Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier: w5FrG9hPifqFRaEkglsrCdrk2yasqotot76B+RJFDq4=
Subject key identifier: BA:15:1F:7B:02:F5:63:9B:01:5E:29:70:EC:79:24:A2:24:B9:15:F8
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 01A0C2C41EE6DD57025447E56A9927F38488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 07:00:27 +0000
Manifest this update: Mon 21 Sep 2026 07:00:27 +0000
Manifest next update: Tue 22 Sep 2026 07:00:27 +0000
Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: y5Nd7nmQ/UaEOzmhCsVJRA/XJ5xP472kXEqtUxJJYv0=)
2: 3Vkd60WGnI7l2PM3HZFLlJxxjrY.roa (hash: Au6VFeA1y/3YJcbru/t0IUFfv15HD8c8YE7GcJ7+Cf8=)
3: ZtbiR2gXLmTAF_Ba81OuZamF65A.roa (hash: E3OpmkUHD20zWo50pMNSXcgN+lKW8YTl+sRAVHhIEok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:1e:e6:dd:57:02:54:47:e5:6a:99:27:f3:84:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Sep 21 07:00:27 2026 GMT
Not After : Sep 22 07:00:27 2026 GMT
Subject: CN=ba151f7b02f5639b015e2970ec7924a224b915f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:82:23:da:84:23:dc:d6:ab:64:d4:e5:a4:
78:af:d5:24:7c:03:ce:06:b2:1d:7c:2e:bd:e6:77:
5c:ac:cf:6d:90:81:30:07:7c:87:58:4f:42:c7:11:
52:80:3f:f9:98:d9:82:ca:ac:9b:f0:de:97:19:02:
96:24:ab:2f:8a:e7:cb:31:1c:97:ec:5c:c4:c4:77:
85:d0:10:49:65:1b:f6:a1:38:95:78:cf:d4:e2:08:
99:90:21:de:00:4a:41:9f:2a:8d:a2:58:d6:6f:97:
d9:6a:b4:89:cf:46:b8:09:e4:46:86:5f:8f:b8:82:
34:d8:bd:34:96:7d:c6:1f:34:14:e1:8f:8e:f2:06:
95:87:e8:cc:bc:c7:a7:d6:75:92:92:a0:20:8b:1b:
27:63:f7:81:9a:31:81:72:d3:d6:66:77:06:05:9a:
63:23:55:e3:c4:70:ca:8a:90:5e:ac:bd:5a:73:49:
65:5f:08:a6:69:eb:28:04:a8:c2:12:cc:2f:53:27:
1d:30:51:2b:b8:b5:2a:1c:79:a5:44:61:22:55:f6:
17:b1:68:cf:74:34:db:cb:8f:3b:87:a2:19:e6:2e:
03:a6:71:9b:e3:d8:4f:a4:b2:6b:30:1f:11:6a:ae:
64:4c:51:b5:dd:b2:e2:1f:69:0e:cd:b8:ab:c8:f2:
01:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:15:1F:7B:02:F5:63:9B:01:5E:29:70:EC:79:24:A2:24:B9:15:F8
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d9:29:ac:4d:9a:19:77:c8:fe:05:0c:b3:a6:e0:00:cd:31:
34:95:a7:38:7f:bb:7f:f2:31:04:08:0c:64:ac:f1:7e:57:17:
67:20:63:ed:11:02:52:65:7c:75:f8:e9:b3:18:36:f1:0d:dc:
ed:4f:16:be:1d:c3:29:f7:ab:1a:91:a1:6e:21:bf:7f:f0:b1:
9c:56:c6:8d:1b:b9:50:b9:09:fb:e5:65:77:c4:fa:69:52:1f:
9d:93:67:2b:dc:76:a5:ff:1e:78:d2:24:01:91:1b:51:26:84:
a8:4d:30:68:4c:14:d3:95:e6:23:ac:0d:5c:35:3e:79:d5:2a:
d2:af:4f:c6:b4:89:bf:ac:51:82:89:56:48:3b:f2:7b:d3:9d:
08:c8:ae:28:84:5c:f0:7c:e3:6c:ff:1c:0a:ef:33:c0:2c:b4:
48:1c:e1:a2:5f:17:f8:23:41:84:6d:28:1a:bf:a4:1f:d8:f2:
d1:1e:ad:b6:e4:f4:d2:83:aa:1e:b3:f0:82:24:51:95:3a:7e:
c7:cd:b4:08:58:fb:12:47:5b:09:9b:d1:11:c6:91:92:1f:fb:
e1:f9:5a:cb:06:25:bf:78:d4:c4:b7:58:15:a1:9a:94:1f:b4:
d5:ee:2b:ee:ab:74:ff:5d:66:0c:7f:5f:12:d0:f6:f9:a5:e3:
f2:5c:2b:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCxB7m3VcCVEflapkn84SIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZmEyYTcwMDAzODgwZDc1NjE2MTJhM2MwYTEyNjAyY2Uz
NTQxYTQwHhcNMjYwOTIxMDcwMDI3WhcNMjYwOTIyMDcwMDI3WjAzMTEwLwYDVQQD
EyhiYTE1MWY3YjAyZjU2MzliMDE1ZTI5NzBlYzc5MjRhMjI0YjkxNWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsACCI9qEI9zWq2TU5aR4r9UkfAPO
BrIdfC695ndcrM9tkIEwB3yHWE9CxxFSgD/5mNmCyqyb8N6XGQKWJKsviufLMRyX
7FzExHeF0BBJZRv2oTiVeM/U4giZkCHeAEpBnyqNoljWb5fZarSJz0a4CeRGhl+P
uII02L00ln3GHzQU4Y+O8gaVh+jMvMen1nWSkqAgixsnY/eBmjGBctPWZncGBZpj
I1XjxHDKipBerL1ac0llXwimaesoBKjCEswvUycdMFEruLUqHHmlRGEiVfYXsWjP
dDTby487h6IZ5i4DpnGb49hPpLJrMB8Raq5kTFG13bLiH2kOzbiryPIBnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoVH3sC9WObAV4pcOx5JKIkuRX4MB8GA1UdIwQY
MBaAFNL6KnAAOIDXVhYSo8ChJgLONUGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iMjA3ZDEtOGI3Yi00ZTI3LTgzNzAt
YTc5NjUwMWU3N2ExLzEvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9iMjA3ZDEtOGI3Yi00ZTI3LTgzNzAtYTc5NjUwMWU3N2Ex
LzEvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtkprE2a
GXfI/gUMs6bgAM0xNJWnOH+7f/IxBAgMZKzxflcXZyBj7RECUmV8dfjpsxg28Q3c
7U8Wvh3DKferGpGhbiG/f/CxnFbGjRu5ULkJ++Vld8T6aVIfnZNnK9x2pf8eeNIk
AZEbUSaEqE0waEwU05XmI6wNXDU+edUq0q9PxrSJv6xRgolWSDvye9OdCMiuKIRc
8HzjbP8cCu8zwCy0SBzhol8X+CNBhG0oGr+kH9jy0R6ttuT00oOqHrPwgiRRlTp+
x820CFj7EkdbCZvREcaRkh/74flaywYlv3jUxLdYFaGalB+01e4r7qt0/11mDH9f
EtD2+aXj8lwrlA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:55:44 2026 by rpki-client