Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
File: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft (raw, json)
Hash identifier: Vdzc3smePhGjUN72VoDpzdPGAt0tlt6Ef1MeJAp4m/Y=
Subject key identifier: 8E:E3:06:64:C9:4A:67:86:5F:6D:C3:57:71:4A:D9:39:97:1B:5D:0E
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Certificate issuer: /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial: 019D2A722E3941E77DDC1EC3CE93717B89E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
Manifest number: 173C
Signing time: Thu 26 Mar 2026 14:00:18 +0000
Manifest this update: Thu 26 Mar 2026 14:00:18 +0000
Manifest next update: Fri 27 Mar 2026 14:00:18 +0000
Files and hashes: 1: 9OHSHGyjsScShjBBbXM0V0egb5U.roa (hash: RsCConIkq/oZjKu/2h6K0E/nfItiCMTNkuH27KUNGlU=)
2: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl (hash: dGzJxxWU3vV4JsaitC4lzOHttm4hHIMyPGKXNBnA3Dg=)
3: kLdDobJoxiNwKp38C_JI5bwS1zU.roa (hash: VUMgAlXcluXyqh/hX30Gkvrxy0BLwOOcuTnXgqsUDvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:2e:39:41:e7:7d:dc:1e:c3:ce:93:71:7b:89:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Validity
Not Before: Mar 26 14:00:18 2026 GMT
Not After : Mar 27 14:00:18 2026 GMT
Subject: CN=8ee30664c94a67865f6dc357714ad939971b5d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:eb:10:57:9a:ee:72:81:d4:63:d4:90:9d:
2b:60:72:23:f5:83:70:c9:1b:ce:38:a3:da:6b:06:
4a:ab:2a:69:c6:47:3e:29:13:f9:69:5a:ea:ec:2e:
05:94:95:49:30:69:22:3f:b5:f2:cf:e3:f2:55:ae:
d6:16:e7:95:1d:82:ff:24:a1:de:14:6b:03:d2:1e:
7f:49:a6:21:ed:aa:0a:25:cb:97:bf:c1:6f:3c:5d:
5f:b8:e9:86:ca:fc:39:2f:65:96:a3:27:ed:f0:a2:
e3:a2:73:34:78:e8:9b:1f:6c:24:ea:7e:44:73:ae:
bc:1e:11:46:2f:ee:96:38:79:14:03:85:a3:3d:88:
1e:ba:58:9c:c4:0f:e7:c5:b8:25:a5:89:2b:86:5a:
5c:db:df:8a:17:ac:02:ed:04:db:3a:31:71:c3:e7:
78:00:5a:35:31:19:7e:4e:4a:0d:ea:d1:cb:6d:4f:
13:d5:e2:bc:f7:76:d0:1b:5b:a5:76:05:e9:f4:8d:
db:9f:ac:d7:c1:ef:03:ad:a9:dc:5b:8b:65:e2:52:
15:8c:dc:fa:80:36:6c:f3:a5:26:fc:22:47:73:02:
f3:4f:d9:46:18:14:a9:e0:40:04:3a:6d:3b:4f:be:
b5:8e:5a:ef:a8:8d:7c:ae:92:11:4e:07:55:0b:be:
cc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E3:06:64:C9:4A:67:86:5F:6D:C3:57:71:4A:D9:39:97:1B:5D:0E
X509v3 Authority Key Identifier:
keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8a:3a:08:4a:6a:a8:75:b5:bb:f8:34:e0:4a:1a:e1:0c:74:
3b:ab:d7:b3:57:63:9c:ae:66:bf:e2:4b:6f:2b:dc:60:eb:72:
34:93:21:5b:4c:79:5a:15:d1:64:72:8a:93:72:60:5e:53:14:
a7:04:ac:47:98:be:4d:f9:a2:20:19:95:77:f4:0f:7b:2e:bb:
36:d4:3a:c6:b8:c6:cf:45:0e:ca:d6:0d:0d:fe:99:9e:fe:28:
80:ac:8b:7e:82:e5:b7:08:7a:de:54:2d:cf:05:13:a0:6a:96:
c5:e3:a5:de:1c:f1:c9:cb:bc:eb:e4:9b:ff:45:cf:13:e0:fb:
f0:14:93:d4:70:9e:b2:4b:42:bb:01:e4:29:a6:f7:26:3a:d7:
c2:c9:a5:db:3d:56:ac:74:c8:bc:cd:d4:cc:73:c6:8d:be:eb:
bf:d0:42:b4:92:e7:53:6c:d6:7b:2c:81:33:b0:9a:a5:98:50:
d7:d9:4a:d8:23:15:68:2d:92:23:2b:f2:8d:da:b7:de:22:18:
ed:c3:82:96:87:2c:e5:50:a4:eb:f2:f2:bc:4b:c6:51:44:48:
bf:e2:da:15:1a:35:27:a2:14:08:21:e4:2a:db:a5:41:cd:67:
5a:94:fa:11:ff:8d:0c:c7:30:20:5d:23:f2:44:d5:b3:64:20:
56:28:34:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:26:54 2026 by rpki-client