Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
File: 7VkCvfvXTDPqdkU9FF529qqFfEE.mft (raw, json)
Hash identifier: z/TyE2vZCDGWmqHubUQg4sSogaQlBpXQrj8KAqz8SZY=
Subject key identifier: 33:EE:5D:C2:94:B3:A6:93:75:1B:0B:13:FE:78:5D:08:E9:DD:81:71
Authority key identifier: ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
Certificate issuer: /CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Certificate serial: 019F189E8E10AC6D5FBD4E6D216F09D871DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 13:01:11 +0000
Manifest this update: Tue 30 Jun 2026 13:01:11 +0000
Manifest next update: Wed 01 Jul 2026 13:01:11 +0000
Files and hashes: 1: 7VkCvfvXTDPqdkU9FF529qqFfEE.crl (hash: /+he2Hv4jwofddpX7WfveFdhkRsH1ZCuvcxvT+XVDbU=)
2: jFhG1hKVFvuDB6uN1JYtoXLFZ7I.roa (hash: MaeW7NGKYLi/aVWjBTCyu07kjnejwGHW7+DG/UsZBN0=)
3: r_Ago4uqCeflNjXnl64JVeyJnPY.roa (hash: zoRvGfgPV8+vuTSlqpQsyZ8HStEB8X0DXmMgCi6yhm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:8e:10:ac:6d:5f:bd:4e:6d:21:6f:09:d8:71:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Validity
Not Before: Jun 30 13:01:11 2026 GMT
Not After : Jul 1 13:01:11 2026 GMT
Subject: CN=33ee5dc294b3a693751b0b13fe785d08e9dd8171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:98:ab:61:06:b8:3e:1d:fa:5b:c9:09:ed:
80:be:0b:67:96:08:87:5c:02:1e:0a:7a:4a:13:d3:
f8:3e:57:b2:4c:66:f7:32:3f:5b:e3:cb:f3:2a:ee:
db:6f:bc:09:1c:a1:34:a3:ad:f0:8e:e0:27:79:70:
0e:51:ec:01:bf:23:31:71:65:c3:36:55:c8:72:83:
4f:70:a3:13:b8:5e:f7:e3:80:ea:89:14:8d:7f:3d:
5b:b7:de:1e:4b:a8:10:fc:36:ca:d2:4a:ee:fc:3d:
dd:03:f0:9c:57:43:89:b5:2e:79:3d:68:11:a1:70:
66:1a:c4:05:c9:1d:94:c4:ae:08:88:c3:46:4a:46:
89:37:48:ea:34:fd:47:0c:48:4d:88:9f:d1:07:17:
a7:2e:4d:ef:5b:d3:3c:17:c1:2b:a9:47:09:12:d5:
be:63:eb:29:18:70:e8:4d:0f:4e:9d:49:15:20:bf:
20:1c:3a:c0:c9:1e:1e:ec:32:cd:18:32:f0:a2:77:
d3:69:43:ae:2c:60:4c:3f:ca:11:42:b7:21:4e:df:
44:89:94:72:3c:e9:86:a6:b6:57:6a:7a:fa:1d:b8:
8e:e5:e1:f0:b8:86:d5:23:88:ca:d9:7c:90:32:2d:
0b:c9:9b:ac:94:b6:b0:2f:a8:49:a0:30:4f:f6:c5:
25:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EE:5D:C2:94:B3:A6:93:75:1B:0B:13:FE:78:5D:08:E9:DD:81:71
X509v3 Authority Key Identifier:
keyid:ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:29:d2:22:c9:b7:86:72:2e:65:0e:44:a1:2a:54:03:ce:36:
b6:12:07:59:3a:42:75:74:c5:55:12:1b:73:35:25:19:a1:31:
31:e6:27:29:a5:9b:42:4b:c2:25:2b:bb:96:aa:01:ed:53:0a:
ea:e1:35:6f:20:94:a6:ff:f7:dd:74:f3:2b:d3:fe:95:22:1f:
f3:30:14:d0:bc:83:b1:c7:b6:e8:88:2c:f8:f5:19:5f:68:5e:
12:7c:cd:80:72:db:16:ab:e1:90:b1:d5:8e:30:db:c3:28:eb:
28:a6:59:0f:4a:d2:7b:d5:9e:29:20:ab:ae:68:8e:93:2e:2c:
41:1a:92:a0:1c:6a:77:11:c6:19:14:0b:08:be:b3:8a:58:94:
9f:ac:38:1d:d8:2b:01:b1:ac:95:0a:aa:49:1d:9c:95:fc:99:
63:ba:34:f0:d1:b3:b4:28:23:c7:60:5a:1d:4d:6f:a4:8a:a1:
32:79:52:cc:ec:bf:91:68:c6:2f:51:21:e0:12:c2:ae:b9:1f:
c5:75:73:b5:da:52:56:e1:87:1a:c0:5e:fa:04:c4:5e:2f:22:
24:b0:99:63:d0:20:05:9b:9b:bc:d8:14:6b:d3:c6:cb:7d:da:
2c:b6:e3:1e:1b:9e:8b:e4:d8:7f:61:a7:57:66:27:74:51:ec:
97:9d:92:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:18 2026 by rpki-client