Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier: si0nzejkjdQN3mk67Rd+y3Ie57teT4JBWbWLdy22D68=
Subject key identifier: 6C:3F:99:AE:EE:4D:0D:D9:EF:6E:05:11:22:1D:09:85:36:53:CA:B0
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 01A1DE40881DF85844CF2D4B22F9C61D9AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number: 0F0D
Signing time: Sun 15 Nov 2026 08:08:53 +0000
Manifest this update: Sun 15 Nov 2026 08:08:53 +0000
Manifest next update: Mon 16 Nov 2026 08:08:53 +0000
Files and hashes: 1: Y_BECm3wsO_V-qTtYESs25RUX-o.roa (hash: oZMfMQOR9rwSGeRo/iQrKQBzqynXmP8LAzoSEuWTo98=)
2: Z-jcKXJaSgf1__y9ezg7cGVAl98.roa (hash: ceq2+LIRVnlNgauj63qax+Op8eTt2wAzZKVPQi48mEU=)
3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: E57wgvSd2RXezyt//Xl2pn6a48i/38OryWiQENwwn/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:40:88:1d:f8:58:44:cf:2d:4b:22:f9:c6:1d:9a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Nov 15 08:08:53 2026 GMT
Not After : Nov 16 08:08:53 2026 GMT
Subject: CN=6c3f99aeee4d0dd9ef6e0511221d09853653cab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:d8:ee:ee:22:5c:84:9f:49:e8:62:c1:83:
ed:a5:87:81:04:50:31:fe:8f:00:b8:3a:d2:d4:f5:
63:32:ff:1e:90:08:3d:64:c9:e6:b9:69:51:69:c1:
f9:26:bf:d1:8d:45:72:e8:b0:d5:8a:92:e6:86:4c:
45:59:c5:e1:0b:63:b9:93:7f:fd:39:9e:d8:3c:cd:
d0:66:6e:b4:5c:ed:4f:ec:01:d7:1b:e6:ec:12:6e:
b4:e4:be:b6:15:81:2d:3a:11:fb:7b:55:6f:d8:cb:
fc:76:95:5a:dd:1f:7b:a4:8f:76:23:db:72:8c:76:
6b:26:86:c9:8b:7a:f0:80:6f:ee:45:06:f7:3f:6c:
34:e0:fc:dc:3c:ee:c8:a5:b0:3d:80:85:06:0c:89:
73:9d:7d:8c:46:a2:4d:49:40:31:06:fe:69:0e:aa:
83:30:7e:78:1c:ab:c6:8c:ae:5b:55:26:c7:be:80:
d6:08:b6:3c:a3:f4:0b:00:ea:3f:d1:87:65:42:ea:
10:cf:af:55:21:09:e4:72:14:bc:24:76:35:a2:e3:
51:69:a7:4e:ac:9c:a2:33:5b:12:43:9f:9c:7e:8c:
b9:b7:e3:be:e9:fb:3f:b8:50:fa:6c:9d:c7:a6:57:
8a:af:00:73:64:0e:97:46:db:2c:ec:83:bd:f8:90:
18:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3F:99:AE:EE:4D:0D:D9:EF:6E:05:11:22:1D:09:85:36:53:CA:B0
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a4:cd:a5:3e:06:f0:26:cd:06:ab:70:c7:cd:41:ee:97:09:
d8:06:33:71:09:74:12:cf:32:2f:5c:63:b4:93:d6:f8:60:b7:
b5:cf:ee:b3:3f:61:35:55:c2:43:c6:68:a6:14:e8:ec:41:99:
95:91:8a:4a:9a:d7:34:4c:6d:14:a9:da:3e:db:72:04:c6:2b:
27:7d:af:71:35:bf:ee:52:c4:63:50:da:41:0e:a9:41:5e:32:
53:59:49:d8:cd:a8:39:ea:b4:5c:b5:5b:19:0c:4a:5b:26:03:
d9:5a:41:cb:e7:9e:03:46:32:1f:46:73:fb:1f:04:d5:b0:04:
d0:66:6b:34:c3:5b:58:aa:1c:36:7e:22:f3:54:f5:db:49:19:
5c:63:f5:01:22:3a:08:82:63:2a:01:f9:78:1e:47:d9:a9:dd:
03:6e:6a:fb:9c:95:22:c0:6d:75:fb:98:a9:c7:c6:d1:82:4c:
c5:6a:1f:29:fa:6a:3d:3d:a4:8b:68:da:e9:a7:71:12:8e:6a:
5c:c6:97:bc:48:80:f0:39:e6:b8:1e:73:43:76:f1:1f:7f:35:
2a:6f:3d:73:ba:1e:96:14:1b:76:9a:3a:71:37:48:b8:69:5e:
5e:07:c9:07:51:e8:34:88:6a:b2:df:1a:21:8b:4c:dd:03:b2:
b2:8f:e9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:21:25 2026 by rpki-client