Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
File: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft (raw, json)
Hash identifier: lQCNdcPapls+2QljnZj6XTUOKpEli6BLnrB8sJi3uYY=
Subject key identifier: 5B:C2:B9:B4:B6:30:47:F6:BF:EC:4E:B9:64:BD:09:C5:37:D2:BD:CF
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Certificate issuer: /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial: 019DBF25EF100EE4A36191C6316EEE2A4D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
Manifest number: 1789
Signing time: Fri 24 Apr 2026 11:00:27 +0000
Manifest this update: Fri 24 Apr 2026 11:00:27 +0000
Manifest next update: Sat 25 Apr 2026 11:00:27 +0000
Files and hashes: 1: 9OHSHGyjsScShjBBbXM0V0egb5U.roa (hash: RsCConIkq/oZjKu/2h6K0E/nfItiCMTNkuH27KUNGlU=)
2: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl (hash: D3qEjjlqRWUt5ieT0qFfxxR+2IUxDkUGYIy5D3F9NnA=)
3: kLdDobJoxiNwKp38C_JI5bwS1zU.roa (hash: VUMgAlXcluXyqh/hX30Gkvrxy0BLwOOcuTnXgqsUDvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:25:ef:10:0e:e4:a3:61:91:c6:31:6e:ee:2a:4d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Validity
Not Before: Apr 24 11:00:27 2026 GMT
Not After : Apr 25 11:00:27 2026 GMT
Subject: CN=5bc2b9b4b63047f6bfec4eb964bd09c537d2bdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5d:b9:56:bf:6d:33:ba:bf:b6:6d:34:7c:40:
88:f6:ab:b1:19:11:1d:ce:a7:6b:35:19:9d:43:6f:
d4:18:3d:65:32:84:a0:af:c5:92:7e:9d:76:bf:b6:
72:e3:b1:c2:97:0c:40:9f:86:02:88:37:ed:c7:56:
4e:a0:eb:bf:23:03:4f:61:fe:62:dc:dd:5d:1a:aa:
f4:41:bc:8e:0f:58:35:37:5d:a8:03:20:40:f9:ad:
d7:87:c7:e7:e8:e1:42:00:29:a1:14:89:f7:bb:be:
c2:71:fb:ea:af:55:ec:4f:e4:9b:f9:70:69:cd:66:
36:80:8d:5c:2b:ab:80:0f:e4:97:7b:d6:d8:86:47:
78:0b:56:03:7a:3d:50:7c:0b:fe:0c:96:07:9a:67:
3b:2c:d5:18:08:8a:46:81:f3:cf:e8:3c:e8:26:38:
32:01:08:de:df:cc:61:27:48:df:53:0c:c2:e4:b3:
64:52:5e:13:91:42:78:ff:44:be:9f:83:e4:a8:1c:
f2:90:7e:61:6a:4e:e7:e8:1a:73:fc:e2:2c:d9:91:
44:46:a0:36:27:eb:21:85:1f:2f:33:5b:65:1e:8c:
13:f0:81:da:5d:ee:de:25:b1:3e:2c:93:a0:d6:15:
29:fe:9c:ef:2b:56:1e:e8:45:54:23:c9:11:02:7c:
76:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C2:B9:B4:B6:30:47:F6:BF:EC:4E:B9:64:BD:09:C5:37:D2:BD:CF
X509v3 Authority Key Identifier:
keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:43:ca:de:47:86:3a:80:62:5b:7c:4f:a5:e3:11:34:3b:72:
32:75:b9:21:79:32:fa:65:d5:ff:cc:f2:3d:f8:7f:a0:2f:c7:
6f:a1:71:8b:b1:d0:8e:fe:e9:8b:4b:58:35:65:25:bc:6a:04:
c1:f0:86:20:90:e8:2c:ba:f2:8b:b9:dc:f6:f2:18:82:47:28:
a2:f3:a6:ce:d6:fb:4f:9b:5c:55:88:4b:61:f3:51:5b:5d:fd:
bb:5f:92:1b:fe:3b:a7:11:5f:53:c3:a5:ad:25:39:5d:66:3e:
d2:fe:ed:16:90:97:65:a4:2e:23:60:6f:48:ff:d9:7b:3d:98:
68:63:cf:d5:9d:fa:5f:78:9f:0a:5d:de:86:fa:1d:14:35:a8:
1d:75:ae:68:28:71:21:fd:c0:63:08:64:d6:8d:43:3c:90:2d:
0b:72:d2:2f:02:36:e6:6b:de:26:5e:77:f3:74:9c:ca:17:5a:
d5:cd:3d:1f:99:b2:5a:3a:b3:86:d9:a1:69:b6:f7:77:82:f5:
b3:0a:5b:54:62:03:97:04:d2:ca:61:36:ec:07:48:30:92:1f:
21:bb:50:d8:bc:fd:c1:53:21:70:7a:d1:51:66:47:1e:88:c3:
51:e2:ff:13:a7:64:73:53:b0:ac:d4:b5:97:91:13:87:64:b1:
81:8f:0f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 17:26:04 2026 by rpki-client