:ea:95:
89:a5:d8:c1:62:37:b1:1f:9f:35:8d:74:d5:79:ac:
45:e4:d7:75:ca:6c:bc:82:a9:1a:75:e3:13:32:0f:
da:33:65:f9:20:76:ab:2f:48:e1:79:62:e5:65:09:
a8:4c:2a:f4:68:08:37:51:0b:26:b6:d2:7b:80:8a:
97:c9:79:97:81:ae:7c:f6:e1:4d:2d:e3:eb:12:5d:
68:ef:0f:8f:34:78:83:14:33:2b:4a:11:8f:48:e9:
e2:ed:09:d0:97:cb:80:55:c4:25:29:d5:1d:f3:76:
0c:bc:bf:d4:16:34:57:e3:e2:28:f6:98:5f:56:6d:
9d:5a:f5:f0:b2:3b:d9:12:5b:88:c9:3b:f5:4a:c3:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7E:8F:6B:5D:0D:63:40:9C:C9:09:06:3E:27:C5:6A:50:87:C0:43
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9d:48:64:39:71:13:18:28:dd:13:4d:e3:db:68:4c:84:ba:
70:0c:fe:13:48:d1:33:4f:8d:c0:48:ea:73:d4:fa:3b:7d:82:
1d:eb:56:78:c0:51:30:99:eb:e6:86:ab:bc:41:b8:3e:46:b5:
ec:b2:70:65:4e:73:d2:11:37:85:fc:9f:9e:f5:34:26:33:54:
e7:08:55:a9:f9:6d:b2:bd:9f:6b:cb:c6:b6:8a:c7:16:fe:f9:
ee:de:13:0b:aa:30:c1:7e:c0:9b:02:dd:60:67:e0:7e:d8:09:
24:23:4a:ed:c6:cc:b8:c5:b5:66:a9:0a:ce:78:36:c2:bd:55:
ff:66:b7:90:08:d0:93:ab:bf:48:c4:fa:66:62:b8:60:8e:64:
fb:7c:f4:c2:fa:2d:80:5a:a6:93:c0:f7:d8:da:c1:61:24:01:
65:f7:34:da:63:69:0e:16:5f:d1:9b:39:cb:2a:74:67:1f:ab:
78:a0:3c:c0:af:3d:9f:9c:d0:d1:ec:44:cf:19:3a:ae:28:f3:
46:30:b2:75:79:0c:6d:29:c2:71:70:96:e7:4b:fc:57:5a:18:
bb:46:51:67:4f:8b:e7:2b:e0:e1:46:3a:94:99:f8:3a:72:68:
1d:4f:98:3c:1c:79:30:02:0b:ae:09:c5:2b:a3:d5:ea:05:0f:
01:c4:68:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:34:34 2026 by rpki-client