Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier: 7sx96U7jTIGFvlGZOwU3iEZIedROD4ncvbN8PWFCc3E=
Subject key identifier: 76:89:4D:8A:FB:2B:0F:C6:2D:CD:10:88:12:39:46:9E:F1:B3:06:3A
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 019D2627DBE17CB084C61024A6202F5C6716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number: 0C96
Signing time: Wed 25 Mar 2026 18:00:39 +0000
Manifest this update: Wed 25 Mar 2026 18:00:39 +0000
Manifest next update: Thu 26 Mar 2026 18:00:39 +0000
Files and hashes: 1: Q4J6rM1f2cA2ya2qZmwp_lxNoTA.roa (hash: HzeL7gFw7OqzTY853HEGPqmy3+Ng776QO9amdUFW2A8=)
2: RpGkYDx_nYH3yMdAQ8pBPpPX3-o.roa (hash: iOiQQIXB308RmUIDQRIn1rlftsVJp7BrJi1njcVLXlU=)
3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: sAlnuIZnlv1UU7zdONjtLO6emKKbkVEppFxvuT3zW2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:db:e1:7c:b0:84:c6:10:24:a6:20:2f:5c:67:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Mar 25 18:00:39 2026 GMT
Not After : Mar 26 18:00:39 2026 GMT
Subject: CN=76894d8afb2b0fc62dcd10881239469ef1b3063a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c4:1d:6b:b4:ed:81:c7:f4:09:06:3c:92:a7:
f8:a6:d4:28:74:bd:0f:2e:c2:e0:cf:58:27:e7:f7:
60:20:46:d2:5e:11:16:ba:e9:2b:d3:8c:2b:97:d3:
d3:59:b6:77:cd:ab:dd:0a:84:35:6a:5f:ad:86:ab:
6e:5e:e8:b9:ee:86:fc:94:d0:65:5c:93:c3:ad:5c:
71:ef:5c:c8:da:72:08:71:40:da:3d:53:90:1b:77:
de:6a:cf:28:f3:b7:45:c9:2e:14:bc:b1:12:55:b6:
12:77:9b:8f:1f:6e:32:3c:aa:3a:af:0c:3b:e7:0b:
f8:98:d3:1a:24:9e:10:f3:3b:09:9e:b6:cf:d0:3c:
c2:50:e2:97:87:e1:9b:f3:f6:21:52:56:ea:c0:bd:
95:01:c9:1c:2a:f1:21:6f:5b:3a:fe:4e:b9:1a:da:
5e:79:9d:85:06:f2:bc:6e:7c:f9:3e:e6:5e:57:e3:
1d:7d:ad:db:f2:60:71:02:0e:50:66:ae:69:8e:f8:
eb:53:bb:76:46:86:e6:65:a5:90:e4:8e:cb:20:40:
af:99:5e:32:c9:9a:2c:e6:63:c2:03:9d:72:55:3f:
4f:09:39:2e:d3:ed:5a:f1:2d:61:1c:17:24:a5:a3:
2f:31:3b:8c:0d:af:03:ad:d5:46:1d:ac:6d:80:62:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:89:4D:8A:FB:2B:0F:C6:2D:CD:10:88:12:39:46:9E:F1:B3:06:3A
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8e:df:78:e7:2e:fb:7e:42:8d:d1:a7:03:cb:cb:b2:af:ed:
95:4a:1d:5d:4c:22:ea:73:71:68:6d:d8:9b:8e:ef:2c:ad:63:
f1:12:b5:65:66:ec:12:ec:2b:ac:f1:5d:6c:76:7e:8c:77:19:
51:2e:7d:8c:06:93:89:a8:09:35:2c:8d:fa:98:06:6e:6b:40:
4e:60:25:d4:94:bb:65:36:0e:10:54:9f:2d:07:78:53:82:65:
92:9b:8b:f5:4c:f9:76:ad:d8:96:46:36:b6:ac:3b:ab:81:a6:
25:63:05:5c:18:08:dc:ec:c5:8f:74:f2:30:b8:c0:19:da:6d:
61:cb:43:83:d6:e4:71:ff:8e:ec:fb:5b:f6:ed:04:f6:f9:6f:
df:24:4e:81:04:c2:91:5e:24:21:59:aa:43:66:c0:38:97:d1:
a8:38:ac:71:01:4b:2e:fb:76:2b:96:1c:b3:15:0c:b6:bd:67:
77:d6:db:cf:dd:1f:8e:ef:e6:b9:0a:fd:3f:f5:84:ba:e7:1c:
18:98:96:f5:a1:0f:61:b8:c4:c7:d2:cb:90:a2:c4:53:e7:95:
d0:10:11:80:a1:08:6a:52:97:c8:73:65:cb:2d:e0:13:e6:a4:
9a:2a:3c:06:70:bd:67:6f:60:64:79:b4:ab:db:f6:45:e1:1c:
46:8f:b4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:47 2026 by rpki-client