Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
File: 7VkCvfvXTDPqdkU9FF529qqFfEE.mft (raw, json)
Hash identifier: de9qTrpLZSCppXix0hOCV8taqxgI5mugfpmyKOTWQFg=
Subject key identifier: 20:EB:EF:2F:E4:F6:F6:CB:9E:58:42:BF:90:5C:9C:9D:97:5C:CB:DB
Authority key identifier: ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
Certificate issuer: /CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Certificate serial: 01A1DF4C1493221EA4A143D563DF3EAB13A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 13:01:07 +0000
Manifest this update: Sun 15 Nov 2026 13:01:07 +0000
Manifest next update: Mon 16 Nov 2026 13:01:07 +0000
Files and hashes: 1: 7VkCvfvXTDPqdkU9FF529qqFfEE.crl (hash: XklTZar+bHWfl1Q1t9ZmQWnsUHfWcZxaCg4E4nfyaR4=)
2: jFhG1hKVFvuDB6uN1JYtoXLFZ7I.roa (hash: MaeW7NGKYLi/aVWjBTCyu07kjnejwGHW7+DG/UsZBN0=)
3: r_Ago4uqCeflNjXnl64JVeyJnPY.roa (hash: zoRvGfgPV8+vuTSlqpQsyZ8HStEB8X0DXmMgCi6yhm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:14:93:22:1e:a4:a1:43:d5:63:df:3e:ab:13:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Validity
Not Before: Nov 15 13:01:07 2026 GMT
Not After : Nov 16 13:01:07 2026 GMT
Subject: CN=20ebef2fe4f6f6cb9e5842bf905c9c9d975ccbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:0d:6d:02:02:f2:f3:8e:f5:f6:7c:02:82:
38:b2:47:85:57:48:37:07:22:9e:76:e8:13:7c:09:
30:c9:01:a2:ba:ff:93:af:aa:2e:49:10:3f:ab:0f:
12:e9:bb:66:df:73:67:9f:30:de:83:73:4d:3e:31:
85:91:6c:6d:f7:ff:a0:6e:df:bb:c6:87:d8:ea:b0:
fe:d5:1b:e0:8d:29:d6:20:b6:1c:54:5d:eb:56:c4:
c4:04:b7:89:ac:ab:a3:83:f5:29:b7:b9:c6:ae:ad:
1f:6a:9e:7c:3f:2a:0b:c6:2d:12:2e:f2:e2:25:3f:
55:24:7a:3b:a2:dd:b8:cc:71:a8:f3:c8:4a:66:4e:
1c:0e:1e:4d:7f:a3:7e:5e:2b:cc:01:ec:63:2a:58:
e7:2a:a4:e4:80:e1:61:93:9c:5c:36:60:fc:b2:6c:
b3:09:5b:78:22:c7:a7:58:9c:8a:e7:83:ea:a9:df:
e6:b2:a4:17:a6:a7:c0:dd:c7:cb:3b:af:9d:b5:d0:
2f:37:d3:15:aa:ad:4d:98:39:9a:a0:e9:73:00:31:
64:8c:90:70:cd:e5:a1:19:66:6a:86:64:aa:70:6e:
35:b0:1b:1e:7d:1d:0d:5c:dd:0e:eb:af:43:95:d0:
f8:c2:a0:2c:bd:ee:b3:af:5b:c1:8a:00:09:84:55:
a4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EB:EF:2F:E4:F6:F6:CB:9E:58:42:BF:90:5C:9C:9D:97:5C:CB:DB
X509v3 Authority Key Identifier:
keyid:ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5c:61:54:19:b2:cd:53:e7:46:83:c0:79:be:bf:a5:4f:d8:
08:1f:a4:3c:b9:18:88:c8:1f:59:0a:5f:c4:10:2a:f4:65:f8:
0f:72:ff:30:f7:8f:a4:f1:cf:2b:ed:d4:de:93:58:e6:13:eb:
d3:9a:71:a9:0c:c7:cd:2e:9c:77:f3:7a:31:c1:7a:0c:70:a9:
86:06:12:e7:8d:69:c1:18:5b:c2:f7:c1:8d:3b:bb:ec:5b:6d:
16:26:13:f9:3d:f9:e6:37:45:6c:a8:de:06:6a:70:67:c3:9a:
e4:0d:63:06:78:65:02:03:a8:25:6e:c7:1c:4e:8c:6a:39:3c:
1e:49:b0:7b:de:e8:75:e3:01:d0:a7:2c:55:52:e3:aa:75:03:
06:a9:21:42:d0:aa:d4:ef:78:86:4b:fa:60:b1:f0:0a:12:c5:
0b:d8:91:01:51:15:33:6d:0b:5a:16:9f:91:b5:e0:73:09:f3:
d5:07:c5:ed:13:1a:a1:ec:dd:fe:a5:19:88:bc:49:f9:5c:ae:
f2:f4:8a:4a:66:e5:25:00:0f:b9:50:65:40:38:69:69:47:93:
2e:1f:eb:e6:19:3b:d3:77:f4:56:54:08:5a:e7:f5:b8:60:8c:
71:b3:2e:e7:81:fd:18:42:09:ec:f8:8a:e9:3c:e1:f9:a2:99:
e2:92:67:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:20:31 2026 by rpki-client