Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier: ftv4KMQaYdNoYl8PddhoSJej61qIZjh628/QU/N/3EE=
Subject key identifier: 25:C9:C3:5F:2C:BB:55:A4:C8:B8:73:99:94:42:DA:05:69:B4:9D:C1
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 019FAC762DC6BDFB2114B0FC4810250BA22F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number: 0DE8
Signing time: Wed 29 Jul 2026 06:00:53 +0000
Manifest this update: Wed 29 Jul 2026 06:00:53 +0000
Manifest next update: Thu 30 Jul 2026 06:00:53 +0000
Files and hashes: 1: Q4J6rM1f2cA2ya2qZmwp_lxNoTA.roa (hash: HzeL7gFw7OqzTY853HEGPqmy3+Ng776QO9amdUFW2A8=)
2: Z-jcKXJaSgf1__y9ezg7cGVAl98.roa (hash: ceq2+LIRVnlNgauj63qax+Op8eTt2wAzZKVPQi48mEU=)
3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: 8Oc29WMTa5sdw6+r8TWOAZJGmh9izEDVdIDXQIF1YsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:2d:c6:bd:fb:21:14:b0:fc:48:10:25:0b:a2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Jul 29 06:00:53 2026 GMT
Not After : Jul 30 06:00:53 2026 GMT
Subject: CN=25c9c35f2cbb55a4c8b873999442da0569b49dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:19:ce:90:79:2d:9d:c2:3b:b3:a2:ae:45:
55:59:f6:4f:29:3f:94:5c:67:95:47:a9:10:6c:ea:
f9:9d:aa:af:cf:dc:ff:ff:18:e9:6a:31:8c:14:5b:
15:04:50:c5:ae:21:4e:da:0d:0a:9f:0e:e3:db:85:
ce:c0:7c:06:08:90:b8:2c:3e:72:84:93:c7:82:01:
2c:bd:74:df:f4:cf:75:97:41:15:f8:7f:12:c0:92:
de:ce:71:e8:e9:2c:e3:76:4e:22:a3:61:d7:ec:d6:
d1:2e:f4:cc:dc:2a:fe:66:92:1b:fc:00:f4:a0:a5:
1e:ae:3c:7d:73:b3:78:28:0d:8f:e9:67:70:97:34:
06:a3:04:2c:a4:0f:31:ea:4c:df:04:e9:dd:b7:ef:
dc:a3:58:c0:a9:2d:04:00:1e:ee:42:c3:37:de:c3:
a8:8b:07:ab:24:80:2d:0f:bb:d0:86:71:29:8f:71:
fc:7a:96:79:37:f5:95:88:a4:ca:99:5a:c7:f6:04:
7e:be:02:91:1a:a0:8f:bc:ff:ce:6f:93:27:06:32:
c7:a4:29:65:1b:99:78:17:1a:ae:54:59:95:1d:34:
41:44:a9:70:f1:60:c0:a1:d9:93:98:e6:3b:b6:b3:
f2:da:bd:d5:5b:60:fd:e1:af:16:2e:97:a1:24:6b:
1f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C9:C3:5F:2C:BB:55:A4:C8:B8:73:99:94:42:DA:05:69:B4:9D:C1
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:91:79:e0:81:1d:fa:80:5f:d5:7e:46:95:23:4e:0b:be:94:
29:49:f5:7b:0a:72:8c:43:fa:36:a3:8f:eb:d2:b3:d8:34:36:
5c:a3:13:78:e5:53:06:86:43:4b:a6:ab:25:67:2e:13:d3:cf:
e2:33:27:75:ad:e6:81:a6:39:d5:3d:e0:6e:4f:0f:f6:1e:66:
4f:60:25:2a:51:23:fa:62:82:a8:0b:4b:2c:f3:7d:d9:15:02:
18:89:97:17:36:14:57:29:4d:6d:28:b4:63:b1:7f:00:25:5d:
a0:5c:eb:07:11:49:dd:ac:6a:f3:e9:ce:c6:3a:51:f5:95:54:
57:8a:02:88:7f:e2:3a:fa:95:67:92:53:67:1e:fd:76:45:46:
68:42:15:53:21:5e:fe:f1:1e:64:f2:c3:a1:57:0b:44:42:9a:
58:f2:51:da:71:2f:e4:f7:65:47:74:9f:4c:49:9a:fd:66:15:
1c:2a:09:f8:10:d8:ab:97:38:e4:42:50:08:6b:cf:86:ed:a7:
f9:db:74:84:aa:c0:47:3c:73:b6:5f:18:2a:58:55:fd:de:7d:
ac:a7:39:2d:0e:cd:fc:12:2e:39:65:04:c1:c0:29:6f:b5:1e:
83:43:d6:cd:18:15:2b:c3:86:5a:c0:8d:83:4a:79:82:71:36:
57:07:e0:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdi3GvfshFLD8SBAlC6IvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNDQzZjdhYWU0N2UwYWIzOGJjZjhkNTM2Y2NhNjAzNTBk
MTcyNzAwHhcNMjYwNzI5MDYwMDUzWhcNMjYwNzMwMDYwMDUzWjAzMTEwLwYDVQQD
EygyNWM5YzM1ZjJjYmI1NWE0YzhiODczOTk5NDQyZGEwNTY5YjQ5ZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq40ZzpB5LZ3CO7OirkVVWfZPKT+U
XGeVR6kQbOr5naqvz9z//xjpajGMFFsVBFDFriFO2g0Knw7j24XOwHwGCJC4LD5y
hJPHggEsvXTf9M91l0EV+H8SwJLeznHo6Szjdk4io2HX7NbRLvTM3Cr+ZpIb/AD0
oKUerjx9c7N4KA2P6WdwlzQGowQspA8x6kzfBOndt+/co1jAqS0EAB7uQsM33sOo
iwerJIAtD7vQhnEpj3H8epZ5N/WViKTKmVrH9gR+vgKRGqCPvP/Ob5MnBjLHpCll
G5l4FxquVFmVHTRBRKlw8WDAodmTmOY7trPy2r3VW2D94a8WLpehJGsffwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXJw18su1WkyLhzmZRC2gVptJ3BMB8GA1UdIwQY
MBaAFLxEP3quR+CrOLz41TbMpgNQ0XJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEt
NTAzNGYxOTk1M2EzLzEvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEtNTAzNGYxOTk1M2Ez
LzEvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpF54IEd
+oBf1X5GlSNOC76UKUn1ewpyjEP6NqOP69Kz2DQ2XKMTeOVTBoZDS6arJWcuE9PP
4jMnda3mgaY51T3gbk8P9h5mT2AlKlEj+mKCqAtLLPN92RUCGImXFzYUVylNbSi0
Y7F/ACVdoFzrBxFJ3axq8+nOxjpR9ZVUV4oCiH/iOvqVZ5JTZx79dkVGaEIVUyFe
/vEeZPLDoVcLREKaWPJR2nEv5PdlR3SfTEma/WYVHCoJ+BDYq5c45EJQCGvPhu2n
+dt0hKrARzxztl8YKlhV/d59rKc5LQ7N/BIuOWUEwcApb7Ueg0PWzRgVK8OGWsCN
g0p5gnE2VwfgyA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:49:57 2026 by rpki-client