Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
File: VOYQwqvTZkwRIEWA90iZZVXCIiU.mft (raw, json)
Hash identifier: x0YsK9fFvIng3Q2QDBHhhG24RTDG01MVoqtf7klw9cM=
Subject key identifier: 80:D2:EA:2D:B2:01:9A:05:A8:CC:11:CF:B9:C3:84:80:D9:0A:05:23
Authority key identifier: 54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25
Certificate issuer: /CN=54e610c2abd3664c11204580f748996555c22225
Certificate serial: 019CAD907DF9B7FB0936CA43AE26812AF367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
Manifest number: 0693
Signing time: Mon 02 Mar 2026 08:00:53 +0000
Manifest this update: Mon 02 Mar 2026 08:00:53 +0000
Manifest next update: Tue 03 Mar 2026 08:00:53 +0000
Files and hashes: 1: VOYQwqvTZkwRIEWA90iZZVXCIiU.crl (hash: EF0C/H80iLlb1gXzLYSod+0EFVQ74mLeoqNxOMxZM8o=)
2: pQKPikBzd7Oz_I9lHHOOAo5keSk.roa (hash: yDnXs+sIyJdYXEuX7spiKfyy3V1/GMh526F5IcQattQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:7d:f9:b7:fb:09:36:ca:43:ae:26:81:2a:f3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e610c2abd3664c11204580f748996555c22225
Validity
Not Before: Mar 2 08:00:53 2026 GMT
Not After : Mar 3 08:00:53 2026 GMT
Subject: CN=80d2ea2db2019a05a8cc11cfb9c38480d90a0523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:62:b5:3f:a6:83:f0:0d:ac:cd:41:33:c0:ee:
ff:18:ef:e7:0a:00:49:6f:a9:7c:6f:6b:4e:87:27:
d4:6d:f9:68:12:3d:70:a5:89:a0:41:b7:2a:77:cc:
b1:aa:96:88:bf:52:f9:bc:3a:2f:20:e9:3c:89:58:
8f:51:cd:9d:c8:db:f2:98:dc:e2:af:4f:ed:af:1b:
08:a9:9b:26:1c:e0:97:a3:b9:9b:63:14:3e:4a:a0:
f6:aa:4b:cd:e5:6f:bc:09:fa:e2:15:fa:f9:d6:5d:
e5:7f:f5:31:72:f7:f1:a5:47:b3:41:3b:58:d3:62:
c7:3f:11:db:a8:0f:98:75:5a:78:7f:d9:2a:2e:e5:
ae:fb:c6:47:a3:fe:70:bd:d6:fd:d6:d0:15:99:a6:
fa:1f:5c:55:58:bf:42:6b:42:15:89:96:82:79:a0:
0b:4f:bc:d8:70:a9:01:d8:74:dd:2d:93:ae:47:6d:
95:fd:b7:95:a2:dd:61:e6:52:69:df:14:e0:8a:c0:
2d:24:f4:3f:b2:b2:56:47:a2:4e:55:a3:97:31:85:
e9:4d:23:4c:67:3a:61:50:2a:23:76:16:0c:ab:ed:
90:23:53:9e:47:bc:3b:1f:51:ae:fe:ac:00:55:50:
d4:32:8c:7b:bc:90:2b:ac:11:61:d2:e1:34:7a:88:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D2:EA:2D:B2:01:9A:05:A8:CC:11:CF:B9:C3:84:80:D9:0A:05:23
X509v3 Authority Key Identifier:
keyid:54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:85:82:2a:06:36:ea:91:11:d2:c8:5d:20:4c:59:75:1b:30:
50:21:b8:f1:b7:7c:18:18:37:97:d3:4c:3f:9f:58:e1:05:50:
60:51:8d:ee:57:54:1c:bf:ad:75:ed:44:9a:f7:e4:21:3c:ee:
22:80:cf:bb:9b:b2:8a:46:65:f8:b1:eb:f3:48:46:57:81:0b:
d1:77:4e:d9:46:03:95:ed:c9:a4:db:b5:91:8f:32:a4:7a:d5:
1f:46:6b:66:87:74:08:fa:ee:a4:45:39:c9:6b:75:ec:c4:0b:
4c:45:20:30:74:b6:14:d6:83:66:d5:d3:75:d8:0f:7e:7c:ef:
07:7a:61:18:b3:ec:29:e2:98:bb:71:27:f5:ea:5a:db:e2:14:
08:1d:65:d8:74:4f:ff:52:b1:5c:ef:dc:ae:86:cc:4f:51:b2:
9d:4c:b8:44:92:89:2b:11:d2:30:9f:e6:28:d3:b9:30:01:ca:
4d:8d:5f:bf:c7:b0:a8:24:0e:fa:02:25:f9:a9:aa:ff:77:ec:
2d:b4:3a:4c:6f:7c:38:f7:c2:e0:53:a7:b2:5f:d6:6c:0c:09:
b5:4e:18:97:03:67:ab:09:83:9d:23:9a:76:05:f7:7a:b0:6c:
50:79:a2:df:a3:53:b6:54:b3:02:34:8b:7f:c2:cf:f2:b7:b0:
e3:6b:c0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:16 2026 by rpki-client