Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier: YQAjtAlxhQP8XUKsdg4SKSYKVFq7LZ4RU2GXTUJpfng=
Subject key identifier: 33:B7:56:FC:35:9E:79:09:9C:BE:AD:6E:CC:97:ED:0A:1F:2A:B5:33
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 019CAC105E2359944617D5C94985B03A0FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 01:01:19 +0000
Manifest this update: Mon 02 Mar 2026 01:01:19 +0000
Manifest next update: Tue 03 Mar 2026 01:01:19 +0000
Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: GaGGvBLQJHR2MnKckiqkjLMwwmHKKgqYlnuDe5OaJlE=)
2: 3Vkd60WGnI7l2PM3HZFLlJxxjrY.roa (hash: Au6VFeA1y/3YJcbru/t0IUFfv15HD8c8YE7GcJ7+Cf8=)
3: ZtbiR2gXLmTAF_Ba81OuZamF65A.roa (hash: E3OpmkUHD20zWo50pMNSXcgN+lKW8YTl+sRAVHhIEok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:5e:23:59:94:46:17:d5:c9:49:85:b0:3a:0f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Mar 2 01:01:19 2026 GMT
Not After : Mar 3 01:01:19 2026 GMT
Subject: CN=33b756fc359e79099cbead6ecc97ed0a1f2ab533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e7:a0:cc:eb:49:e6:1e:19:03:37:bd:93:b0:
b4:b3:df:b3:af:be:59:c0:7d:38:51:a1:12:c0:05:
7c:a2:ab:fb:10:ed:2d:5e:32:45:ba:68:9b:ce:e0:
e7:9d:08:74:e1:83:81:a6:e2:ea:8b:48:a5:dd:6a:
15:8a:d9:8c:5b:67:6b:8a:db:ee:73:84:82:2e:82:
16:61:d7:ba:f9:d2:9d:72:c8:b2:9c:9a:73:d5:48:
9c:ab:35:eb:c6:76:6e:c7:76:aa:97:f5:7c:c1:4a:
db:ce:b6:67:bd:47:d1:a0:6a:c3:7d:83:e5:db:00:
07:b7:bb:07:18:9e:9a:9e:45:9f:fc:f6:33:54:b1:
86:8b:cb:db:65:17:7e:93:4a:a0:55:b8:b8:ae:8b:
0d:d2:46:f9:4a:e2:69:e8:62:07:5f:40:6f:de:5b:
ee:46:96:f3:5c:8e:fa:33:5a:af:68:30:0a:bd:21:
f3:4a:ec:76:8f:3e:b1:c9:43:f9:92:44:a2:54:91:
7e:97:99:42:5d:c6:70:0c:b6:95:b6:c7:1c:aa:c8:
c2:95:f9:f5:30:ff:40:6d:f1:a6:a6:59:1f:31:6d:
de:87:bc:a2:4a:cf:28:61:28:cd:91:2a:21:3d:87:
f0:81:68:14:57:ba:ad:0a:87:90:96:6a:24:fb:06:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B7:56:FC:35:9E:79:09:9C:BE:AD:6E:CC:97:ED:0A:1F:2A:B5:33
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:90:20:70:54:3d:7f:94:3d:ad:16:4b:6b:1f:24:01:8e:e4:
8a:a0:73:47:3d:d0:f7:2b:05:cc:de:96:19:ee:ec:5e:f1:d3:
81:19:0b:9f:c7:d0:6c:7a:0b:55:21:7b:82:cf:25:27:4f:17:
38:63:28:25:23:db:57:dc:5b:ef:27:69:5e:42:12:fa:89:a2:
00:d9:37:07:48:50:ec:92:b3:bf:aa:47:a7:12:c3:0a:92:81:
6f:90:38:7f:ca:9e:4f:b9:65:80:65:9c:be:7b:cf:f4:39:9b:
9d:2f:f8:37:8a:21:c2:ba:c1:09:48:80:e9:05:89:07:47:7d:
f6:c3:80:2c:01:f0:72:3d:74:e0:a4:1a:c7:aa:d7:b8:91:8b:
2f:fc:3f:0d:cf:56:93:56:66:1a:99:e6:40:8e:87:e3:e7:ee:
23:ec:c1:7c:e9:ed:74:cc:a4:fe:6a:30:8a:34:67:2a:5b:39:
b9:c4:5d:fe:ab:49:a3:10:bb:ef:f4:51:c3:bf:02:39:68:d3:
b7:a8:13:46:1f:ac:b9:ea:64:56:0a:b0:9c:6f:9f:82:2f:99:
62:fc:df:55:c2:72:f6:c4:a7:75:75:fc:e3:38:0a:b0:d4:8c:
0d:ac:47:df:6b:eb:09:0c:de:fa:d1:0d:de:60:26:9a:f8:e4:
27:a6:80:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:21 2026 by rpki-client