Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier: TQ9xZfmJV2P7/EFdLIuw2G+GFETCkV2EAlJ4e2LGIKI=
Subject key identifier: 4C:0E:99:21:E0:8D:0D:B8:28:36:73:31:F7:4F:E8:6A:59:A3:67:E1
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 01A18A52FC7DA208AC33B9058EC2F9C68D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number: 0EE1
Signing time: Fri 30 Oct 2026 01:00:56 +0000
Manifest this update: Fri 30 Oct 2026 01:00:56 +0000
Manifest next update: Sat 31 Oct 2026 01:00:56 +0000
Files and hashes: 1: W28N2aH7rJD1peqoBhtqKYPY7_E.roa (hash: tOKsbKCK7g2h1Go/dLgwE5AYSeB8sdDLnvCMgHs+pfQ=)
2: Z-jcKXJaSgf1__y9ezg7cGVAl98.roa (hash: ceq2+LIRVnlNgauj63qax+Op8eTt2wAzZKVPQi48mEU=)
3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: qq0znjn/ZlcUz+lDNlovxvrJioioG5hNUWDT72090L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:52:fc:7d:a2:08:ac:33:b9:05:8e:c2:f9:c6:8d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Oct 30 01:00:56 2026 GMT
Not After : Oct 31 01:00:56 2026 GMT
Subject: CN=4c0e9921e08d0db828367331f74fe86a59a367e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:35:ae:90:9d:b7:9f:cf:a7:84:a2:78:ab:
7f:1a:30:e4:20:aa:34:8f:42:30:74:3f:ab:e9:d0:
a7:07:a8:a1:1c:86:88:71:6c:ac:46:5a:06:60:1e:
26:19:62:24:f5:e6:c2:3a:c9:74:5b:96:af:81:58:
98:79:88:ff:ba:ae:a6:d1:0d:e9:4a:5d:19:96:d7:
f5:7c:37:67:8f:13:7e:60:02:b7:e8:65:2b:74:f0:
88:35:b1:9f:40:1e:1a:51:8d:b1:41:05:3a:7a:09:
ba:87:c8:73:61:9a:ea:06:12:24:21:cf:fb:0e:3b:
a5:94:e2:58:56:7f:5a:f5:0e:b7:04:8f:e8:1c:31:
0d:f7:ec:73:40:3f:cb:c7:e0:ba:14:fa:ad:23:7e:
7f:50:be:52:78:81:7e:c0:23:82:ce:af:d0:c0:fd:
18:dd:30:86:3c:af:4c:54:ba:26:7c:4a:73:86:b7:
96:7e:d5:57:7a:1c:8b:2b:4b:f4:9c:9f:62:fd:38:
af:3e:52:97:bf:cd:7c:ca:ac:d8:ab:e2:9e:ce:bc:
b2:c5:5f:ff:ed:e8:67:8c:f1:2f:0f:12:27:e1:42:
45:28:f5:69:5e:c4:d8:f5:52:c3:88:20:70:70:7b:
bb:0c:ee:56:8c:da:ce:09:c6:e8:c1:cc:0f:6b:50:
38:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0E:99:21:E0:8D:0D:B8:28:36:73:31:F7:4F:E8:6A:59:A3:67:E1
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:09:2b:3c:be:74:49:52:90:d9:63:b7:2b:df:59:99:0c:f9:
6b:e2:04:87:87:0f:92:38:b2:2b:f1:50:9f:7e:95:82:c6:2b:
80:c7:ef:45:73:5d:4c:cd:d2:1c:8c:59:8a:2e:ed:db:6b:b1:
4c:d8:cd:6b:b2:77:57:64:d8:98:66:2e:3f:43:13:02:7c:1a:
04:6b:6f:14:aa:b1:bb:ac:10:5a:10:ce:be:83:ca:13:b0:5d:
a2:6e:ac:a7:04:ae:1d:f7:6a:59:48:f9:2d:a3:12:50:6f:49:
ad:bd:ff:1d:0a:97:09:cc:29:f0:4d:d3:ba:5b:65:1b:7a:3c:
af:37:1a:1c:cb:eb:e8:82:c4:cb:7f:c1:87:d6:a5:65:23:2e:
5d:3c:7a:f1:f6:a9:f2:21:68:d6:ea:80:0a:48:d7:af:ed:ea:
ad:6e:0a:7d:54:31:a7:a2:9b:d7:35:c1:cb:4a:d6:10:de:5f:
39:03:aa:b2:6e:9e:ed:00:7a:cc:c5:25:39:10:e9:b4:16:22:
7d:df:7f:e8:f0:f2:4c:3c:6d:04:3a:f9:bb:a6:7f:dd:c2:b9:
aa:f4:68:59:35:c3:e7:f3:2c:83:ce:44:fd:7e:51:ec:5c:8d:
05:12:38:68:4b:fd:51:5a:66:82:c4:9b:1a:d2:06:80:9d:d1:
d7:d5:d5:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGKUvx9ogisM7kFjsL5xo1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNDQzZjdhYWU0N2UwYWIzOGJjZjhkNTM2Y2NhNjAzNTBk
MTcyNzAwHhcNMjYxMDMwMDEwMDU2WhcNMjYxMDMxMDEwMDU2WjAzMTEwLwYDVQQD
Eyg0YzBlOTkyMWUwOGQwZGI4MjgzNjczMzFmNzRmZTg2YTU5YTM2N2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+s1rpCdt5/Pp4SieKt/GjDkIKo0
j0IwdD+r6dCnB6ihHIaIcWysRloGYB4mGWIk9ebCOsl0W5avgViYeYj/uq6m0Q3p
Sl0Zltf1fDdnjxN+YAK36GUrdPCINbGfQB4aUY2xQQU6egm6h8hzYZrqBhIkIc/7
DjullOJYVn9a9Q63BI/oHDEN9+xzQD/Lx+C6FPqtI35/UL5SeIF+wCOCzq/QwP0Y
3TCGPK9MVLomfEpzhreWftVXehyLK0v0nJ9i/TivPlKXv818yqzYq+KezryyxV//
7ehnjPEvDxIn4UJFKPVpXsTY9VLDiCBwcHu7DO5WjNrOCcbowcwPa1A4xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwOmSHgjQ24KDZzMfdP6GpZo2fhMB8GA1UdIwQY
MBaAFLxEP3quR+CrOLz41TbMpgNQ0XJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEt
NTAzNGYxOTk1M2EzLzEvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEtNTAzNGYxOTk1M2Ez
LzEvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAkrPL50
SVKQ2WO3K99ZmQz5a+IEh4cPkjiyK/FQn36VgsYrgMfvRXNdTM3SHIxZii7t22ux
TNjNa7J3V2TYmGYuP0MTAnwaBGtvFKqxu6wQWhDOvoPKE7Bdom6spwSuHfdqWUj5
LaMSUG9Jrb3/HQqXCcwp8E3TultlG3o8rzcaHMvr6ILEy3/Bh9alZSMuXTx68fap
8iFo1uqACkjXr+3qrW4KfVQxp6Kb1zXBy0rWEN5fOQOqsm6e7QB6zMUlORDptBYi
fd9/6PDyTDxtBDr5u6Z/3cK5qvRoWTXD5/Msg85E/X5R7FyNBRI4aEv9UVpmgsSb
GtIGgJ3R19XVfg==
-----END CERTIFICATE-----
Generated at Fri Oct 30 05:09:51 2026 by rpki-client