Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier: q3m2uKbB5I8Hwj7bjfow4Ub9mBCfInTZ9xiZJYKet+4=
Subject key identifier: 71:01:F0:74:61:F3:BB:DC:99:C0:72:7E:E4:94:BB:A5:A1:DB:77:80
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 019DA3AED84CF70701862577B7144E57BED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number: 0CD7
Signing time: Sun 19 Apr 2026 03:00:37 +0000
Manifest this update: Sun 19 Apr 2026 03:00:37 +0000
Manifest next update: Mon 20 Apr 2026 03:00:37 +0000
Files and hashes: 1: Q4J6rM1f2cA2ya2qZmwp_lxNoTA.roa (hash: HzeL7gFw7OqzTY853HEGPqmy3+Ng776QO9amdUFW2A8=)
2: RpGkYDx_nYH3yMdAQ8pBPpPX3-o.roa (hash: iOiQQIXB308RmUIDQRIn1rlftsVJp7BrJi1njcVLXlU=)
3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: DbotSqk9ukL9WjrXiUHWtfLm4kDc0KjUAMYPjDXYDao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:d8:4c:f7:07:01:86:25:77:b7:14:4e:57:be:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Apr 19 03:00:37 2026 GMT
Not After : Apr 20 03:00:37 2026 GMT
Subject: CN=7101f07461f3bbdc99c0727ee494bba5a1db7780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0b:8c:29:26:67:7c:a6:7a:21:3f:01:64:06:
ab:f4:4e:bc:03:63:3c:1f:6a:5f:97:dc:f5:c2:2e:
58:e0:eb:c5:72:ad:84:fc:59:cb:ab:ed:cd:fc:e7:
57:ea:46:da:e0:c2:e4:82:81:ac:b9:02:09:44:3a:
e6:19:5f:e3:b3:03:e3:5c:5d:7a:5d:01:25:fc:76:
94:f7:7c:a0:2e:2f:03:c0:e8:90:3b:7c:49:96:07:
2b:33:e8:7f:a3:b7:cb:5b:c9:69:93:9a:27:65:4b:
51:34:94:84:d2:c4:cb:17:cd:99:53:eb:d9:b5:b1:
fe:60:c7:67:77:15:ae:b2:72:1c:df:1c:18:26:8a:
74:5e:9c:66:c2:d9:68:83:0e:a2:87:ce:d3:6a:20:
0d:f0:91:5b:bb:3f:b0:78:5e:eb:1e:c2:0b:58:1a:
01:17:8d:1a:9c:90:c9:1b:97:75:e4:e3:84:f1:25:
0c:6c:82:a9:82:bd:2d:0b:1a:2d:fd:5e:46:bc:93:
0b:04:f6:a0:9e:34:e6:4f:1c:46:b0:97:40:4a:f8:
04:05:90:97:2e:1b:51:7b:5b:c9:1e:16:a7:3a:f6:
47:15:57:be:a2:a9:b9:8b:4d:a7:ad:60:98:00:be:
ff:69:e9:44:47:fc:31:10:4d:42:02:bb:d1:99:aa:
12:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:01:F0:74:61:F3:BB:DC:99:C0:72:7E:E4:94:BB:A5:A1:DB:77:80
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:43:6e:a4:44:2e:e0:a9:21:9a:1c:99:d2:79:f7:12:27:61:
b3:20:b4:cd:a7:58:aa:72:4e:13:93:3f:69:0e:3f:f1:65:f4:
4b:9f:32:12:11:fe:5e:0e:0f:f0:67:56:5d:36:89:ac:17:9e:
f0:9c:b9:2a:91:63:38:0d:23:07:ff:66:b0:19:e5:48:13:a5:
73:a5:b3:d2:f1:3d:13:88:dd:fb:06:fd:6a:4b:95:e7:85:31:
31:73:18:d7:19:48:6f:5c:8e:d2:9e:60:b7:ed:90:59:61:db:
7c:e8:8a:07:90:cc:94:33:35:3a:88:95:a7:c7:3e:29:e6:4f:
94:8a:c3:7e:a1:09:60:db:2b:f5:7c:54:82:51:a0:aa:2f:94:
d9:8a:b6:6d:09:6d:88:83:a8:4a:4c:c6:19:3b:c6:80:92:c0:
e0:68:a5:89:0a:f0:eb:8e:cc:19:fb:7f:77:28:72:bd:34:33:
1e:af:ce:53:aa:04:7c:ca:d2:af:a2:67:f3:7f:b2:05:f1:37:
4d:73:ab:37:dc:61:a1:8e:3b:af:70:45:ae:a9:4a:22:75:a4:
7a:ed:6f:f2:49:c0:f0:ce:ff:39:ac:3a:6e:f5:48:29:2f:df:
76:c8:8e:0b:c8:e7:ee:3d:f2:30:b1:47:f5:c4:c6:32:d7:13:
46:43:7e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:50 2026 by rpki-client