Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
File: afKVoxCPXPHTJv_pv2EPvPGNct8.mft (raw, json)
Hash identifier: dSZ8KjcxvevJ7Ycl+fK1jspiVTVkLS2FwLOo0tOjCqI=
Subject key identifier: 69:93:69:D4:8B:E0:C8:E3:5D:5F:36:BF:3C:81:7B:BB:C7:70:F7:6C
Authority key identifier: 69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
Certificate issuer: /CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Certificate serial: 019D39413309A9BF11A7CA231BACE9F98773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
Manifest number: 0C1E
Signing time: Sun 29 Mar 2026 11:01:07 +0000
Manifest this update: Sun 29 Mar 2026 11:01:07 +0000
Manifest next update: Mon 30 Mar 2026 11:01:07 +0000
Files and hashes: 1: ZOFyPBwt8QO_D6k6vls9KwZEJqg.roa (hash: ghPprPgyeEsEGC4qjCDlZ4Fca6j12Z0yKgY66MXGmzM=)
2: afKVoxCPXPHTJv_pv2EPvPGNct8.crl (hash: ytqnYaE1Ieq95YyQSO0rAk4wlS5zgAj12dhWp5YSE+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:33:09:a9:bf:11:a7:ca:23:1b:ac:e9:f9:87:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Validity
Not Before: Mar 29 11:01:07 2026 GMT
Not After : Mar 30 11:01:07 2026 GMT
Subject: CN=699369d48be0c8e35d5f36bf3c817bbbc770f76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:32:cf:ca:77:af:02:64:67:42:59:a9:07:1c:
1a:1b:1e:52:1f:6f:60:50:bf:4a:42:dd:2e:d3:0f:
62:78:c3:16:8c:4f:5f:32:42:2a:2f:92:d1:e6:6d:
9b:a2:e0:9a:86:b9:a7:11:04:54:b0:ab:df:b0:42:
f0:de:41:06:e9:ad:d7:a2:9e:21:2c:ad:c1:7c:bc:
38:94:68:a0:4c:b3:c9:d9:69:8a:97:9d:25:1f:ad:
b0:a1:ad:3b:2d:ef:0d:66:88:74:85:a6:3d:50:b5:
9a:3e:91:bf:14:ef:5d:0d:7e:1f:8b:0e:af:5d:ec:
45:7b:3e:a8:24:3e:e6:b9:9a:8b:92:d8:c1:96:81:
4e:19:67:b5:3e:07:54:04:79:12:f0:fe:9f:6d:f9:
7a:1b:e8:04:4c:b2:3a:66:91:c7:a6:5c:65:66:7a:
07:3e:7e:79:fb:eb:8d:e8:6e:fd:23:4e:9d:cd:39:
b5:9f:f6:05:06:56:8a:fd:69:39:5d:19:4a:f2:2e:
28:d5:a0:e2:0d:63:fa:71:e6:e1:08:54:9d:fe:04:
ea:e0:fa:dd:b2:c4:ec:7f:4e:f7:d2:3c:a9:1e:0b:
c4:e1:48:5b:4a:0b:d5:0a:b9:f7:11:9a:fe:82:4b:
09:45:5d:88:85:ce:02:cf:c5:0d:a4:4f:c4:3a:e7:
50:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:93:69:D4:8B:E0:C8:E3:5D:5F:36:BF:3C:81:7B:BB:C7:70:F7:6C
X509v3 Authority Key Identifier:
keyid:69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:12:5f:ef:ab:d9:c7:a2:18:a0:7c:fc:6a:a4:42:93:7a:53:
df:ba:3d:8a:dd:c0:38:88:29:ee:d1:51:57:91:af:86:55:64:
2e:7f:22:a0:48:33:48:a7:75:03:c5:95:9f:2a:b2:2a:3f:68:
29:2f:8f:7d:f9:fb:65:6c:fa:59:9f:71:bd:1c:1c:14:8d:37:
d6:b6:ac:7f:ab:d2:48:94:bc:6d:d9:07:03:ce:b4:47:6b:32:
d6:75:ca:c2:af:3a:a1:9f:16:00:13:6f:78:7b:25:66:a7:af:
e8:3e:0b:69:cd:a4:6f:85:fa:3d:ea:29:fa:bc:58:40:e3:ee:
05:a7:73:60:54:43:b8:a3:6c:e0:88:94:3a:eb:22:8d:9e:90:
91:24:0b:6a:a6:bf:2e:06:db:2e:f9:53:b9:6e:73:75:23:0e:
15:4e:4f:ff:7f:48:84:b4:e8:63:b0:d9:15:21:9e:5f:e7:8d:
4a:40:7f:e2:ec:92:4b:3b:5b:ff:5c:39:df:b1:ae:62:b5:b3:
c3:2b:3c:5e:61:3f:a4:d8:af:ba:e8:0e:f2:db:13:4a:c3:3e:
d2:98:df:14:30:a2:6a:a2:e5:2a:b9:58:38:34:6f:06:03:e6:
f8:02:c3:39:b1:7a:a6:51:8f:86:35:c8:16:24:58:4c:f5:38:
b0:32:0e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:51 2026 by rpki-client