Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
File: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft (raw, json)
Hash identifier: X5i2w3lcAV9MaiyQWx84Og4FMTziHrsKZr9X65OIpnU=
Subject key identifier: 1F:27:2B:23:25:25:4A:54:E1:98:FF:BF:98:C1:D8:69:D1:D2:10:D6
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Certificate issuer: /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial: 019E21A415BD432974B4CE42B9C017DF5734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
Manifest number: 17BC
Signing time: Wed 13 May 2026 14:01:01 +0000
Manifest this update: Wed 13 May 2026 14:01:01 +0000
Manifest next update: Thu 14 May 2026 14:01:01 +0000
Files and hashes: 1: 9OHSHGyjsScShjBBbXM0V0egb5U.roa (hash: RsCConIkq/oZjKu/2h6K0E/nfItiCMTNkuH27KUNGlU=)
2: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl (hash: 5USmD1H7+WEik4XYUVML+Ebijuy4pqkB5oWGezZr8tE=)
3: kLdDobJoxiNwKp38C_JI5bwS1zU.roa (hash: VUMgAlXcluXyqh/hX30Gkvrxy0BLwOOcuTnXgqsUDvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:a4:15:bd:43:29:74:b4:ce:42:b9:c0:17:df:57:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Validity
Not Before: May 13 14:01:01 2026 GMT
Not After : May 14 14:01:01 2026 GMT
Subject: CN=1f272b2325254a54e198ffbf98c1d869d1d210d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:31:45:b9:fa:e1:9a:b5:48:43:5e:25:3c:dd:
4b:a2:de:b1:d5:d4:15:92:fb:8f:6d:56:32:92:60:
eb:7d:c5:bc:97:71:ef:89:dd:73:0d:ff:ab:fc:3a:
ac:b5:4b:80:24:df:30:2f:c5:e0:47:49:6f:52:53:
a7:3d:7c:59:ce:49:c2:c3:ae:6d:4b:79:89:f6:44:
bb:6b:d3:5f:9c:75:65:1d:9b:5c:12:63:4a:8b:f7:
86:d0:cc:4e:73:04:f0:be:ae:da:c1:60:9a:f8:a8:
a7:15:a9:25:25:b6:e0:cf:8a:4f:00:74:38:08:93:
60:9c:c9:71:b2:e5:fb:4a:e8:b0:bb:d7:02:34:6c:
cf:c2:6f:43:6d:19:b5:a7:ca:fe:88:f4:0c:65:8e:
25:8e:21:12:88:89:41:e4:cd:7b:74:d8:8d:e1:01:
b0:0b:3c:78:f9:40:b4:19:ee:2c:f5:c3:b7:76:e2:
1c:7d:b2:94:b6:75:c7:e9:fa:47:91:ca:b9:03:fc:
ed:bb:e8:86:86:f2:0e:01:cc:3b:cc:7c:e4:f6:78:
0c:4a:18:24:7b:54:ab:93:ec:e0:a1:6b:0d:9d:7b:
84:30:c7:8a:30:22:a4:40:ab:75:a5:ca:7f:8d:37:
53:28:b7:1e:d2:2a:98:c0:a9:73:92:d2:4f:c1:69:
a3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:27:2B:23:25:25:4A:54:E1:98:FF:BF:98:C1:D8:69:D1:D2:10:D6
X509v3 Authority Key Identifier:
keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f6:f7:1e:26:59:40:ca:54:e9:16:da:13:9f:1a:03:c4:b2:
22:4b:ea:af:82:8f:d4:1c:e7:6d:b9:a8:fb:35:bd:02:3d:5e:
db:6f:b4:4b:ed:a5:93:40:f1:79:3c:3a:b9:e1:c7:2e:d4:3d:
48:d6:76:a6:58:25:7b:62:ca:17:45:ab:17:55:2a:e6:aa:15:
70:93:8c:b5:c4:2b:77:6d:61:4d:3b:1a:19:0b:fa:a2:af:02:
a8:ab:34:a9:5e:de:e4:f7:43:a9:6e:0e:07:a3:42:f1:87:39:
59:4c:8b:2b:5f:30:34:e2:c2:3b:ba:6c:e0:61:a4:dc:a0:4c:
00:3e:3a:21:9d:ce:87:b3:21:e1:44:80:07:49:bc:b9:87:46:
2b:fa:83:cd:37:7d:5d:40:18:b9:38:f8:62:e2:25:ac:47:b9:
95:a1:e8:ca:ed:e2:da:94:18:14:61:20:5f:01:3c:40:f6:6f:
c7:82:b3:7d:38:1f:10:af:27:c0:46:d6:ce:f5:c2:6b:f5:b3:
2f:66:ce:ff:57:59:87:8d:e7:88:af:f8:af:10:87:be:95:40:
f7:9e:79:43:2e:47:82:d8:5e:d1:15:f6:71:be:38:9a:c7:45:
28:93:7f:08:6f:84:9b:ff:93:7c:ad:12:81:e7:67:8f:fb:e4:
34:05:ab:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:53:49 2026 by rpki-client