Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier: vkCRyQhuVrT2+Ld4QO/e3w6l8ajQ7hNisKyyYeRuV78=
Subject key identifier: D3:75:28:EC:22:47:78:FB:C9:54:4E:88:52:F3:47:07:E3:B9:07:4A
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 019E1F479690169689C1C7EEF83309E0A42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number: 0D17
Signing time: Wed 13 May 2026 03:00:45 +0000
Manifest this update: Wed 13 May 2026 03:00:45 +0000
Manifest next update: Thu 14 May 2026 03:00:45 +0000
Files and hashes: 1: Q4J6rM1f2cA2ya2qZmwp_lxNoTA.roa (hash: HzeL7gFw7OqzTY853HEGPqmy3+Ng776QO9amdUFW2A8=)
2: RpGkYDx_nYH3yMdAQ8pBPpPX3-o.roa (hash: iOiQQIXB308RmUIDQRIn1rlftsVJp7BrJi1njcVLXlU=)
3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: qgNhU080J3Rjwg6kzs9sqiMZT7qyYPqjh1MIXRmpQZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:96:90:16:96:89:c1:c7:ee:f8:33:09:e0:a4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: May 13 03:00:45 2026 GMT
Not After : May 14 03:00:45 2026 GMT
Subject: CN=d37528ec224778fbc9544e8852f34707e3b9074a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:97:26:91:c3:72:16:e8:c8:71:74:e6:dd:
26:eb:d7:32:5f:87:bc:6d:75:31:95:c8:4f:0c:bc:
1b:b5:1a:21:47:fe:92:df:7a:84:04:c8:05:e5:ec:
12:ec:c2:14:e3:1d:01:59:32:c6:1d:81:4c:f3:ac:
5d:15:c8:10:a7:c2:89:d2:99:0d:c1:9a:3b:8f:32:
ce:b5:49:64:34:a9:3e:55:c3:23:34:02:f8:19:9b:
91:98:84:31:d2:c5:3c:71:0e:80:de:f6:29:dd:25:
18:1f:71:19:f2:0c:d0:ac:4c:fe:7d:54:a7:c4:86:
aa:39:5f:39:2f:da:9b:fd:56:33:6b:69:51:9b:b3:
2d:30:ee:b3:a0:e4:8b:0e:b8:a2:fb:98:20:58:03:
7b:de:1b:96:ba:15:98:4f:83:86:35:84:59:a7:82:
ae:7a:e6:c3:e5:90:ef:2b:61:ed:1a:6a:d9:1f:d1:
fd:b5:2a:21:70:9b:e0:47:9f:d4:ee:96:11:51:cd:
bf:0b:43:72:c8:1c:8d:37:b1:9a:86:93:10:3e:33:
79:43:11:c0:af:0d:d9:60:f6:1f:f5:4c:79:f8:ce:
e0:af:c0:27:a4:93:f9:c4:28:c4:a3:5b:8b:65:27:
a9:4b:93:77:34:39:7d:5d:1d:af:3b:05:bb:bb:41:
fc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:75:28:EC:22:47:78:FB:C9:54:4E:88:52:F3:47:07:E3:B9:07:4A
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5a:91:b6:1a:79:99:25:bd:28:73:4e:25:a1:00:57:d7:f0:
73:70:f5:4a:63:9c:68:a5:83:62:38:b2:fc:2e:07:a0:69:b9:
4d:df:71:1c:6f:6e:6e:0f:93:9c:24:88:e9:b9:8d:2d:97:7e:
9d:17:59:68:4a:2d:b8:58:cd:0e:5c:2d:91:a0:20:01:63:81:
6e:3c:75:e3:28:a7:68:15:79:3f:20:87:90:87:a6:69:41:6f:
d5:b2:53:65:eb:59:46:65:60:39:6a:4b:93:a0:ef:9f:e7:03:
b9:79:6a:36:14:e0:92:8f:c4:68:57:da:b5:39:cc:c3:a6:61:
90:40:1d:bd:1a:87:60:a1:c9:1e:b3:9b:05:67:20:cb:48:6e:
1e:ed:67:e4:6d:54:6c:e6:51:8a:11:e9:ff:ef:91:4f:4b:3f:
0d:95:49:40:86:24:ef:4e:f5:aa:14:74:03:80:f8:51:58:bb:
94:96:09:0f:f7:a0:e7:3a:5d:e8:18:0a:b8:07:cf:f3:22:68:
f1:46:07:40:90:97:60:64:ad:ee:ed:6c:0e:c4:48:aa:28:4f:
62:a2:c8:4a:fd:c3:0f:0b:55:18:d4:e3:5a:cb:a8:12:61:79:
b5:bc:0b:13:d2:50:38:59:8f:8c:bd:72:0a:8a:9c:5b:8c:3f:
a7:8b:3c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:57 2026 by rpki-client