Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier: 82T7Sh9rV+N09rjxIxwxNqh01zPO7XdMzP+5PBTUopc=
Subject key identifier: F7:63:86:23:6F:19:27:BB:A3:0F:5A:9D:53:64:91:61:46:B6:30:28
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 019D25BA31BD50613D226DCE76B8DCB72379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 16:00:52 +0000
Manifest this update: Wed 25 Mar 2026 16:00:52 +0000
Manifest next update: Thu 26 Mar 2026 16:00:52 +0000
Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: /aLPcbA/kLfunqCE5alrm9GUireMd6I0VX1mNJDtFsY=)
2: 3Vkd60WGnI7l2PM3HZFLlJxxjrY.roa (hash: Au6VFeA1y/3YJcbru/t0IUFfv15HD8c8YE7GcJ7+Cf8=)
3: ZtbiR2gXLmTAF_Ba81OuZamF65A.roa (hash: E3OpmkUHD20zWo50pMNSXcgN+lKW8YTl+sRAVHhIEok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:31:bd:50:61:3d:22:6d:ce:76:b8:dc:b7:23:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Mar 25 16:00:52 2026 GMT
Not After : Mar 26 16:00:52 2026 GMT
Subject: CN=f76386236f1927bba30f5a9d5364916146b63028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:07:16:c9:0d:0e:9b:d6:6b:1e:78:71:a1:
a8:3a:cb:c9:91:57:72:10:73:e6:a8:48:72:8c:3b:
ed:dc:0a:34:d6:df:7d:9e:36:35:e8:0b:d6:8d:e7:
4b:94:ae:5b:15:fd:09:47:32:44:bc:f4:9b:af:a2:
5e:2d:de:ce:82:2f:46:52:2f:22:8a:6e:b3:7a:e5:
bf:3a:8d:2e:0f:61:c4:9b:c5:e0:7a:4e:7b:cc:7c:
85:a5:a4:41:7f:b9:13:02:53:62:b7:7d:da:36:09:
55:88:bc:df:52:c4:31:c0:7c:70:3d:eb:58:31:95:
04:41:7b:6c:09:28:15:20:4e:0e:1b:91:db:3d:36:
53:81:12:28:63:87:08:7a:7f:9b:37:ca:02:85:f7:
0a:9c:ce:8f:66:b4:6f:a6:dc:21:d4:d1:c3:4f:7d:
b9:19:2f:e7:a3:d5:5f:0b:14:d8:bc:d5:c8:fe:59:
e9:94:74:9d:c7:93:eb:41:83:47:a6:fd:99:35:6e:
f3:e7:87:47:0e:e1:66:c9:8b:d0:ca:78:36:76:7f:
07:09:83:87:ef:a3:df:f8:cc:2d:a6:b1:f7:3a:4f:
1c:7f:98:38:00:20:8d:41:3d:d0:39:07:9a:f6:23:
de:9e:00:cb:b4:27:ee:e9:e3:23:fd:fc:32:9f:d6:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:63:86:23:6F:19:27:BB:A3:0F:5A:9D:53:64:91:61:46:B6:30:28
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e1:30:b1:9f:f7:70:da:9a:bb:eb:b1:7a:18:40:83:b8:41:
7d:1b:13:45:1e:e1:68:4c:bf:e0:06:f0:7c:cd:16:f3:12:e3:
ba:23:15:8c:79:04:f0:6d:ac:80:be:f4:e8:44:c7:fb:4c:8b:
14:80:8f:e6:4b:95:08:e7:71:4a:90:62:a7:bf:2b:4c:28:b3:
10:78:b1:9b:84:54:62:62:f8:bb:cd:96:3e:06:31:40:a1:1f:
e1:23:fe:7a:39:07:4e:47:81:be:42:95:44:bc:f1:30:cb:12:
ea:77:db:27:0d:56:bf:45:15:20:d5:62:d1:eb:5c:f5:2f:3b:
cb:4c:b8:50:71:f6:37:29:72:3b:81:e5:8a:39:de:4d:ef:38:
98:be:d7:5c:08:19:11:eb:ea:92:1f:c5:b2:93:3a:22:50:83:
21:93:94:07:d9:c3:86:61:09:b6:b8:d2:dc:ec:14:00:af:92:
eb:1d:62:69:c4:d9:64:cd:e1:ff:57:1e:59:56:90:22:15:e6:
25:66:c4:1f:c9:d9:b4:59:1f:1c:b4:04:42:18:72:b7:66:6d:
8f:e6:96:eb:94:9e:9c:b1:25:0d:50:04:4d:5d:b3:1e:f2:7d:
c8:76:8b:d9:13:f6:c3:8e:36:e1:dd:60:4f:15:92:c3:c6:0a:
73:b3:db:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:23 2026 by rpki-client