Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
File: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft (raw, json)
Hash identifier: kND0dEtRvwP1JE3dz3cj/L/FfTdKGzYwkWUTVqNC4cE=
Subject key identifier: CE:DE:C7:7E:FF:55:F8:11:8D:65:5B:F7:50:61:1E:34:13:3C:92:FA
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Certificate issuer: /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial: 019F946D8001D61395724DFA45B5CB36FAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
Manifest number: 187C
Signing time: Fri 24 Jul 2026 14:00:31 +0000
Manifest this update: Fri 24 Jul 2026 14:00:31 +0000
Manifest next update: Sat 25 Jul 2026 14:00:31 +0000
Files and hashes: 1: 9OHSHGyjsScShjBBbXM0V0egb5U.roa (hash: RsCConIkq/oZjKu/2h6K0E/nfItiCMTNkuH27KUNGlU=)
2: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl (hash: L7gD7ouq/4t5p7SceAaJzjzCtZEMrRp/GBAJpdLwx00=)
3: kLdDobJoxiNwKp38C_JI5bwS1zU.roa (hash: VUMgAlXcluXyqh/hX30Gkvrxy0BLwOOcuTnXgqsUDvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:80:01:d6:13:95:72:4d:fa:45:b5:cb:36:fa:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Validity
Not Before: Jul 24 14:00:31 2026 GMT
Not After : Jul 25 14:00:31 2026 GMT
Subject: CN=cedec77eff55f8118d655bf750611e34133c92fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:04:4b:d3:d5:51:0e:aa:10:f9:ad:23:a0:7c:
6d:25:82:da:66:91:5a:12:0e:3c:e3:0b:6e:a0:48:
6d:e7:3a:bb:a6:8c:61:5a:fe:c8:ef:b6:06:c3:3b:
27:5d:e3:a9:13:54:15:c4:78:f6:e0:f7:31:0d:97:
e9:c9:29:d9:b2:b1:0b:da:b1:db:11:de:bf:92:f3:
ff:e9:ee:5c:2a:16:21:76:54:53:ee:d4:a8:3a:8b:
87:fb:4b:e1:1d:13:10:5d:77:65:d1:a4:d1:b7:80:
26:66:66:5d:f4:3e:79:60:63:03:c5:c3:c7:0c:7b:
a8:b0:d9:28:dd:43:7d:b4:8d:d6:52:50:2e:62:77:
d1:61:32:84:e0:76:ab:90:49:60:04:fd:7b:c8:d4:
79:e0:82:6e:5f:59:6f:a7:f6:c3:0f:9f:71:6a:2e:
e3:2f:8d:53:29:94:73:47:0e:ae:04:33:44:aa:7b:
13:77:90:15:d8:e3:fb:71:0b:08:58:75:28:0a:b7:
99:c8:1c:34:ee:b2:44:e2:1c:2f:b6:79:c6:2a:5d:
a5:af:04:cd:40:cc:ea:79:67:7e:33:3f:64:b4:40:
1e:00:36:28:67:ed:02:5b:02:0f:48:35:fe:93:97:
82:5a:34:30:a4:6f:1b:9b:19:9c:48:d1:5b:f9:bd:
ad:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DE:C7:7E:FF:55:F8:11:8D:65:5B:F7:50:61:1E:34:13:3C:92:FA
X509v3 Authority Key Identifier:
keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:92:57:17:52:7c:2a:ce:a3:74:84:1e:cd:c5:85:4a:ed:a7:
d2:7a:03:22:84:3a:f1:07:43:43:c5:85:6e:4c:57:63:6f:48:
04:93:40:ab:a7:57:ad:70:e3:ff:f0:7e:e7:e0:a1:c2:b7:10:
bb:0b:24:85:0a:ee:af:ca:91:5d:db:1e:5d:70:de:7e:dc:65:
53:c7:61:d1:53:71:e5:f0:e7:3d:39:3f:1d:0a:71:6f:2c:39:
3d:ac:3d:f6:8d:dd:2a:3c:3e:d4:5f:20:f7:50:80:8e:18:c1:
12:22:1f:aa:06:c5:e8:a1:28:d6:63:56:2c:c7:ea:33:46:3a:
0d:6a:ca:9c:90:dd:ae:5c:dc:4a:38:d2:0b:d7:88:7d:bc:ee:
74:0e:63:f3:c6:81:bb:fb:26:83:de:1d:2f:08:89:c9:6a:06:
2a:d8:4f:b7:8e:59:d4:1e:20:a6:1b:a2:31:1b:c0:4f:f6:c4:
1d:52:46:ad:86:a1:ec:1d:02:77:db:20:85:b0:85:2c:d5:25:
cc:72:0b:83:f8:b0:8b:48:b1:28:ca:b7:59:c9:74:57:25:7f:
a2:71:b9:16:22:98:a7:16:cd:0c:69:3d:54:b7:8b:0a:77:b2:
f2:a3:60:31:a9:05:81:42:ff:ba:2b:cd:5f:35:4a:4a:e0:a0:
b3:88:34:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:21:46 2026 by rpki-client