Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier: Cp1cQt8l8p7glsMkvu8XOJNz9iomncnb+wqTfEteOAY=
Subject key identifier: A5:8C:E3:6A:09:91:CD:C6:84:31:05:54:85:D9:C9:65:60:83:2E:F2
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 019EBF2377DD2D986AADEBD708C1B8687D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 04:00:33 +0000
Manifest this update: Sat 13 Jun 2026 04:00:33 +0000
Manifest next update: Sun 14 Jun 2026 04:00:33 +0000
Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: YMSnbpHCV+3BMRVTEVLVMYtbnt9+M/Dl6Fxw88hK2aY=)
2: 3Vkd60WGnI7l2PM3HZFLlJxxjrY.roa (hash: Au6VFeA1y/3YJcbru/t0IUFfv15HD8c8YE7GcJ7+Cf8=)
3: ZtbiR2gXLmTAF_Ba81OuZamF65A.roa (hash: E3OpmkUHD20zWo50pMNSXcgN+lKW8YTl+sRAVHhIEok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:77:dd:2d:98:6a:ad:eb:d7:08:c1:b8:68:7d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Jun 13 04:00:33 2026 GMT
Not After : Jun 14 04:00:33 2026 GMT
Subject: CN=a58ce36a0991cdc68431055485d9c96560832ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:e2:32:77:97:4b:54:da:6d:4f:5c:e9:31:
d7:8d:28:d4:34:71:35:a0:7b:66:12:28:49:89:72:
53:a2:3d:3b:18:ab:87:07:57:1d:73:27:74:56:b8:
71:59:7f:ff:3e:6a:1b:66:f4:48:22:67:24:50:86:
fc:00:6a:f7:58:b8:48:42:7a:5d:75:47:d4:88:b2:
13:43:f2:e3:7b:54:02:f2:01:04:b3:14:3f:37:1f:
e8:31:1e:97:55:8a:7b:92:ad:6a:70:e4:f7:80:c4:
27:03:01:9f:f3:4e:07:86:6b:0b:85:25:4d:c5:0f:
48:1e:13:c2:e9:80:82:f4:a1:4e:67:52:f0:af:81:
4f:26:8e:02:cf:a8:5c:e7:b0:28:14:6e:00:e5:f8:
bf:11:17:92:78:7d:08:3c:58:87:0c:ea:d9:00:f2:
f1:f0:32:c6:e0:7a:bf:a5:1d:aa:89:b7:47:37:58:
09:15:df:71:80:39:de:e5:15:30:28:40:f7:08:b3:
e3:8e:c9:67:f4:7e:56:ee:80:a5:a7:a8:b8:15:ba:
e9:03:14:13:61:28:a2:60:08:15:f3:86:5d:97:a7:
a0:fb:5c:3d:4a:84:dc:7b:10:3c:ab:13:92:4d:6c:
37:e6:f0:bc:cf:47:e8:7a:4f:17:ea:db:78:fd:d9:
8f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8C:E3:6A:09:91:CD:C6:84:31:05:54:85:D9:C9:65:60:83:2E:F2
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:48:18:0b:b7:10:21:6b:42:5a:18:ae:f7:89:c3:ac:3b:b7:
57:eb:12:37:83:18:34:0c:a4:0e:df:24:ca:8e:a4:fb:2d:46:
77:a2:18:55:ab:d6:a0:8a:dc:16:ca:8f:e4:75:ab:ad:6b:c0:
f4:2c:c5:7b:a4:0f:d4:0a:67:17:9b:9e:22:e1:33:26:67:d5:
11:c2:26:69:61:91:ff:a9:82:66:de:35:e9:57:32:53:53:62:
8a:ad:28:ef:6a:11:43:e7:97:44:bf:c0:10:ea:20:f5:cf:2f:
87:06:10:63:5b:5f:06:53:0d:bd:c0:da:4e:dd:57:eb:47:2e:
4d:0c:e9:11:6a:0a:17:7e:99:6e:31:5b:ed:12:8f:8e:6d:02:
c1:52:d3:ef:70:b2:7d:a3:a9:6e:5d:45:9d:16:6c:34:fb:e7:
d2:ec:ef:b0:08:85:e2:92:e4:6d:53:c7:11:4b:08:b3:5c:a8:
b1:3a:e7:c2:83:16:4e:8f:ef:97:c8:6a:1b:9a:01:8f:72:bc:
0a:65:d8:97:be:0f:ad:ba:38:fe:ab:f6:e9:31:18:a3:32:3e:
b1:ad:bf:c7:9d:9a:83:32:a2:da:98:20:8c:87:52:1d:5c:89:
db:6f:76:9e:cf:08:7b:5c:9e:9f:8a:6f:e6:2b:15:f7:7e:ae:
a4:10:f2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:39:14 2026 by rpki-client