Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier: CpwZEy8wbolF6CYPuYnJh479haCXFEWhuxWXYqPLYF8=
Subject key identifier: F1:22:1A:58:04:69:8F:57:CE:22:0E:D8:47:18:6C:07:FA:BF:93:4D
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 019F91A382AC025B965F49EC92F5336DA204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 01:00:39 +0000
Manifest this update: Fri 24 Jul 2026 01:00:39 +0000
Manifest next update: Sat 25 Jul 2026 01:00:39 +0000
Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: 0R9TX+cLWTaQAs9fhmJULMxuogaodpAh1hwf8irKr1A=)
2: 3Vkd60WGnI7l2PM3HZFLlJxxjrY.roa (hash: Au6VFeA1y/3YJcbru/t0IUFfv15HD8c8YE7GcJ7+Cf8=)
3: ZtbiR2gXLmTAF_Ba81OuZamF65A.roa (hash: E3OpmkUHD20zWo50pMNSXcgN+lKW8YTl+sRAVHhIEok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:82:ac:02:5b:96:5f:49:ec:92:f5:33:6d:a2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Jul 24 01:00:39 2026 GMT
Not After : Jul 25 01:00:39 2026 GMT
Subject: CN=f1221a5804698f57ce220ed847186c07fabf934d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:28:3c:81:df:9d:33:93:da:4d:06:fb:c8:
1d:42:ce:9f:b0:89:84:0c:d9:68:27:de:72:83:b9:
07:79:2b:46:7f:10:b4:4b:df:15:45:45:d0:a1:5d:
17:80:e4:46:bb:41:48:57:6d:a0:46:d8:49:b5:2b:
62:30:82:2c:fa:78:6f:f3:c4:9f:c8:de:82:97:58:
1c:a6:ee:01:7e:52:73:6b:dd:97:3e:90:60:14:2d:
2b:30:07:d8:b5:4b:0c:b2:96:7b:c5:95:55:05:da:
72:3a:42:00:c6:01:e1:aa:46:10:a3:ec:a4:2d:93:
b2:fd:de:2b:1e:02:3a:81:bd:ef:2f:53:96:f6:72:
a7:b1:3d:d4:0d:e9:0e:52:33:a5:a3:f3:e2:80:07:
89:33:cc:87:db:0c:d9:da:69:90:34:b9:cb:83:67:
09:f2:48:d1:46:40:e0:3d:1b:16:06:1f:2b:dc:5d:
31:f4:b3:71:b0:72:8c:b6:8f:c0:42:9c:54:18:54:
fa:9f:e2:3d:62:88:87:b1:49:56:7d:2d:c0:60:ed:
3e:bd:69:f7:77:07:ca:4c:4a:3e:f6:b9:db:d3:7c:
0a:23:36:09:05:d0:b5:23:b7:eb:12:c0:c3:4d:c6:
94:a4:69:ce:fa:d3:bc:5b:4d:90:d2:c7:67:cb:3b:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:22:1A:58:04:69:8F:57:CE:22:0E:D8:47:18:6C:07:FA:BF:93:4D
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7a:b8:2e:9f:29:44:c9:6c:8b:e0:85:d4:fd:db:24:cf:9f:
14:25:ac:8e:0d:35:8e:d5:ab:0d:4a:f4:37:b6:96:c3:1e:ff:
52:3a:f6:87:59:2e:a7:aa:5b:e6:65:d8:10:e5:c2:7a:69:6c:
a0:f2:59:6e:9f:8c:7a:d0:87:ef:a3:bd:36:ba:d9:92:71:2e:
25:2d:80:9d:00:ea:ff:84:0b:d3:0a:76:d4:f2:27:e0:fe:87:
a4:01:a0:ce:16:87:c3:2f:64:c8:27:50:23:e8:e5:71:22:9a:
7f:e0:97:2a:76:87:18:07:29:8c:c3:6f:62:f5:ab:d2:7d:2a:
9e:d4:80:1a:3a:ee:52:f4:fa:bc:b4:96:6f:f7:f9:c7:01:be:
e5:e4:e8:68:f8:c3:03:d8:72:d6:c5:c4:0e:ca:a0:3d:83:bb:
c8:36:55:1f:91:57:b5:f3:e0:90:65:3e:72:a1:45:a9:49:b3:
c7:6b:3c:48:9f:17:78:5a:21:10:62:44:a6:e8:9b:9c:6b:ad:
4e:a2:d8:be:96:23:34:f9:f0:56:cf:9e:1e:1b:ad:6a:3d:57:
f3:18:51:c9:ed:bf:a5:6a:a4:50:87:ac:58:b9:6d:87:49:79:
f8:51:cb:38:7d:ae:33:82:21:0e:d7:94:1b:7e:98:c0:61:63:
1c:d0:f9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:05:03 2026 by rpki-client