Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier: w1utINYMKV2ZYll2qSIeBhTAPMpj6TZzsjMiuuKBcNk=
Subject key identifier: 28:60:09:A7:3C:11:A5:27:D3:84:6B:B0:45:3C:9D:75:C3:1D:52:92
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 019CC86412113696DE9C1A736AF1E645B5A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number: 1108
Signing time: Sat 07 Mar 2026 13:02:07 +0000
Manifest this update: Sat 07 Mar 2026 13:02:07 +0000
Manifest next update: Sun 08 Mar 2026 13:02:07 +0000
Files and hashes: 1: MkSFILdBcvHxyl3ayJE96taLdHo.roa (hash: vPrRnOae6/b3XpWFwaeggOdaQgs7BaMzqFikId0Jk+4=)
2: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: ECdmGSWtmP1RVMaqiNpZ5GLxKb/0YPqc7ZIrescuX+Y=)
3: zeCeXRfPu2t3BPvUAm58rbcGNoI.roa (hash: JizEg6enjfFSyI5GkuML6Yj+9pecrYJP7cQWBwD0cBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:64:12:11:36:96:de:9c:1a:73:6a:f1:e6:45:b5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Mar 7 13:02:07 2026 GMT
Not After : Mar 8 13:02:07 2026 GMT
Subject: CN=286009a73c11a527d3846bb0453c9d75c31d5292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:b0:06:e6:3b:01:7c:7b:21:e1:24:00:e5:
ed:67:1c:ee:0a:10:62:0d:b4:a6:b3:4b:21:d4:a5:
71:5d:d6:32:30:48:1e:36:25:21:8c:29:b7:0e:0f:
a8:ac:03:62:90:86:84:70:76:79:22:c1:90:c7:3c:
af:6a:7f:02:17:a7:6a:f7:6e:35:3b:cd:e4:94:fc:
cb:a6:fb:61:ad:83:a3:f8:d2:40:1e:51:ac:ea:1c:
81:8a:a8:6e:e0:cc:d3:34:3e:2e:5b:b0:fd:7b:ea:
16:b8:81:81:26:aa:9e:8c:c3:77:23:0f:c5:76:f5:
1a:70:25:44:01:ac:e4:0d:bc:a1:01:e3:17:ce:19:
fc:80:4c:6f:4d:19:37:95:0d:31:72:e3:a1:a6:b6:
21:09:50:fd:c1:24:0f:6e:48:4c:fe:5b:5b:be:00:
61:e2:bb:95:14:3f:c7:2e:27:95:a2:5c:9a:bb:d6:
ca:d9:52:77:95:db:23:4a:2d:4c:2a:79:38:2c:62:
b0:46:47:50:12:11:e4:83:6a:be:70:22:ee:30:0c:
7f:e8:33:ac:7d:e1:23:4b:68:4a:b2:f7:f2:9d:bb:
66:72:db:28:7f:00:5c:24:dd:a0:c5:02:9b:5d:f1:
2c:13:96:65:20:57:8a:e9:b3:4f:2f:75:1e:96:3d:
a1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:60:09:A7:3C:11:A5:27:D3:84:6B:B0:45:3C:9D:75:C3:1D:52:92
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d3:f3:a9:38:4a:13:23:fa:8a:cd:58:2a:b6:21:b2:36:89:
3a:07:17:fb:fd:ed:c3:54:3d:84:f5:3b:38:f5:c6:a1:66:d0:
92:95:74:5c:d0:39:91:83:69:9a:a3:e6:73:67:09:e4:1f:6f:
c4:67:75:86:4c:a8:2a:19:d7:db:fa:2d:e0:a1:96:26:32:71:
65:2b:65:0b:a1:d5:64:29:cc:e2:8e:96:e7:2a:22:a2:b6:fb:
84:aa:c2:8c:db:88:a5:2f:bf:46:aa:19:39:d1:39:55:ce:c4:
c5:6a:a8:9e:18:73:c0:59:d8:12:4b:65:c6:c1:05:c3:95:74:
f6:78:17:f0:a2:ee:2f:76:d9:ed:d4:01:8e:77:1e:bc:ff:00:
5c:1c:ed:ef:c2:af:8a:b0:9c:be:53:16:f2:02:8e:49:cc:50:
f2:f3:7f:aa:d3:44:11:36:40:d3:0f:37:fb:0c:9b:02:35:4f:
29:ca:9f:e0:fb:ec:66:b3:90:f4:e0:6d:09:f2:73:c3:d8:25:
5c:16:e0:d5:c4:20:28:d1:fb:4a:21:5e:83:0b:6c:56:10:5d:
1e:04:a1:9f:76:f1:a0:45:34:87:1f:3e:8d:60:ce:6f:12:8a:
a5:cc:60:7d:b9:5f:b6:83:2d:85:79:c1:5a:03:23:62:2f:08:
49:9b:5a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 20:51:17 2026 by rpki-client