Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
File: 7VkCvfvXTDPqdkU9FF529qqFfEE.mft (raw, json)
Hash identifier: AW7p9vUKGP6dn42mtiIffuxAaoIz9+AbXsVLmoE8Vvo=
Subject key identifier: 91:4E:40:52:99:35:0B:19:73:40:DD:31:1B:72:49:0B:39:A7:E3:B0
Authority key identifier: ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
Certificate issuer: /CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Certificate serial: 01A0CD1085BC78F73A5A365D43DFBF9946D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 07:00:07 +0000
Manifest this update: Wed 23 Sep 2026 07:00:07 +0000
Manifest next update: Thu 24 Sep 2026 07:00:07 +0000
Files and hashes: 1: 7VkCvfvXTDPqdkU9FF529qqFfEE.crl (hash: I62y5ALJBhh/DA93DZSjkc16MDMhy/8kLt5wMzdJa6g=)
2: jFhG1hKVFvuDB6uN1JYtoXLFZ7I.roa (hash: MaeW7NGKYLi/aVWjBTCyu07kjnejwGHW7+DG/UsZBN0=)
3: r_Ago4uqCeflNjXnl64JVeyJnPY.roa (hash: zoRvGfgPV8+vuTSlqpQsyZ8HStEB8X0DXmMgCi6yhm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:85:bc:78:f7:3a:5a:36:5d:43:df:bf:99:46:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Validity
Not Before: Sep 23 07:00:07 2026 GMT
Not After : Sep 24 07:00:07 2026 GMT
Subject: CN=914e405299350b197340dd311b72490b39a7e3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:69:27:78:70:9b:1b:01:9a:31:35:2f:1a:
b0:80:15:83:ff:b3:ca:5f:8b:f9:6a:42:50:35:9c:
9f:6c:90:1d:d4:ca:d5:51:95:5c:e6:ff:0f:42:d4:
30:00:c9:e2:b9:d0:70:eb:b9:95:04:a5:4e:d0:0c:
0f:3f:ef:e4:90:ce:0a:aa:49:18:a1:a6:ce:91:79:
1e:6a:64:e3:e9:13:33:fa:ac:6f:ae:d5:76:b1:32:
1c:3b:73:1d:20:ef:4c:df:ec:44:50:5f:5e:13:f7:
d3:9a:70:a9:9d:b2:89:60:44:73:5b:9e:63:48:53:
ce:37:b2:b8:9f:31:5c:f1:ac:d2:76:04:da:d5:4b:
17:44:53:0f:e9:c2:92:90:41:58:3e:3c:c5:02:0d:
39:f3:64:19:e7:65:c1:91:92:39:5a:2a:64:95:91:
09:3a:f9:dd:51:8e:cf:19:ed:90:e9:73:e6:7f:b0:
77:80:41:96:f1:ed:d3:2a:df:fd:79:ff:df:18:dc:
e2:e7:bc:dc:72:6c:d5:7a:a8:3c:ff:b4:ed:df:57:
88:19:ff:22:27:64:11:9c:d8:b6:3c:14:08:d7:06:
46:13:f2:62:4e:51:96:f7:c1:d9:f4:68:e0:51:a7:
30:2e:5b:0e:c8:34:c6:92:47:8d:ab:61:d6:c2:22:
92:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4E:40:52:99:35:0B:19:73:40:DD:31:1B:72:49:0B:39:A7:E3:B0
X509v3 Authority Key Identifier:
keyid:ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ec:26:ab:30:20:74:e0:8b:0d:53:6d:33:9f:e7:c3:f6:aa:
13:11:79:74:56:5f:fc:e3:bc:f2:76:15:55:79:e4:6c:ab:51:
3e:f9:eb:cb:d7:a3:08:fe:dd:2d:13:a4:aa:a1:28:8f:3e:62:
83:ce:4a:16:86:49:bc:f0:a5:0b:74:f3:88:8c:97:43:c3:4f:
87:d9:4e:aa:71:e9:ee:9e:e5:18:8d:a7:7a:6c:46:83:a7:13:
3f:07:32:92:70:31:a5:90:9a:20:ba:a8:59:8c:88:56:ad:45:
89:49:7b:0c:0c:23:a9:2d:3b:0c:1e:cb:2a:84:7e:e3:b5:83:
52:7e:ac:6c:73:50:86:46:96:ca:02:cf:ca:43:dd:34:0a:ef:
c5:e3:8e:07:68:c6:4d:9f:76:e2:09:95:f3:75:cb:f5:23:f7:
62:86:89:f5:99:f4:b5:0e:cb:b5:b5:5d:66:02:13:1c:ef:28:
60:f3:35:11:d0:d2:65:d3:b1:2a:2e:e7:1f:1a:3c:fb:52:1b:
b1:5f:4f:f9:68:2d:51:4c:52:75:ce:b0:c2:ba:c6:3d:fd:0a:
d1:61:15:ae:93:66:ec:59:52:d5:4b:92:db:2a:ad:d6:da:26:
8a:a1:39:53:31:13:b8:92:64:30:e2:9a:01:29:41:e1:a3:af:
96:da:73:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:03:49 2026 by rpki-client