Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier: FHBXetJTByqEX0vlEq/1hofyBcYe7dOhyQKZfV50R3E=
Subject key identifier: 66:67:4D:81:4F:C7:E3:71:F9:84:CD:17:49:4C:11:8D:2B:87:BF:6F
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 01A0D614E00CD18BC282AB21E48344DC5184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 01:01:27 +0000
Manifest this update: Fri 25 Sep 2026 01:01:27 +0000
Manifest next update: Sat 26 Sep 2026 01:01:27 +0000
Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: klPEvILLhZuiK7nKGCXd2REeARAAuQXr+OiQjIfNyc4=)
2: 3Vkd60WGnI7l2PM3HZFLlJxxjrY.roa (hash: Au6VFeA1y/3YJcbru/t0IUFfv15HD8c8YE7GcJ7+Cf8=)
3: ZtbiR2gXLmTAF_Ba81OuZamF65A.roa (hash: E3OpmkUHD20zWo50pMNSXcgN+lKW8YTl+sRAVHhIEok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:e0:0c:d1:8b:c2:82:ab:21:e4:83:44:dc:51:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Sep 25 01:01:27 2026 GMT
Not After : Sep 26 01:01:27 2026 GMT
Subject: CN=66674d814fc7e371f984cd17494c118d2b87bf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c0:32:f9:f0:6e:d0:72:fd:7b:d6:b8:04:90:
ea:db:82:54:ba:f6:e3:db:ea:0f:38:99:8d:54:b2:
9e:d4:bd:7f:58:13:18:e8:9a:05:ba:8f:6c:6a:26:
e1:65:b4:ea:8d:9f:5e:14:eb:33:10:12:70:57:0e:
1f:5f:a4:ca:72:38:66:9f:40:53:fe:38:69:ab:31:
ea:a3:3a:97:79:62:42:d7:4d:73:44:ec:e1:b0:54:
78:b3:08:23:48:49:05:4b:d4:ea:60:94:c8:90:0a:
24:bc:e3:9a:a8:e0:dd:fc:19:ee:64:c4:1b:7a:ef:
7c:ec:10:a1:4a:4f:83:02:d5:81:90:d3:7e:74:13:
d8:e1:2c:ea:6e:e0:9b:36:68:69:d9:fa:be:63:ef:
38:75:66:22:14:e7:64:66:a9:63:eb:86:97:fe:7d:
a8:41:d2:3d:b0:e6:90:24:35:af:00:ad:cb:15:b2:
20:82:5f:f1:10:8c:15:31:3a:20:3c:bb:fa:75:c6:
ae:a5:ae:ce:52:e4:c6:f5:98:9b:d1:c1:24:fd:ad:
aa:ea:be:40:2b:2e:16:79:fc:d2:6d:17:73:44:25:
b1:64:42:74:d2:90:14:5c:8a:8f:21:b8:17:99:92:
8e:c4:c0:81:10:d3:53:eb:b5:cd:05:50:96:26:5e:
0b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:67:4D:81:4F:C7:E3:71:F9:84:CD:17:49:4C:11:8D:2B:87:BF:6F
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7d:3e:9d:e0:91:b2:b8:80:8c:33:1a:48:2a:31:66:14:2f:
69:58:bd:66:26:53:08:07:e6:78:63:7e:3c:7e:c7:c2:4b:f1:
02:4a:72:f5:98:3c:74:d0:b2:16:83:6f:50:00:6b:14:57:47:
6f:31:d5:e0:f3:3d:f5:8c:bf:44:cb:f0:50:62:d6:cd:0b:bc:
ed:55:32:f9:cb:01:a4:e4:ed:e4:d5:04:d0:80:9e:fe:a6:5e:
f7:c6:ef:fa:4f:03:6a:04:d4:91:ca:a3:ce:3d:b6:17:1e:87:
15:99:83:8f:e6:43:fd:93:46:e3:e5:30:4f:27:55:aa:63:a7:
15:9d:94:90:30:fb:41:ee:37:86:de:59:17:6b:d3:42:c7:2a:
eb:28:b1:94:c8:dd:d7:a6:b4:09:0c:d3:14:fe:da:c5:c4:58:
e4:f6:bd:d5:9b:dc:a2:1a:d8:be:7b:26:97:96:00:bf:8f:fe:
bc:21:e7:3f:b7:f9:15:49:40:9f:53:a8:af:ad:c4:46:a9:e0:
46:fc:57:f2:49:14:00:be:e3:f7:40:b6:15:32:e1:c0:44:1d:
5a:44:b0:5a:44:f4:62:6c:9e:4a:ad:0a:1a:c9:04:d1:8b:3d:
28:44:ba:ba:f2:1d:ed:f1:6f:a9:eb:f7:af:aa:1c:8b:46:90:
4e:08:5c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:03:51 2026 by rpki-client