Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
File: 7VkCvfvXTDPqdkU9FF529qqFfEE.mft (raw, json)
Hash identifier: Ez0tfAUyk+wrXBvJ3/mk0b9aoRXX4mSW5lGvig5yrTs=
Subject key identifier: BE:B2:51:B9:90:E3:F7:56:38:F4:ED:60:A8:E5:40:E9:06:39:45:43
Authority key identifier: ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
Certificate issuer: /CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Certificate serial: 019D9A3E0CF63651EDC19C5CFFD7B6E4D457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:00:50 +0000
Manifest this update: Fri 17 Apr 2026 07:00:50 +0000
Manifest next update: Sat 18 Apr 2026 07:00:50 +0000
Files and hashes: 1: 7VkCvfvXTDPqdkU9FF529qqFfEE.crl (hash: +d9sY/QzIzdCEQDakgdOXRbJ0nnnACnc3+qfbdM03+I=)
2: jFhG1hKVFvuDB6uN1JYtoXLFZ7I.roa (hash: MaeW7NGKYLi/aVWjBTCyu07kjnejwGHW7+DG/UsZBN0=)
3: r_Ago4uqCeflNjXnl64JVeyJnPY.roa (hash: zoRvGfgPV8+vuTSlqpQsyZ8HStEB8X0DXmMgCi6yhm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:0c:f6:36:51:ed:c1:9c:5c:ff:d7:b6:e4:d4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Validity
Not Before: Apr 17 07:00:50 2026 GMT
Not After : Apr 18 07:00:50 2026 GMT
Subject: CN=beb251b990e3f75638f4ed60a8e540e906394543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:7b:29:93:97:bd:bc:af:61:1e:4f:93:19:
c0:14:57:70:87:14:62:37:1a:17:3e:f6:ce:d9:ec:
c0:a8:20:86:f1:5c:2c:aa:ed:ed:33:6b:41:f0:56:
bc:50:05:24:bc:d9:ca:ac:32:21:36:dd:6f:d6:75:
86:07:f5:b8:e6:86:b1:31:ce:4a:dd:5a:97:08:90:
5e:13:b9:1b:b5:d6:6f:cb:a1:86:0e:99:8f:d1:1d:
01:13:5c:b3:85:57:e4:e0:d8:03:1e:c2:3e:86:2f:
b3:0d:4b:0c:a0:e0:c7:a2:c2:93:ae:ed:94:d6:41:
84:c6:0d:5b:f3:ec:a7:39:6b:8c:0c:a9:c7:11:29:
70:77:97:d0:6c:b8:4c:ce:14:dc:e7:d6:6a:3f:c3:
03:ad:b4:43:48:b3:09:c6:42:5f:90:86:3a:65:37:
65:17:08:df:cc:36:6f:35:6f:0b:b4:d1:3d:83:13:
27:8c:34:e9:6a:8f:de:2b:2d:7c:25:27:ff:19:50:
5c:aa:92:28:89:6c:34:6f:39:32:11:52:a4:12:9d:
de:c0:91:a7:01:33:ed:e3:84:4a:a4:c7:cc:f0:2b:
3c:a5:b9:a5:9c:57:40:4a:52:82:21:e9:a3:9f:18:
e6:9b:50:f5:cf:3c:03:c6:39:fa:73:02:b0:9a:ec:
51:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B2:51:B9:90:E3:F7:56:38:F4:ED:60:A8:E5:40:E9:06:39:45:43
X509v3 Authority Key Identifier:
keyid:ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fd:ac:b3:04:40:13:2c:b2:59:fc:d8:4a:e4:3c:f1:db:37:
a3:44:d1:27:33:79:42:a3:91:44:3c:0a:9e:75:09:ee:5d:c3:
1c:09:94:e5:5c:35:59:47:6c:c8:68:8c:4e:55:8a:b6:19:20:
d6:6e:e9:88:33:8b:50:ed:49:16:9b:09:dc:59:58:4c:7c:8d:
d4:9d:c0:40:15:49:e4:16:f6:9f:1f:c1:7c:0c:e6:eb:f3:1c:
f9:2e:38:67:2b:93:c5:db:7a:8c:d6:dd:f0:33:aa:2d:ae:3e:
27:77:0b:8f:07:0c:96:b1:e8:22:ee:c9:72:5e:b4:5d:6d:f6:
ce:3b:a7:02:b7:1b:c7:8a:06:7a:e4:e1:27:b3:6e:ab:37:a6:
61:3c:80:37:a7:54:bb:9f:9e:58:9d:1c:17:f7:3f:2b:97:04:
88:58:ff:78:30:c6:14:6a:ab:13:3a:b1:9e:1d:4a:15:cc:53:
3f:b7:77:19:87:ec:fc:33:7d:dd:94:3d:4f:ef:29:a5:e4:d6:
3b:a2:75:20:27:ea:d5:41:56:22:ae:d1:16:f5:ea:a3:d2:25:
26:df:77:84:49:94:6c:f1:80:75:f9:a2:0d:9d:31:d0:d9:e9:
70:86:b3:df:1e:8d:4d:60:e2:fc:8a:c2:4b:f1:32:93:ad:a0:
68:a8:a0:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPgz2NlHtwZxc/9e25NRXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNTkwMmJkZmJkNzRjMzNlYTc2NDUzZDE0NWU3NmY2YWE4
NTdjNDEwHhcNMjYwNDE3MDcwMDUwWhcNMjYwNDE4MDcwMDUwWjAzMTEwLwYDVQQD
EyhiZWIyNTFiOTkwZTNmNzU2MzhmNGVkNjBhOGU1NDBlOTA2Mzk0NTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyph7KZOXvbyvYR5PkxnAFFdwhxRi
NxoXPvbO2ezAqCCG8Vwsqu3tM2tB8Fa8UAUkvNnKrDIhNt1v1nWGB/W45oaxMc5K
3VqXCJBeE7kbtdZvy6GGDpmP0R0BE1yzhVfk4NgDHsI+hi+zDUsMoODHosKTru2U
1kGExg1b8+ynOWuMDKnHESlwd5fQbLhMzhTc59ZqP8MDrbRDSLMJxkJfkIY6ZTdl
FwjfzDZvNW8LtNE9gxMnjDTpao/eKy18JSf/GVBcqpIoiWw0bzkyEVKkEp3ewJGn
ATPt44RKpMfM8Cs8pbmlnFdASlKCIemjnxjmm1D1zzwDxjn6cwKwmuxRHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6yUbmQ4/dWOPTtYKjlQOkGOUVDMB8GA1UdIwQY
MBaAFO1ZAr3710wz6nZFPRRedvaqhXxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1ZrQ3ZmdlhURFBxZGtVOUZGNTI5cXFGZkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80MzAxYzktYzBlZS00MDQwLWE3NDIt
NTAzMzZmNWQzNDBlLzEvN1ZrQ3ZmdlhURFBxZGtVOUZGNTI5cXFGZkVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi80MzAxYzktYzBlZS00MDQwLWE3NDItNTAzMzZmNWQzNDBl
LzEvN1ZrQ3ZmdlhURFBxZGtVOUZGNTI5cXFGZkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/2sswRA
EyyyWfzYSuQ88ds3o0TRJzN5QqORRDwKnnUJ7l3DHAmU5Vw1WUdsyGiMTlWKthkg
1m7piDOLUO1JFpsJ3FlYTHyN1J3AQBVJ5Bb2nx/BfAzm6/Mc+S44ZyuTxdt6jNbd
8DOqLa4+J3cLjwcMlrHoIu7Jcl60XW32zjunArcbx4oGeuThJ7NuqzemYTyAN6dU
u5+eWJ0cF/c/K5cEiFj/eDDGFGqrEzqxnh1KFcxTP7d3GYfs/DN93ZQ9T+8ppeTW
O6J1ICfq1UFWIq7RFvXqo9IlJt93hEmUbPGAdfmiDZ0x0NnpcIaz3x6NTWDi/IrC
S/Eyk62gaKigbw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:25 2026 by rpki-client