Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
File: 7VkCvfvXTDPqdkU9FF529qqFfEE.mft (raw, json)
Hash identifier: UkjEa+DecJaN6EZIlL6m8zYtkoyN0as+dxr7w9l39Go=
Subject key identifier: 7B:1E:94:83:88:4A:A1:54:AD:E2:06:F2:DE:FB:98:BE:F2:F0:FD:1C
Authority key identifier: ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
Certificate issuer: /CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Certificate serial: 019D265F8A34002734801E499DB523CE9410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:28 +0000
Manifest this update: Wed 25 Mar 2026 19:01:28 +0000
Manifest next update: Thu 26 Mar 2026 19:01:28 +0000
Files and hashes: 1: 7VkCvfvXTDPqdkU9FF529qqFfEE.crl (hash: cNbBCLBbBLJjYuLYLsp5GJaAzerVL7kFMNL8WrsgQyQ=)
2: jFhG1hKVFvuDB6uN1JYtoXLFZ7I.roa (hash: MaeW7NGKYLi/aVWjBTCyu07kjnejwGHW7+DG/UsZBN0=)
3: r_Ago4uqCeflNjXnl64JVeyJnPY.roa (hash: zoRvGfgPV8+vuTSlqpQsyZ8HStEB8X0DXmMgCi6yhm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:8a:34:00:27:34:80:1e:49:9d:b5:23:ce:94:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Validity
Not Before: Mar 25 19:01:28 2026 GMT
Not After : Mar 26 19:01:28 2026 GMT
Subject: CN=7b1e9483884aa154ade206f2defb98bef2f0fd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:79:01:f9:d6:71:29:b7:05:8e:6c:92:78:25:
c2:6a:72:60:6b:f3:7c:a7:6f:8e:5d:96:63:6f:12:
83:b6:10:94:af:68:14:de:17:03:9e:1d:1d:30:d6:
f6:30:01:05:67:1f:b1:8e:c4:bf:41:f3:fa:e9:1d:
fb:16:7b:0b:a5:04:d1:c6:4c:22:21:32:06:6a:bd:
9d:7b:64:79:ef:7b:4a:eb:33:77:0f:74:06:b9:5e:
d4:87:83:3a:88:75:b6:f3:1b:57:be:8a:a1:db:09:
f6:7c:bd:e1:c7:c7:44:c8:ba:ac:8f:a1:2d:4b:4a:
5c:1a:a6:47:d1:cf:af:56:ea:2a:14:20:ef:e9:da:
13:cf:29:c7:4d:ff:96:9f:4b:73:67:c0:24:cf:96:
13:94:63:3a:a4:01:6c:bf:24:0e:de:aa:da:22:7c:
6c:67:70:e1:5e:a4:dc:08:60:d4:0a:5a:1a:6e:0d:
09:0f:f6:7e:6b:c4:07:b9:b9:03:05:59:58:26:dd:
9b:35:37:a7:a6:af:ba:db:89:62:29:55:08:e2:5c:
14:ee:21:5d:2d:a6:37:a8:e1:e7:f4:00:e0:0e:1c:
eb:8b:ea:03:bf:5d:ae:e8:b9:4f:56:31:85:b9:74:
3d:47:4b:a7:db:c9:11:30:75:fa:f5:9b:3e:bf:b4:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1E:94:83:88:4A:A1:54:AD:E2:06:F2:DE:FB:98:BE:F2:F0:FD:1C
X509v3 Authority Key Identifier:
keyid:ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6e:d6:d4:d5:51:79:80:41:61:fd:e6:f6:4e:3f:e2:e6:ca:
4c:bc:cd:58:a0:fa:8d:68:64:a4:d6:6e:bc:3b:37:15:4e:74:
7b:ce:d1:d4:63:6c:88:03:ee:f6:03:0c:23:5f:c7:e2:e3:9a:
3c:19:cf:f4:ba:12:f8:44:da:99:f9:3a:66:8c:64:5c:d2:02:
2b:14:11:53:cc:37:3b:a9:26:0b:40:14:d8:e9:11:1e:7e:ac:
27:be:7e:7e:0e:2d:7a:af:f2:ec:aa:76:4e:a6:18:c2:66:d2:
bf:5d:6c:b1:09:f2:1f:01:99:e0:21:40:2f:88:37:1e:06:6c:
93:31:21:3a:cb:47:d3:9c:f9:88:1c:19:a7:56:19:bc:bb:b3:
a0:d4:d3:74:99:19:1a:b1:a2:e3:61:2d:4c:33:26:49:46:01:
e8:fe:e8:18:81:ba:42:91:d3:5b:f4:2c:bc:94:e5:25:2c:f8:
14:66:ed:fc:a9:48:a4:0e:06:84:d6:85:71:b0:79:ac:d7:38:
c0:33:ac:b1:75:50:86:89:75:72:15:03:63:14:f8:8b:27:25:
cf:8a:37:a4:c5:2b:b1:3d:df:33:41:40:b6:2c:6d:2d:31:fb:
b6:e5:6b:9d:89:e5:87:06:7d:e9:11:bb:52:24:73:41:22:c5:
78:4a:51:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:47 2026 by rpki-client