Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
File: veasKPlU4T3LfbabwiK3hbTXXyw.mft (raw, json)
Hash identifier: EckZ7eFOLWnh5GkiXD+z4LjBOqPxdzZ9HWcaiD6YOaA=
Subject key identifier: 1D:6D:69:B8:F7:4E:22:9A:69:4C:9C:20:E5:BD:0C:84:25:95:89:A6
Authority key identifier: BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
Certificate issuer: /CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Certificate serial: 019D0477FAC091ECF391C9103D1651AA9C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
Manifest number: 0F5B
Signing time: Thu 19 Mar 2026 05:01:05 +0000
Manifest this update: Thu 19 Mar 2026 05:01:05 +0000
Manifest next update: Fri 20 Mar 2026 05:01:05 +0000
Files and hashes: 1: fNmRYBB_y5qrTpD_HG4Mj6gKJGg.roa (hash: GCMtnktG1EHO/VdELDulMItSCpc0TfpSbN+GlUgxuiE=)
2: h7Uzdn3QCG9HXrxBJJQfKOf_wrU.roa (hash: B5SpfQD49xaKavcSBPmQWnJvbXttVFrT+Gp3dIpS18Y=)
3: i__p0JsHuiqPylXpC5Eh8HJk-q0.roa (hash: tD7G29bUtBn0T0NGAjmoXjsJogAe47kZEPeNJWkADNw=)
4: veasKPlU4T3LfbabwiK3hbTXXyw.crl (hash: bKY/8rRWSp5ipqgSGdjyetzJTI5NPVFlTJlxDj8vd7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:77:fa:c0:91:ec:f3:91:c9:10:3d:16:51:aa:9c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Validity
Not Before: Mar 19 05:01:05 2026 GMT
Not After : Mar 20 05:01:05 2026 GMT
Subject: CN=1d6d69b8f74e229a694c9c20e5bd0c84259589a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1e:0b:88:c2:b8:c2:ff:02:20:bc:d7:36:3f:
07:8f:7b:2d:cd:3e:ac:8e:b7:d2:d3:1e:c3:be:44:
18:e4:44:89:ad:22:3e:2c:f2:81:57:af:86:40:a0:
8d:de:d4:7e:3e:ff:7d:2c:20:37:21:16:84:58:a7:
2c:e0:96:b6:22:d5:3b:82:5c:91:32:06:30:6a:81:
ec:0d:bb:65:79:a1:cd:d8:60:9f:20:67:37:ec:1b:
6f:cb:20:79:06:94:10:1c:1f:24:3a:b4:8a:38:86:
4b:34:0d:95:cd:d0:31:9b:5a:a0:f5:5a:15:32:c4:
81:12:26:bc:48:41:ba:ce:47:99:74:58:6a:98:32:
58:56:1b:6a:47:41:ca:c6:7f:23:88:ae:ca:dd:c1:
27:de:0c:ac:67:90:1e:89:83:02:20:1d:03:b6:89:
5b:c6:b0:6c:b1:f9:d8:67:0b:21:dd:03:23:74:7a:
e5:42:0e:24:1b:a6:b4:f5:e5:98:53:18:a0:1d:1a:
b1:43:24:d4:3f:e8:91:4c:76:66:dd:ef:f9:c5:e2:
f5:ba:de:19:9a:8e:55:78:57:4f:69:98:55:87:67:
e8:4f:d5:27:29:b2:8a:aa:66:d9:c7:0c:9d:d1:ee:
24:e0:de:34:74:b4:49:6f:e9:b0:2a:b2:64:f1:53:
3c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6D:69:B8:F7:4E:22:9A:69:4C:9C:20:E5:BD:0C:84:25:95:89:A6
X509v3 Authority Key Identifier:
keyid:BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4d:f8:7f:9b:66:26:6b:9f:7d:c1:0d:59:8b:3d:bb:ab:ae:
c4:d8:7e:27:dd:89:cc:2c:11:fe:93:e4:cf:bd:e0:60:19:74:
c8:d2:d7:6c:9d:64:c6:30:e2:f5:d4:88:66:fc:fc:72:8a:ca:
18:4e:7f:05:35:2b:c3:26:ed:4d:3f:72:33:d5:84:28:8c:6a:
33:54:9a:12:91:65:e4:7b:e0:18:92:25:37:16:a6:fc:58:d0:
df:6c:37:92:22:22:ec:8b:75:b7:ed:02:58:7e:1d:ef:2a:7a:
ae:67:fd:fc:1e:3c:f7:62:5f:96:3e:1c:cb:51:2f:20:c6:87:
d4:11:85:69:b8:d5:e1:9e:67:d5:7c:77:eb:4c:94:f6:af:bf:
de:ef:1b:5b:f9:14:20:f5:4c:b4:03:94:5e:45:46:15:d2:b8:
13:83:b9:86:39:11:61:5c:22:5d:04:35:f2:28:ee:dc:20:fc:
fc:19:76:e4:b2:97:50:c7:f8:19:07:b0:5c:90:3b:f3:91:84:
75:1b:c8:2e:d0:2f:35:6f:a7:6b:81:56:a4:0a:34:b2:1a:f2:
84:87:48:32:6a:2f:50:08:5b:0f:c5:56:f7:b6:37:e3:93:84:
53:44:4f:d6:8c:ab:61:8b:78:46:84:de:9e:f4:92:66:1e:31:
08:d3:54:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0Ed/rAkezzkckQPRZRqpwjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTZhYzI4Zjk1NGUxM2RjYjdkYjY5YmMyMjJiNzg1YjRk
NzVmMmMwHhcNMjYwMzE5MDUwMTA1WhcNMjYwMzIwMDUwMTA1WjAzMTEwLwYDVQQD
EygxZDZkNjliOGY3NGUyMjlhNjk0YzljMjBlNWJkMGM4NDI1OTU4OWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh4LiMK4wv8CILzXNj8Hj3stzT6s
jrfS0x7DvkQY5ESJrSI+LPKBV6+GQKCN3tR+Pv99LCA3IRaEWKcs4Ja2ItU7glyR
MgYwaoHsDbtleaHN2GCfIGc37BtvyyB5BpQQHB8kOrSKOIZLNA2VzdAxm1qg9VoV
MsSBEia8SEG6zkeZdFhqmDJYVhtqR0HKxn8jiK7K3cEn3gysZ5AeiYMCIB0Dtolb
xrBssfnYZwsh3QMjdHrlQg4kG6a09eWYUxigHRqxQyTUP+iRTHZm3e/5xeL1ut4Z
mo5VeFdPaZhVh2foT9UnKbKKqmbZxwyd0e4k4N40dLRJb+mwKrJk8VM83QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1tabj3TiKaaUycIOW9DIQllYmmMB8GA1UdIwQY
MBaAFL3mrCj5VOE9y322m8Iit4W0118sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVhc0tQbFU0VDNMZmJhYndpSzNoYlRYWHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81YjRlMTMtYjNkZC00ZDhhLThlNzEt
Y2FlNmM3MjVkOTJmLzEvdmVhc0tQbFU0VDNMZmJhYndpSzNoYlRYWHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81YjRlMTMtYjNkZC00ZDhhLThlNzEtY2FlNmM3MjVkOTJm
LzEvdmVhc0tQbFU0VDNMZmJhYndpSzNoYlRYWHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASE34f5tm
JmuffcENWYs9u6uuxNh+J92JzCwR/pPkz73gYBl0yNLXbJ1kxjDi9dSIZvz8corK
GE5/BTUrwybtTT9yM9WEKIxqM1SaEpFl5HvgGJIlNxam/FjQ32w3kiIi7It1t+0C
WH4d7yp6rmf9/B4892Jflj4cy1EvIMaH1BGFabjV4Z5n1Xx360yU9q+/3u8bW/kU
IPVMtAOUXkVGFdK4E4O5hjkRYVwiXQQ18iju3CD8/Bl25LKXUMf4GQewXJA785GE
dRvILtAvNW+na4FWpAo0shryhIdIMmovUAhbD8VW97Y345OEU0RP1oyrYYt4RoTe
nvSSZh4xCNNU8w==
-----END CERTIFICATE-----
Generated at Thu Mar 19 13:45:09 2026 by rpki-client