Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier: uR+3FcetseMB3yNkT0jIM6meC4quUk3/j5KF1w1C6VQ=
Subject key identifier: 25:FA:B7:4D:B9:96:92:DB:A6:FF:8A:49:6A:84:97:AF:9B:67:A5:D7
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 019F85D77BD38B69F72C993449CDB15AF09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number: 0DD4
Signing time: Tue 21 Jul 2026 18:01:59 +0000
Manifest this update: Tue 21 Jul 2026 18:01:59 +0000
Manifest next update: Wed 22 Jul 2026 18:01:59 +0000
Files and hashes: 1: Q4J6rM1f2cA2ya2qZmwp_lxNoTA.roa (hash: HzeL7gFw7OqzTY853HEGPqmy3+Ng776QO9amdUFW2A8=)
2: Z-jcKXJaSgf1__y9ezg7cGVAl98.roa (hash: ceq2+LIRVnlNgauj63qax+Op8eTt2wAzZKVPQi48mEU=)
3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: BzNk72a2NnSDyuWC/0GW3Cy80ZVtvLa1v3wSCszNE/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d7:7b:d3:8b:69:f7:2c:99:34:49:cd:b1:5a:f0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Jul 21 18:01:59 2026 GMT
Not After : Jul 22 18:01:59 2026 GMT
Subject: CN=25fab74db99692dba6ff8a496a8497af9b67a5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:0e:95:1b:76:2b:83:1b:89:e8:2e:d8:aa:
28:eb:a1:f9:89:93:3a:15:ac:a6:d1:c6:26:05:85:
d5:1e:dc:05:d8:ef:b1:f5:33:37:17:8a:de:7c:d1:
f8:b4:58:3a:c3:15:44:87:8f:e6:c3:01:12:50:7b:
66:90:d4:f5:f9:69:d4:22:37:2c:17:93:7e:ed:ae:
1d:1f:87:12:e6:c0:1b:e4:20:78:62:da:c2:bf:3a:
f4:e0:1f:f7:3a:4a:7a:a4:82:ac:7f:4e:ef:6d:3b:
8e:9f:6b:3b:31:18:cb:36:1c:cd:39:11:f0:f2:a1:
51:96:73:bd:27:2d:3f:44:ae:af:9c:5f:77:cb:34:
05:1f:9e:e7:45:e2:7a:df:cc:48:80:b5:e3:b9:41:
60:fa:0f:45:0a:7f:cd:03:09:7c:20:ea:92:3a:da:
6f:ef:f9:bf:73:fc:2c:7a:4a:65:66:66:61:34:53:
83:5e:57:79:e6:78:00:6a:f1:39:81:50:59:01:ee:
fa:3f:17:69:64:83:51:35:26:85:b6:af:ee:4a:51:
57:e1:4b:a5:58:7b:4c:0b:fb:83:bf:14:22:ae:81:
b0:f9:63:96:73:dd:c0:b2:e8:1d:a6:99:e8:8d:7c:
d1:42:66:7d:a7:f7:ed:25:08:e3:d0:b4:b1:ea:1c:
c7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FA:B7:4D:B9:96:92:DB:A6:FF:8A:49:6A:84:97:AF:9B:67:A5:D7
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ca:6b:e2:41:c0:03:dc:77:98:1f:8c:6f:2b:47:b1:22:93:
df:9e:ed:04:16:27:e1:89:47:b5:bf:cc:1b:40:91:4f:27:ca:
97:c2:f5:3e:b4:55:2d:af:80:04:26:f8:c0:91:55:93:3d:0f:
d2:90:8f:a5:75:96:62:d7:a7:9b:82:46:3b:6f:a3:12:58:0f:
62:b9:8f:c9:fd:b3:b0:7f:d0:09:56:ea:02:12:98:92:bf:4e:
a6:1a:0d:17:f5:cb:08:22:f6:09:63:de:c3:bc:09:05:70:cc:
60:cc:1b:8f:1f:f1:06:73:e8:81:11:50:0e:29:7c:1d:51:f7:
ed:b6:72:d7:73:b9:f5:93:f5:a4:0f:9a:c7:e1:3e:4e:2c:5a:
e2:75:ca:45:76:e8:d2:e3:3a:b3:e3:f1:b3:b5:0b:e5:6c:27:
58:62:a8:af:f0:f1:4b:5b:9c:78:73:5f:42:3a:7d:a8:dd:f5:
c1:e2:6a:9a:e4:23:01:38:28:30:61:70:89:8f:f6:10:5b:c8:
fc:fc:7a:eb:c6:bd:e0:3c:b7:1c:5c:2d:74:07:94:82:df:72:
f9:2e:d2:1e:3c:47:c4:8e:dd:19:8f:13:a6:95:e9:f9:48:17:
94:13:48:b8:92:3b:4c:a9:b4:bd:5b:e1:50:cd:a6:0f:b8:0b:
0d:5d:67:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F13vTi2n3LJk0Sc2xWvCfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNDQzZjdhYWU0N2UwYWIzOGJjZjhkNTM2Y2NhNjAzNTBk
MTcyNzAwHhcNMjYwNzIxMTgwMTU5WhcNMjYwNzIyMTgwMTU5WjAzMTEwLwYDVQQD
EygyNWZhYjc0ZGI5OTY5MmRiYTZmZjhhNDk2YTg0OTdhZjliNjdhNWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3MOlRt2K4Mbiegu2Koo66H5iZM6
Faym0cYmBYXVHtwF2O+x9TM3F4refNH4tFg6wxVEh4/mwwESUHtmkNT1+WnUIjcs
F5N+7a4dH4cS5sAb5CB4YtrCvzr04B/3Okp6pIKsf07vbTuOn2s7MRjLNhzNORHw
8qFRlnO9Jy0/RK6vnF93yzQFH57nReJ638xIgLXjuUFg+g9FCn/NAwl8IOqSOtpv
7/m/c/wsekplZmZhNFODXld55ngAavE5gVBZAe76PxdpZINRNSaFtq/uSlFX4Uul
WHtMC/uDvxQiroGw+WOWc93AsugdppnojXzRQmZ9p/ftJQjj0LSx6hzHOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCX6t025lpLbpv+KSWqEl6+bZ6XXMB8GA1UdIwQY
MBaAFLxEP3quR+CrOLz41TbMpgNQ0XJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEt
NTAzNGYxOTk1M2EzLzEvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEtNTAzNGYxOTk1M2Ez
LzEvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcpr4kHA
A9x3mB+MbytHsSKT357tBBYn4YlHtb/MG0CRTyfKl8L1PrRVLa+ABCb4wJFVkz0P
0pCPpXWWYtenm4JGO2+jElgPYrmPyf2zsH/QCVbqAhKYkr9OphoNF/XLCCL2CWPe
w7wJBXDMYMwbjx/xBnPogRFQDil8HVH37bZy13O59ZP1pA+ax+E+Tixa4nXKRXbo
0uM6s+Pxs7UL5WwnWGKor/DxS1uceHNfQjp9qN31weJqmuQjATgoMGFwiY/2EFvI
/Px668a94Dy3HFwtdAeUgt9y+S7SHjxHxI7dGY8TppXp+UgXlBNIuJI7TKm0vVvh
UM2mD7gLDV1nEw==
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:39:15 2026 by rpki-client