Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
File: 7VkCvfvXTDPqdkU9FF529qqFfEE.mft (raw, json)
Hash identifier: lI1z213dhZO7wvUpHhRI+QzBPcmOAkAB3zNnoqJDBOw=
Subject key identifier: 03:85:B0:8E:4F:41:4C:5A:2C:4C:6D:ED:D5:5C:9E:6C:90:65:BA:CE
Authority key identifier: ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
Certificate issuer: /CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Certificate serial: 01A1544059333A7719D699ADACBC78EEE3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
Manifest number: 1AB1
Signing time: Mon 19 Oct 2026 13:01:05 +0000
Manifest this update: Mon 19 Oct 2026 13:01:05 +0000
Manifest next update: Tue 20 Oct 2026 13:01:05 +0000
Files and hashes: 1: 7VkCvfvXTDPqdkU9FF529qqFfEE.crl (hash: ymd20RpNuGOzGznYLXO4VekkdYOwP5I4o8Bvyuhzcwc=)
2: jFhG1hKVFvuDB6uN1JYtoXLFZ7I.roa (hash: MaeW7NGKYLi/aVWjBTCyu07kjnejwGHW7+DG/UsZBN0=)
3: r_Ago4uqCeflNjXnl64JVeyJnPY.roa (hash: zoRvGfgPV8+vuTSlqpQsyZ8HStEB8X0DXmMgCi6yhm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:40:59:33:3a:77:19:d6:99:ad:ac:bc:78:ee:e3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Validity
Not Before: Oct 19 13:01:05 2026 GMT
Not After : Oct 20 13:01:05 2026 GMT
Subject: CN=0385b08e4f414c5a2c4c6dedd55c9e6c9065bace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f3:81:2b:df:4c:81:dc:00:21:f8:85:b4:68:
09:b4:72:d1:cc:66:d0:30:33:a9:c0:54:9c:37:6b:
79:3c:9b:9c:95:82:e0:34:c9:1e:af:1a:d3:2b:dd:
3f:68:cb:c8:e5:fd:6d:e7:87:ab:7c:d7:83:d3:27:
db:0a:72:5f:53:2e:7d:a4:53:6f:30:f5:0e:ec:63:
74:82:fd:a9:9f:f7:4d:47:32:3b:ed:66:0a:f4:92:
93:df:ce:0e:18:21:1f:21:cd:f4:10:8e:5c:8c:69:
7d:70:fb:e1:25:b7:b6:8c:95:22:25:2a:07:17:ee:
9f:8f:b3:cb:28:ec:bb:67:3d:1a:db:26:c5:d1:e6:
2d:b9:20:89:63:b6:39:b7:5f:21:17:1b:03:87:04:
81:54:d5:ac:5e:21:0f:7a:78:62:40:f4:25:0a:51:
9f:3b:5c:1e:af:7c:b8:53:55:d6:9f:7f:90:6c:33:
89:17:af:2f:df:3b:49:2b:25:92:37:4e:3b:7b:a0:
3b:bb:2e:88:09:d9:cb:15:41:aa:80:e2:64:8e:26:
f0:f9:c2:4f:49:9a:f3:81:f2:95:db:97:1c:8b:2c:
b2:b5:57:dd:53:80:8c:39:9d:92:47:a4:55:c8:c5:
bd:b0:15:c3:db:19:9d:3b:b9:0d:b2:c7:87:4c:74:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:85:B0:8E:4F:41:4C:5A:2C:4C:6D:ED:D5:5C:9E:6C:90:65:BA:CE
X509v3 Authority Key Identifier:
keyid:ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b7:58:16:27:92:e6:b4:f7:64:d0:4a:ef:a6:95:93:b4:b6:
7f:01:d2:c6:d4:b6:f3:91:7e:9b:8b:b4:e1:e8:54:6b:09:f0:
39:d0:c5:13:a7:90:ae:73:44:15:a8:5d:f8:51:44:e2:2f:1a:
1a:60:fc:db:57:0e:f7:d2:37:5b:30:a6:c6:6f:5c:3a:36:c5:
dc:15:c2:73:33:c9:40:62:0f:26:9f:0d:14:34:df:c5:f0:af:
77:4a:c0:79:55:52:0d:75:ab:12:f0:00:93:70:fb:0b:72:b1:
d8:f8:ec:58:85:63:9a:36:e8:42:6d:0c:29:7b:19:9c:a6:3a:
a6:22:fd:5d:be:4c:7d:de:1b:8e:47:b9:f0:4f:38:e5:40:a4:
98:ac:8a:df:55:76:b7:a4:c8:ce:72:0a:bf:8a:4a:fa:5c:28:
e6:6b:9d:b8:81:3a:f6:a0:6a:9d:ce:39:83:23:63:a8:48:3f:
4a:1b:74:da:fe:0e:7a:4b:f7:9a:56:8c:9e:f6:96:44:a4:5d:
b4:19:54:04:0f:62:e8:2f:11:09:8e:e7:ee:31:dc:c4:20:02:
1d:5d:dd:fe:1c:1f:1f:2a:18:26:d8:39:07:ca:44:47:8b:e2:
ef:9d:8f:b5:07:90:3c:0d:94:34:ee:0a:9f:96:08:93:b8:9e:
0d:82:fc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:43:19 2026 by rpki-client