Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
File: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft (raw, json)
Hash identifier: KFEv+tXHIowcLpdRGPqYWfNb8dyepzj1DGubuow6U3E=
Subject key identifier: 38:D0:9F:CA:8D:C1:5F:88:2A:69:B6:7E:19:A6:86:30:36:52:5F:8A
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Certificate issuer: /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial: 01A12052D4DA1702ED4176C92A8FC3ACAE56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
Manifest number: 1949
Signing time: Fri 09 Oct 2026 11:01:01 +0000
Manifest this update: Fri 09 Oct 2026 11:01:01 +0000
Manifest next update: Sat 10 Oct 2026 11:01:01 +0000
Files and hashes: 1: 9OHSHGyjsScShjBBbXM0V0egb5U.roa (hash: RsCConIkq/oZjKu/2h6K0E/nfItiCMTNkuH27KUNGlU=)
2: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl (hash: X265nG3XiBA7KMesW6vw3e7viZhom31qJOYBNcGoQKw=)
3: kLdDobJoxiNwKp38C_JI5bwS1zU.roa (hash: VUMgAlXcluXyqh/hX30Gkvrxy0BLwOOcuTnXgqsUDvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:52:d4:da:17:02:ed:41:76:c9:2a:8f:c3:ac:ae:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Validity
Not Before: Oct 9 11:01:01 2026 GMT
Not After : Oct 10 11:01:01 2026 GMT
Subject: CN=38d09fca8dc15f882a69b67e19a6863036525f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cc:a6:18:13:21:16:28:f1:b6:3b:d8:a5:34:
4a:18:d5:57:d7:4c:aa:67:d2:b4:20:60:75:32:a3:
c9:70:4d:2b:52:ac:c4:0f:28:54:9e:35:77:9a:3a:
5a:6d:e3:9d:01:72:98:17:29:6f:c7:6a:45:46:16:
f6:46:06:b8:3b:2b:1e:22:3e:5a:52:03:41:d9:2a:
28:e5:4a:39:2f:a4:ff:5b:2e:d6:39:44:ee:f4:7e:
dd:a9:f3:44:e0:aa:9f:94:08:84:64:e3:96:ca:da:
ef:b7:dd:27:b5:b3:76:f0:a0:67:87:e2:12:0c:04:
2c:0f:cf:e2:06:df:da:b2:b8:cc:19:b4:97:ee:10:
e6:4a:ef:c1:7e:50:4e:42:ac:ff:13:7c:a2:c9:fe:
5e:66:19:f9:df:52:80:6b:b9:8d:13:2f:51:cd:30:
4f:77:99:7a:a0:60:86:70:40:32:98:cd:7c:e8:ac:
a7:67:63:aa:b1:18:a6:36:c1:ac:68:00:dc:5d:4e:
96:79:ae:e8:78:a9:88:3a:04:f1:c8:88:88:68:e0:
78:70:56:6d:5e:89:57:bb:87:a3:dc:cb:87:43:dc:
d3:5c:a7:42:ea:c1:2b:98:3a:c4:2b:a6:74:a7:f1:
6a:7b:30:e9:b4:19:5e:27:ff:19:da:24:c7:f0:e2:
b0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D0:9F:CA:8D:C1:5F:88:2A:69:B6:7E:19:A6:86:30:36:52:5F:8A
X509v3 Authority Key Identifier:
keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0d:12:21:6c:8d:29:72:fe:c3:d6:c8:3b:6b:6e:7d:d7:ef:
d3:46:02:04:a4:53:5f:79:e8:c9:84:3d:f2:57:5f:e4:c5:05:
ad:de:a2:8c:1b:4d:26:f4:60:14:96:48:e1:c0:fe:2c:21:98:
1b:75:8e:26:af:5d:01:3e:15:43:f1:2a:74:56:b3:cd:88:1e:
6c:79:9b:f6:30:4f:2c:b9:18:d1:36:5d:cb:77:bb:6c:a5:2a:
ce:58:65:a8:90:22:55:7f:55:89:0b:b4:66:20:cd:d7:0e:71:
65:92:a1:30:bb:47:68:cd:5e:fb:d8:be:95:a6:ca:a3:06:d9:
d9:c7:70:d3:dc:bc:0b:de:ef:4b:15:db:c4:1c:ca:b2:7a:17:
10:61:b4:36:33:7e:4b:60:56:9e:8d:39:d1:5e:5f:0a:98:34:
49:15:47:67:b6:64:9a:88:69:1d:51:d7:68:27:de:80:ea:1a:
24:6c:cc:65:1e:7b:56:f2:3a:39:0c:82:7e:e3:61:a5:25:16:
06:53:56:0f:41:cf:76:a3:ce:ae:dd:f6:f3:c3:08:35:81:1f:
8d:da:2a:3d:da:3e:fd:f9:11:23:7a:da:f5:3d:a5:7c:f2:74:
7c:41:38:fb:6c:8f:e0:6e:a4:7b:57:04:9e:c8:40:14:27:ff:
da:78:98:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:34:09 2026 by rpki-client