Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
File: 7VkCvfvXTDPqdkU9FF529qqFfEE.mft (raw, json)
Hash identifier: 5UpDCzoDXT30MZGD+koc4hQQHDEcRxVALvEPZBz3JBI=
Subject key identifier: F4:D5:75:3C:EC:68:06:F9:9F:E4:B0:D7:74:F0:66:CE:34:0D:0B:36
Authority key identifier: ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
Certificate issuer: /CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Certificate serial: 019D37C03026E624F820ADDBB737D6274FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:00:35 +0000
Manifest this update: Sun 29 Mar 2026 04:00:35 +0000
Manifest next update: Mon 30 Mar 2026 04:00:35 +0000
Files and hashes: 1: 7VkCvfvXTDPqdkU9FF529qqFfEE.crl (hash: w3/P1xHXw9fWGu+UZ9KYCq/vT2sFPvQW3e0KrrJ1aYA=)
2: jFhG1hKVFvuDB6uN1JYtoXLFZ7I.roa (hash: MaeW7NGKYLi/aVWjBTCyu07kjnejwGHW7+DG/UsZBN0=)
3: r_Ago4uqCeflNjXnl64JVeyJnPY.roa (hash: zoRvGfgPV8+vuTSlqpQsyZ8HStEB8X0DXmMgCi6yhm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:30:26:e6:24:f8:20:ad:db:b7:37:d6:27:4f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Validity
Not Before: Mar 29 04:00:35 2026 GMT
Not After : Mar 30 04:00:35 2026 GMT
Subject: CN=f4d5753cec6806f99fe4b0d774f066ce340d0b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:75:31:5b:fd:a0:ce:83:46:d2:19:24:34:88:
db:6b:b4:90:af:1b:b6:f7:71:c2:0b:dc:be:8c:d5:
c5:0f:cd:1c:af:b7:bf:08:57:bf:0c:b0:54:08:cd:
4e:4a:ea:e3:92:9a:eb:c4:ed:bd:82:67:4d:cc:56:
4a:f8:ad:cd:b2:16:44:db:35:e5:42:f9:49:f1:93:
54:2c:b7:3c:59:95:13:cb:2d:3c:71:ed:72:cb:99:
e9:3d:5d:0b:03:bb:0e:8d:c4:85:15:e7:09:0c:4e:
42:2b:27:4f:10:34:e0:67:a4:be:1a:b7:b7:18:30:
e1:9e:1b:d8:e6:a4:82:08:1d:ec:78:c9:07:46:07:
f7:68:9b:0f:ea:01:55:8f:5f:1c:2a:b1:c2:46:19:
c3:72:94:0e:64:92:29:db:1c:01:8d:eb:57:c2:11:
16:98:9d:74:89:4c:bb:3a:86:98:49:af:22:a1:94:
18:d4:47:0d:6c:bc:85:64:85:cc:cf:fa:53:24:27:
9f:8c:54:71:9c:4a:7e:45:4e:1e:7e:07:53:f3:86:
83:e9:9c:cd:33:d9:3f:e8:b7:5e:0d:1d:dd:d3:91:
82:c3:3e:3e:99:cb:dd:c6:ea:e6:46:5b:65:41:59:
43:79:d5:be:bb:89:47:f1:69:74:a5:37:fb:e6:26:
95:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D5:75:3C:EC:68:06:F9:9F:E4:B0:D7:74:F0:66:CE:34:0D:0B:36
X509v3 Authority Key Identifier:
keyid:ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4b:c4:8a:bb:d3:f4:ae:12:5a:d8:b5:26:fc:7c:13:92:8f:
a7:37:80:e1:30:4f:c9:c8:33:91:96:6d:c8:f2:ba:59:7c:9b:
c4:85:78:a9:14:32:21:59:45:04:7c:77:35:26:35:83:d0:d4:
c2:fc:c1:8f:64:ad:4a:08:d9:0d:fe:dc:24:72:d8:51:66:96:
5b:4c:14:33:30:74:41:de:7c:8e:0c:5b:fd:8e:f8:db:46:fb:
6f:80:76:a2:9c:e7:7f:dd:de:08:87:72:35:08:c0:1a:9c:c2:
c9:61:d9:95:ff:df:7b:97:cc:e3:b8:4c:ed:54:95:3a:6a:cc:
40:44:d1:a2:bf:fb:3f:3c:df:7a:19:f5:37:2d:52:c7:61:bf:
d6:40:a3:a9:11:5c:ab:22:82:5d:c9:bd:4b:e3:fe:5c:d4:45:
ce:b7:e4:47:3a:1c:55:3f:a7:a8:f1:59:33:8e:33:06:14:f3:
dd:54:d2:f4:7a:0e:44:fd:26:3c:05:ee:4b:7a:a0:4d:45:34:
7f:cf:c3:16:45:8f:37:76:c1:8f:8a:85:42:36:32:1d:1f:87:
1e:67:ca:c9:88:1f:24:3e:bb:08:07:99:fd:9b:88:f8:6a:78:
18:5a:3b:de:fc:5c:9e:bb:6c:00:55:27:9e:e3:61:ef:03:9a:
8f:1e:62:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:26 2026 by rpki-client