Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier: z4gCjcJfJsfpdtGHjVRTCXkgmTWMLQTFuqM/imsa7Nk=
Subject key identifier: 35:4E:EB:B8:B6:AB:B6:03:20:2D:3C:C1:BD:8E:F9:38:03:70:B4:92
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 019FA8D0A3F1AA44A20263DF054C6C94DA64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 13:01:13 +0000
Manifest this update: Tue 28 Jul 2026 13:01:13 +0000
Manifest next update: Wed 29 Jul 2026 13:01:13 +0000
Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: Sia5q3oa1DSqWvvIKeMsWWA5c7XYbOrbWZNsDXoR9/4=)
2: 3Vkd60WGnI7l2PM3HZFLlJxxjrY.roa (hash: Au6VFeA1y/3YJcbru/t0IUFfv15HD8c8YE7GcJ7+Cf8=)
3: ZtbiR2gXLmTAF_Ba81OuZamF65A.roa (hash: E3OpmkUHD20zWo50pMNSXcgN+lKW8YTl+sRAVHhIEok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:a3:f1:aa:44:a2:02:63:df:05:4c:6c:94:da:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Jul 28 13:01:13 2026 GMT
Not After : Jul 29 13:01:13 2026 GMT
Subject: CN=354eebb8b6abb603202d3cc1bd8ef9380370b492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:01:6c:99:3f:55:dc:21:3b:96:b2:83:ca:9d:
e7:77:c8:a7:de:e8:db:34:79:ab:30:4b:bf:81:c5:
a4:b6:24:97:31:73:a8:a5:45:cb:9d:a0:1a:7d:c7:
64:10:87:7f:2d:56:50:a0:b9:c9:c6:b8:2e:c0:17:
9c:69:f4:85:37:f1:a7:da:1c:f0:8d:cf:7f:4a:a4:
84:98:7d:76:c8:31:5b:d4:8d:38:28:77:be:77:a9:
03:94:cd:1a:5b:05:dd:a3:ef:b8:c9:e4:4f:5b:65:
ec:3e:aa:50:25:fb:73:eb:8a:c7:a5:99:0f:90:a8:
f2:e1:9d:65:37:3a:46:0e:8d:65:d5:a6:e0:e5:4e:
61:3c:8f:84:b0:12:5a:1e:a7:f4:46:15:f0:fc:1f:
a3:6c:21:8f:a4:4c:60:2d:f2:5f:95:bc:d3:d7:e7:
bc:ce:d7:d6:43:12:cf:25:46:45:c3:c4:77:f7:2f:
77:e8:2e:fd:58:4b:46:50:8d:23:75:d7:04:0a:0f:
cc:cc:a6:3e:7a:26:5c:21:60:43:5a:8b:26:63:9f:
b4:36:fb:ba:91:7d:5d:ef:12:6c:3a:2f:6f:15:56:
f5:5c:08:02:62:7d:92:06:d1:ba:c0:d8:80:75:1d:
aa:fa:9c:90:1e:35:e6:71:d2:b0:06:2b:e9:1a:4d:
d5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4E:EB:B8:B6:AB:B6:03:20:2D:3C:C1:BD:8E:F9:38:03:70:B4:92
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ce:b4:24:dd:1b:aa:2f:f2:29:c8:ac:c2:bb:1e:51:bd:a5:
3e:2d:0f:1c:d0:0a:5f:72:b7:74:11:4c:0b:fe:58:71:6d:03:
3e:40:b0:f0:27:7c:8e:2a:66:6b:e1:d4:26:53:69:b3:89:ed:
37:fc:8a:48:04:81:82:c7:60:c6:de:6f:4b:b5:1c:f1:d4:d3:
cf:f9:3d:bb:ab:bb:53:51:2e:77:8a:2a:f5:8b:b6:1d:7b:a7:
ce:87:42:ec:6c:fd:1c:2f:0b:ed:b2:84:70:be:20:36:f5:3f:
3e:98:da:cb:32:41:1d:78:39:a3:7d:88:fb:5a:6a:e5:95:24:
28:ab:50:c2:f9:b9:dd:8b:87:14:f0:77:fd:33:c2:2f:c0:89:
67:5a:a3:95:68:43:5a:8e:7b:e6:89:64:aa:a3:33:ff:14:15:
82:04:4a:07:c3:ea:cd:a3:f2:fe:9e:7e:e7:37:be:53:1b:3e:
e2:d8:ea:61:4c:7c:c0:77:67:40:98:64:93:dc:0b:9c:38:f5:
48:b9:55:c0:ab:ec:88:c9:3d:89:39:3d:21:f3:b8:9f:f2:7a:
83:07:b5:41:b0:39:27:2f:3f:b2:3c:c8:ce:31:7f:b9:b5:64:
b0:6c:9f:32:06:2e:31:f4:fe:c7:ea:89:c2:bf:43:68:d0:0a:
20:ca:12:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:52:34 2026 by rpki-client