Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier: lX4pYsFlYczt+raxEQjV8LLey1xTm2XrizbScse20is=
Subject key identifier: FB:F8:97:CE:55:46:ED:19:4D:5F:FB:D4:62:59:0F:85:19:43:1C:65
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 01A0D6B9ED4D694C0A5689FC7951249AFD69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number: 0E84
Signing time: Fri 25 Sep 2026 04:01:44 +0000
Manifest this update: Fri 25 Sep 2026 04:01:44 +0000
Manifest next update: Sat 26 Sep 2026 04:01:44 +0000
Files and hashes: 1: W28N2aH7rJD1peqoBhtqKYPY7_E.roa (hash: tOKsbKCK7g2h1Go/dLgwE5AYSeB8sdDLnvCMgHs+pfQ=)
2: Z-jcKXJaSgf1__y9ezg7cGVAl98.roa (hash: ceq2+LIRVnlNgauj63qax+Op8eTt2wAzZKVPQi48mEU=)
3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: 7ih3Dq1NSO8623D/a/48s5E+MqBj3D7OJegwR/7gJZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:ed:4d:69:4c:0a:56:89:fc:79:51:24:9a:fd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Sep 25 04:01:44 2026 GMT
Not After : Sep 26 04:01:44 2026 GMT
Subject: CN=fbf897ce5546ed194d5ffbd462590f8519431c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:63:f2:6b:52:d7:5d:c0:6a:5c:77:5f:7f:
20:da:c5:3c:c5:bd:e6:35:35:ea:b1:3d:3c:7e:38:
16:35:0e:de:da:c9:26:19:0c:97:59:dc:1b:82:15:
54:62:a1:b7:60:88:f4:e3:1e:36:ea:ab:dd:05:39:
32:58:7a:c8:bd:d2:9d:27:04:3a:ff:da:cb:94:31:
0b:48:44:4c:ca:20:41:b7:7f:7c:b8:25:7b:db:65:
55:d3:2c:fb:b1:84:2e:29:cf:b7:66:f7:b9:a0:43:
2b:85:0f:53:99:b3:a9:4b:9e:6b:ba:a8:8f:f1:36:
1c:6b:42:c9:9b:77:3a:9d:9b:e4:5a:6e:b3:bb:c8:
43:84:40:f3:ae:dc:a1:94:f1:14:1a:1b:92:23:8c:
56:48:d9:4e:8e:2c:a8:d1:8c:d5:25:9e:58:60:08:
20:00:98:f4:f4:67:65:49:93:d1:2f:f3:06:9a:1d:
31:c4:aa:9b:74:a3:b0:ea:cb:17:94:c2:90:6d:47:
69:2c:76:77:a6:8a:21:74:bf:41:d4:d8:40:3b:2c:
ef:c5:28:70:11:11:9f:fe:41:04:6e:c1:7c:59:fa:
45:11:a2:dd:d3:78:ca:51:d3:0e:c0:23:29:96:f7:
ad:c9:65:ba:e3:53:d1:62:25:d3:01:73:76:73:e7:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F8:97:CE:55:46:ED:19:4D:5F:FB:D4:62:59:0F:85:19:43:1C:65
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6d:5b:9e:b9:0e:75:a9:27:91:e3:97:37:ec:92:90:b0:04:
71:58:96:f3:b1:77:52:0a:8d:e3:2d:74:a3:8e:d1:4a:bf:ce:
9d:cf:4f:e8:16:e4:cf:8e:b7:25:25:28:1f:fc:a1:c6:5f:91:
8b:e1:9b:20:12:39:ca:1b:24:67:f4:fc:44:d0:fd:04:a6:95:
86:61:a2:88:1e:26:64:14:98:2b:d4:91:e6:77:f1:4c:d7:94:
e3:ce:1e:a7:13:03:05:78:30:9b:3d:bd:77:e6:e8:4d:c3:61:
a9:83:87:10:28:7a:3b:06:56:f3:55:85:cb:eb:5d:c4:75:06:
35:25:af:69:5d:a1:23:a6:1e:a0:66:85:9b:4c:22:96:b5:e6:
79:71:52:7e:6d:ce:86:d0:4f:ab:f1:b6:68:e1:95:b3:5d:1c:
6e:ba:40:70:79:15:ff:79:36:22:c6:f9:2e:bd:26:23:40:09:
84:08:d6:c5:e1:ff:11:b5:df:bd:05:d9:80:4a:9d:27:93:4d:
14:78:e2:ba:70:34:7d:df:c2:a8:c8:0f:65:e8:a9:17:a9:a6:
b3:9d:16:bb:90:e1:9f:ca:cf:c2:74:2e:ee:d1:4a:02:e7:5c:
48:3f:4b:5d:69:30:39:de:fa:0a:fe:a8:2d:46:d7:1c:62:12:
31:f4:33:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:56:47 2026 by rpki-client