Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
File: afKVoxCPXPHTJv_pv2EPvPGNct8.mft (raw, json)
Hash identifier: ACSz2Vx+I0mmvv3bOrti4lUW15vgSK1x1vAyu6eTrS0=
Subject key identifier: 8B:52:C2:3A:2E:B6:74:FA:8C:5A:E4:01:17:DE:18:F9:D4:A9:70:99
Authority key identifier: 69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
Certificate issuer: /CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Certificate serial: 01A08AFAA62A754070242E0BC2AA226B913F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
Manifest number: 0DD6
Signing time: Thu 10 Sep 2026 11:01:17 +0000
Manifest this update: Thu 10 Sep 2026 11:01:17 +0000
Manifest next update: Fri 11 Sep 2026 11:01:17 +0000
Files and hashes: 1: ZOFyPBwt8QO_D6k6vls9KwZEJqg.roa (hash: ghPprPgyeEsEGC4qjCDlZ4Fca6j12Z0yKgY66MXGmzM=)
2: afKVoxCPXPHTJv_pv2EPvPGNct8.crl (hash: AfaYFCpFcvNjPsWBQdgt7aeVWQf2+L0GuDp9/VhDqto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:a6:2a:75:40:70:24:2e:0b:c2:aa:22:6b:91:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Validity
Not Before: Sep 10 11:01:17 2026 GMT
Not After : Sep 11 11:01:17 2026 GMT
Subject: CN=8b52c23a2eb674fa8c5ae40117de18f9d4a97099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:92:de:58:fb:bc:d8:c2:0c:17:8f:35:30:4a:
d5:fd:4b:9c:5f:8e:29:ba:c7:cf:23:af:fe:c1:03:
12:6c:db:0b:4b:1a:17:da:61:40:12:b1:e7:b5:8d:
a3:60:cb:d9:be:4c:50:65:d2:19:b5:c8:2d:23:93:
2b:9e:cb:bd:47:39:01:cc:5d:5e:47:b9:e5:68:0e:
30:7e:cb:29:60:cb:5b:3d:dc:d8:b9:78:45:68:21:
bc:43:a2:67:ad:68:2b:a2:dc:da:0f:b3:b7:7e:32:
35:e0:29:7a:a4:a5:0b:11:6b:c7:e7:5f:39:07:5a:
d1:75:fc:81:f9:d0:56:23:bb:f8:d3:a3:30:a9:ef:
be:45:a3:b2:f2:44:69:5a:6c:bb:2f:9c:9a:f3:64:
78:27:d8:94:8a:1d:44:78:7a:1d:95:f5:29:58:2c:
35:1e:26:a1:ab:75:0b:ab:31:c2:69:53:81:bd:d4:
00:ae:94:f8:8d:ae:f2:47:ec:1c:8b:8f:0f:eb:e7:
ff:78:03:c8:85:70:0a:a7:e9:06:db:a2:8f:63:30:
79:2a:5c:d3:92:d2:3c:c3:5d:b3:57:d9:2b:9c:0b:
aa:dc:8b:02:81:7d:70:b0:a7:1e:b2:11:7d:05:77:
7e:73:37:9f:d2:a4:a4:ae:91:a7:cf:6f:2d:16:bf:
47:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:52:C2:3A:2E:B6:74:FA:8C:5A:E4:01:17:DE:18:F9:D4:A9:70:99
X509v3 Authority Key Identifier:
keyid:69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1c:b4:79:dc:48:2f:91:d7:00:ac:22:73:2f:00:f6:d0:34:
71:d5:02:88:1a:fc:29:cc:3b:d8:f1:de:29:51:1c:5d:b0:89:
92:ca:74:22:80:25:ad:f4:5b:86:0e:e9:3d:be:bc:c0:04:77:
c2:78:be:d3:17:a5:9d:b6:a2:46:32:0a:c3:1f:f7:0a:62:e2:
fa:69:88:1f:4e:0e:0b:4e:bc:f6:d8:ec:64:db:b8:51:9c:47:
2a:08:de:56:a3:50:20:9c:2e:a2:67:d3:b9:76:8e:bb:4b:8b:
ed:a9:6f:57:43:5b:96:70:4e:7a:9a:72:7c:e9:35:61:67:19:
b4:3e:8e:b2:71:44:97:37:fe:cb:44:75:c1:72:19:30:f0:c5:
99:78:ed:99:8a:fd:e2:5f:d3:c7:8d:0a:bb:55:02:3e:b8:b1:
69:b8:7e:88:77:95:05:61:d6:cd:d6:95:18:04:8c:d4:a3:e2:
a2:ff:78:95:40:6d:84:e6:87:9d:69:83:ef:85:4c:a7:33:22:
56:df:d7:3d:a9:bd:0b:b1:4b:2f:b4:10:55:34:e4:0d:2c:f8:
68:9c:b9:99:a9:96:f0:9f:72:42:ad:da:85:8d:d3:85:cd:ff:
d6:19:52:25:87:9e:f7:e1:ae:79:98:31:e9:72:c0:2b:89:a7:
5c:e7:33:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:48:49 2026 by rpki-client