Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier: XkLoveCa2Q7h/E2Af2GeFrZfHjRuuzts7//3ut2SeBI=
Subject key identifier: 49:C6:A6:16:D7:1F:7B:D6:82:6C:6C:A6:0E:98:29:35:FB:0F:0A:2F
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 019D99990D3C7D400726B0B9E7AE4B640B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 04:00:37 +0000
Manifest this update: Fri 17 Apr 2026 04:00:37 +0000
Manifest next update: Sat 18 Apr 2026 04:00:37 +0000
Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: CtLvgPIPSvy5jw81aLYJTVftp+S625JKJjjam8aESOE=)
2: 3Vkd60WGnI7l2PM3HZFLlJxxjrY.roa (hash: Au6VFeA1y/3YJcbru/t0IUFfv15HD8c8YE7GcJ7+Cf8=)
3: ZtbiR2gXLmTAF_Ba81OuZamF65A.roa (hash: E3OpmkUHD20zWo50pMNSXcgN+lKW8YTl+sRAVHhIEok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:0d:3c:7d:40:07:26:b0:b9:e7:ae:4b:64:0b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Apr 17 04:00:37 2026 GMT
Not After : Apr 18 04:00:37 2026 GMT
Subject: CN=49c6a616d71f7bd6826c6ca60e982935fb0f0a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:13:72:a7:08:4d:72:4f:ff:aa:6e:06:a1:
43:bb:2d:5d:84:b8:93:df:2f:ed:60:12:2f:49:b3:
9c:4c:bd:6b:c6:3d:ac:5c:90:3b:f3:a0:7a:68:58:
61:96:b1:b1:af:43:b6:8b:c3:0c:a1:55:3b:fd:1f:
de:e3:35:69:50:5c:fb:51:3e:9d:1a:05:8d:d8:67:
6c:1d:bc:eb:8c:0a:7a:d9:27:c0:f0:65:df:7c:35:
fa:e9:6a:5d:a2:6c:3e:27:a5:db:27:5a:8d:81:8a:
c7:51:16:ab:da:d0:d3:ee:8b:df:92:4e:8b:0a:16:
49:0f:47:12:58:b0:7b:e0:4f:e6:0b:f8:b9:16:82:
ce:f9:ec:46:5f:77:a0:c4:52:cd:98:35:e0:68:fb:
c5:dd:24:d4:9a:80:04:c2:c2:8f:a1:00:81:23:8c:
ba:f5:bd:08:2d:37:72:14:46:e4:98:56:f9:94:85:
5f:c9:e7:02:45:7e:b0:5c:48:78:94:22:5e:7a:a3:
89:bb:c2:7c:7d:86:c9:0f:70:f0:39:2a:27:8e:d9:
90:2f:36:99:c3:6e:77:47:1d:0c:e7:b5:58:29:2b:
f7:7e:73:90:18:e6:cc:d2:a8:66:0e:37:71:94:95:
45:69:22:d7:26:01:0a:9c:c0:16:1c:c0:b8:f0:34:
85:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C6:A6:16:D7:1F:7B:D6:82:6C:6C:A6:0E:98:29:35:FB:0F:0A:2F
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:72:73:86:42:ca:91:a4:d6:ad:20:6b:86:92:7b:9b:9c:98:
65:91:9b:fe:af:8d:73:29:8a:f9:68:5b:bb:27:a7:a5:b4:2a:
6c:b5:d1:2c:22:2d:1f:95:73:1d:29:a7:0c:60:14:c2:9d:bd:
02:0d:c9:ac:a4:2c:6e:c3:e1:d7:79:a0:3b:b8:55:7a:d0:f7:
0c:a3:98:c4:b4:67:d4:92:52:61:eb:fd:34:ee:4b:a5:f1:27:
b2:fb:9f:91:6d:27:52:3a:d2:99:cd:4a:fb:c7:56:c1:a8:46:
2e:b1:12:d8:6b:e7:67:8c:b9:cb:3b:1c:fe:73:eb:77:8d:c0:
c6:05:5f:04:7c:73:39:e6:47:b1:54:ff:21:a3:04:91:e5:f3:
85:2e:1a:5c:df:3f:5a:4f:00:5d:fb:8f:31:e2:70:8b:fc:5e:
c8:4e:0e:82:d3:de:7c:ff:f0:e7:4e:38:ed:63:2d:06:92:c1:
14:ab:50:19:84:c6:34:52:cd:8a:46:6d:a2:ae:06:ba:e6:f7:
10:85:4d:da:76:b2:f1:b6:4d:1e:01:b4:e9:3f:3e:b3:50:a2:
3a:33:e5:a6:b5:45:86:b0:1e:ff:b8:49:c7:64:a3:15:1d:4c:
b5:2f:55:d4:92:97:23:47:02:20:66:27:ad:55:8d:13:a1:b4:
37:f2:29:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:14 2026 by rpki-client