Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
File: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft (raw, json)
Hash identifier: Ehz70Fc3G/B6D1JN2STif263f9yxoBjMIu2ASPvDRRQ=
Subject key identifier: 3A:06:2A:D1:8A:64:A8:FC:16:09:81:FF:97:60:AC:AD:E2:3C:4D:DD
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Certificate issuer: /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial: 019CD579890BDBE551F9CA9B974CB4EA0E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
Manifest number: 1710
Signing time: Tue 10 Mar 2026 02:00:37 +0000
Manifest this update: Tue 10 Mar 2026 02:00:37 +0000
Manifest next update: Wed 11 Mar 2026 02:00:37 +0000
Files and hashes: 1: 9OHSHGyjsScShjBBbXM0V0egb5U.roa (hash: RsCConIkq/oZjKu/2h6K0E/nfItiCMTNkuH27KUNGlU=)
2: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl (hash: LOOn+pkX9FnRCPSNxaEOf3n9bBJR9HmcZcnqY2pN5Ac=)
3: kLdDobJoxiNwKp38C_JI5bwS1zU.roa (hash: VUMgAlXcluXyqh/hX30Gkvrxy0BLwOOcuTnXgqsUDvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d5:79:89:0b:db:e5:51:f9:ca:9b:97:4c:b4:ea:0e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Validity
Not Before: Mar 10 02:00:37 2026 GMT
Not After : Mar 11 02:00:37 2026 GMT
Subject: CN=3a062ad18a64a8fc160981ff9760acade23c4ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:c3:ef:24:90:26:07:c6:df:20:54:ff:1f:
6c:be:31:8b:cc:cc:ab:70:7b:17:5f:46:c2:80:a1:
c6:20:2a:f1:de:5d:d1:e3:c2:8f:89:69:cf:7f:79:
24:61:20:44:8b:80:08:3c:b8:33:b9:91:16:e6:7a:
75:64:ac:a9:bf:aa:3e:72:48:56:2a:4a:0e:2f:a9:
4c:cb:5f:8b:92:9e:5f:01:e3:c4:62:58:14:e3:44:
4d:9b:40:56:0f:35:39:8e:f2:bd:d1:8b:05:05:f7:
89:99:89:60:71:97:78:a9:5b:77:89:75:8c:48:0e:
ae:9c:c9:6d:7a:9a:d4:1b:61:7c:40:f2:e8:d3:e4:
ad:95:f4:77:b5:4a:d2:87:52:e4:7d:4a:76:25:b8:
fe:80:1e:32:01:e7:9f:68:2c:f7:ea:41:14:f7:5c:
fd:72:aa:f0:28:fe:c4:63:45:28:6b:18:93:2a:2c:
55:06:e3:b9:6a:be:e8:03:42:09:11:17:06:ef:00:
de:75:a8:17:f3:8d:38:d9:33:8b:c3:27:96:fc:fa:
3c:1e:5c:5a:45:6d:b7:15:d8:be:97:ff:2c:fb:c8:
33:3c:3b:14:16:d4:84:24:9a:36:1b:3f:41:39:05:
e2:92:cb:49:20:75:ec:55:9a:ca:2d:ae:b0:cd:b8:
cf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:06:2A:D1:8A:64:A8:FC:16:09:81:FF:97:60:AC:AD:E2:3C:4D:DD
X509v3 Authority Key Identifier:
keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e3:73:8c:f2:be:4c:7a:4f:50:94:d7:39:70:16:d9:1a:2b:
98:4e:b8:8c:92:5b:1e:34:3e:d5:d9:06:e2:36:68:56:13:87:
9c:db:1d:21:31:eb:e2:71:b5:1e:54:fc:2c:c3:3f:7f:af:59:
b2:df:7b:d5:d6:a8:fc:d7:b7:55:62:b6:f4:71:50:f6:94:5c:
44:81:b9:ff:b8:c8:ff:cc:f4:98:a1:e9:be:d9:8f:2f:50:fd:
9c:3a:61:a1:fe:2f:85:36:b6:82:be:02:d9:63:d0:b8:b5:34:
09:b3:08:c3:99:0e:56:22:e4:ca:90:71:61:b2:b9:8d:21:a1:
ad:ba:db:1a:2e:45:fc:6c:03:80:ac:75:42:6f:1e:2b:c6:19:
36:d4:48:99:5c:a2:99:ea:69:c4:92:8e:f8:c1:8d:33:79:65:
02:e1:0f:69:69:ec:c8:c5:bb:99:5c:f1:c5:49:42:f7:85:f8:
74:34:b1:8d:8e:d1:a6:28:a8:ca:cf:de:6a:f3:2f:7a:2f:dc:
4a:cb:77:10:91:9b:b9:d1:40:ae:d4:8e:2c:2b:b4:65:68:d3:
50:89:67:cf:be:38:48:de:4f:d5:45:79:28:27:06:e9:3c:3f:
1b:02:87:ac:c1:8c:bf:92:84:13:9f:9d:bf:da:fb:cf:f8:93:
f1:b3:c8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 07:08:10 2026 by rpki-client