Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier: p6PNC0nb0XLE1YqdzplqhGgkU1BdcvFOejx2J9X+UnA=
Subject key identifier: 8F:DE:6D:3C:89:9F:E9:46:5C:F9:A3:53:B8:6B:C9:09:6A:08:88:B5
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 019CC93F3D0D5F59068FF3678D8D11CC4DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number: 0C63
Signing time: Sat 07 Mar 2026 17:01:30 +0000
Manifest this update: Sat 07 Mar 2026 17:01:30 +0000
Manifest next update: Sun 08 Mar 2026 17:01:30 +0000
Files and hashes: 1: Q4J6rM1f2cA2ya2qZmwp_lxNoTA.roa (hash: HzeL7gFw7OqzTY853HEGPqmy3+Ng776QO9amdUFW2A8=)
2: dENVCD_XZ3nvwZuxkEOco4CHe4U.roa (hash: rRLTwaIJTN8YwcNsiLSuRpjn4wvb6H8iEYEA2TwNDr8=)
3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: paF8SR8HMncjjHCFQmQwkWmnn5USPD6UFKj8w7qzrys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 17:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:3f:3d:0d:5f:59:06:8f:f3:67:8d:8d:11:cc:4d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Mar 7 17:01:30 2026 GMT
Not After : Mar 8 17:01:30 2026 GMT
Subject: CN=8fde6d3c899fe9465cf9a353b86bc9096a0888b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:06:fc:21:65:d0:22:33:c5:5e:29:ec:b3:
b9:1b:16:68:1d:04:02:31:74:4b:9c:27:ae:94:1c:
7c:8c:d0:1f:a1:90:27:e5:b0:e5:65:d0:e6:36:ec:
0f:79:50:6c:c1:07:0b:25:ab:96:c4:37:e8:24:90:
f5:9b:4c:36:e6:d4:5c:a0:f6:1b:df:7d:c3:fa:33:
e2:1c:34:68:93:22:a7:02:ca:73:18:7d:9d:80:3b:
a6:03:e0:11:4a:00:41:4f:5a:46:88:4a:ad:8b:30:
a4:a4:21:56:7a:aa:5d:84:37:25:ce:ea:75:05:b6:
bf:8c:1c:b6:45:3a:d7:d7:48:43:0e:ee:7d:3d:dc:
09:f8:cb:25:8a:a0:d2:32:60:42:56:1c:ed:d2:61:
48:63:97:3e:28:69:57:b1:62:aa:ff:d9:94:ff:e5:
02:0b:51:2f:6e:80:a7:ff:28:ed:4f:03:bb:3b:ba:
80:b3:df:5f:32:be:4c:a1:61:f6:87:b3:46:34:2d:
b7:f4:e9:b6:75:2b:cc:f2:a1:ba:7f:3e:6f:24:16:
7e:f7:4b:de:99:0d:e6:37:33:98:19:16:7d:24:42:
cf:6e:ca:c8:77:58:60:17:de:81:c1:e4:c4:04:05:
c4:45:0c:ca:4d:30:dc:7c:78:c4:f3:aa:96:8c:d8:
a5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DE:6D:3C:89:9F:E9:46:5C:F9:A3:53:B8:6B:C9:09:6A:08:88:B5
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f0:57:ed:3e:15:ad:24:93:5a:34:a3:02:7a:58:a9:23:ff:
e2:ec:88:21:45:06:fe:ad:38:f7:63:da:02:6b:7e:e5:57:fd:
67:19:39:65:ad:27:ec:65:d7:b4:81:5d:cb:ca:e6:1a:df:0e:
16:eb:58:24:7d:72:d9:65:f7:38:6b:27:c8:3c:9f:cf:25:7c:
de:d5:16:31:c4:02:d0:47:e0:97:9b:7c:0a:1a:38:0c:7f:5f:
87:6d:d0:5d:86:0e:c7:43:d6:ad:44:01:31:0b:19:2c:33:8d:
78:73:df:d1:db:f5:8b:bd:91:da:4d:eb:26:b4:b3:25:7f:d3:
76:c2:46:b3:05:4f:84:3c:e9:7b:b4:59:cc:1e:68:cb:4a:ca:
e5:57:6e:f6:5a:5b:b7:5b:32:fc:95:c1:89:fc:5d:e2:3b:80:
e2:ff:13:32:41:d3:86:55:83:ca:17:a7:ff:94:46:0d:61:d0:
07:ee:89:cf:94:d4:b6:c2:76:a5:58:e8:dd:0a:68:e4:94:6a:
5c:b5:92:8c:42:6f:a0:cd:cf:45:34:12:6b:f6:6c:d5:42:14:
87:35:11:1f:22:a6:94:98:8d:e8:e3:da:1e:9f:9c:98:e5:ec:
28:9c:13:ca:9b:06:0d:7f:80:a9:26:9c:d8:0c:ab:f5:b6:98:
94:a5:68:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:45:26 2026 by rpki-client