
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
File: 7VkCvfvXTDPqdkU9FF529qqFfEE.mft (raw, json)
Hash identifier: /fCZJbUiCHfzf8jRbtX2anV0M0RI2EwOQp4mjXCqQdk=
Subject key identifier: 59:83:72:C8:22:BC:6B:15:81:13:9E:92:18:DB:00:C9:57:4E:CB:FE
Authority key identifier: ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
Certificate issuer: /CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Certificate serial: 019E1D90870EBC0AFFB973C840106D23217A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 19:01:11 +0000
Manifest this update: Tue 12 May 2026 19:01:11 +0000
Manifest next update: Wed 13 May 2026 19:01:11 +0000
Files and hashes: 1: 7VkCvfvXTDPqdkU9FF529qqFfEE.crl (hash: ly9xdE78ETWjfLGLH41ygsFViOaNLEA4etn88Hjoq0A=)
2: jFhG1hKVFvuDB6uN1JYtoXLFZ7I.roa (hash: MaeW7NGKYLi/aVWjBTCyu07kjnejwGHW7+DG/UsZBN0=)
3: r_Ago4uqCeflNjXnl64JVeyJnPY.roa (hash: zoRvGfgPV8+vuTSlqpQsyZ8HStEB8X0DXmMgCi6yhm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:87:0e:bc:0a:ff:b9:73:c8:40:10:6d:23:21:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Validity
Not Before: May 12 19:01:11 2026 GMT
Not After : May 13 19:01:11 2026 GMT
Subject: CN=598372c822bc6b1581139e9218db00c9574ecbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f0:50:08:63:e8:6b:80:d1:08:ee:73:a1:e5:
5d:0c:df:05:52:23:79:f4:78:bb:70:50:4f:ac:03:
25:c5:3d:96:d2:8f:f7:cd:01:07:cf:e0:7d:32:1f:
04:e9:e5:70:ce:b7:66:e8:5f:68:10:29:a1:81:56:
ba:ce:93:ab:5b:e5:6f:69:ab:43:d8:c2:4e:c9:11:
3f:a6:5a:b8:92:f0:97:52:b1:b3:5b:44:c5:cb:27:
99:f3:f2:6a:d3:3d:34:85:8c:04:43:0d:e5:2d:e8:
9a:24:74:73:91:13:8f:a9:6a:a3:6b:96:67:e9:a1:
a4:f7:19:b8:e9:60:f0:1e:26:96:ba:11:3f:20:fa:
aa:a9:10:7b:a1:d2:81:3c:ab:48:5b:e4:14:14:06:
6d:49:00:3c:14:bb:08:fc:ab:8f:c4:1c:81:db:91:
fc:7c:4e:7e:4e:4d:65:e7:e6:a5:eb:49:2c:8e:fe:
26:32:f8:a3:15:05:8b:a7:12:9f:1d:a5:ac:09:1c:
fe:82:3c:4b:2f:b1:f0:f6:c2:22:95:59:c6:82:db:
45:fb:68:ca:f7:eb:17:56:88:93:8a:23:41:c3:e1:
0e:c8:3f:ff:3d:ad:73:f6:9e:d2:00:eb:d4:c9:6a:
d4:5a:8f:be:a6:35:22:44:de:89:76:61:b4:a4:44:
15:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:83:72:C8:22:BC:6B:15:81:13:9E:92:18:DB:00:C9:57:4E:CB:FE
X509v3 Authority Key Identifier:
keyid:ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:23:d6:61:71:68:e9:8e:05:6d:3f:32:49:f1:a1:37:1f:5e:
25:2e:80:74:a1:fc:5f:be:12:b0:ac:1d:bb:16:51:e6:2d:1c:
b2:dd:a6:8d:db:f1:4b:02:60:7e:db:e2:99:62:31:8e:a3:a9:
87:43:ec:6e:e3:a4:5b:12:92:88:75:ea:29:fe:75:92:b1:0a:
b2:95:ea:1b:e3:f1:c3:5b:bc:b4:0f:96:2f:d1:97:a4:f8:5e:
c2:dd:a1:27:33:25:11:e5:5b:04:5c:35:00:3c:38:49:af:f1:
92:c8:3e:b4:7e:1c:90:e9:9a:2d:d0:e8:13:e5:e4:54:93:9b:
33:68:49:19:c6:63:c1:4f:f5:7d:9c:53:37:a9:7c:2d:4c:91:
85:2c:ed:16:27:b6:6b:95:c7:40:00:0d:8a:cf:c6:c1:a5:47:
f9:6b:ec:62:b2:ff:23:04:a6:5a:b2:0f:df:50:fe:49:ac:ef:
13:4c:38:8f:36:9e:dd:72:8b:fa:fd:7a:30:8c:ad:b2:6c:46:
bd:0a:5e:5f:75:fa:18:d0:27:01:c7:22:c3:ba:0d:f6:4b:8f:
d4:9e:88:f1:db:c6:45:db:ba:2e:9b:14:92:3d:28:6e:9d:90:
7f:f5:75:8a:f6:da:97:8e:06:cf:23:49:cc:41:ba:b5:b6:16:
bd:60:e4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:22 2026 by rpki-client