
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier: I7OL3k0Rq0R3Gz9JYKyVLy5cG23CFzxD88zrZ9+DgnU=
Subject key identifier: 9D:A2:E8:00:B2:8A:BD:BB:44:4A:E8:66:FC:FD:E9:28:66:D2:48:AC
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 019F17F9954B9AB841B01D5E0B12067B6266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number: 198B
Signing time: Tue 30 Jun 2026 10:01:00 +0000
Manifest this update: Tue 30 Jun 2026 10:01:00 +0000
Manifest next update: Wed 01 Jul 2026 10:01:00 +0000
Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: n+lQdTauOjA4fwLDvkPIrFtS4nWi1URLGG/vbVrx7bs=)
2: 3Vkd60WGnI7l2PM3HZFLlJxxjrY.roa (hash: Au6VFeA1y/3YJcbru/t0IUFfv15HD8c8YE7GcJ7+Cf8=)
3: ZtbiR2gXLmTAF_Ba81OuZamF65A.roa (hash: E3OpmkUHD20zWo50pMNSXcgN+lKW8YTl+sRAVHhIEok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:95:4b:9a:b8:41:b0:1d:5e:0b:12:06:7b:62:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Jun 30 10:01:00 2026 GMT
Not After : Jul 1 10:01:00 2026 GMT
Subject: CN=9da2e800b28abdbb444ae866fcfde92866d248ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:8e:16:d3:55:99:c4:7b:1d:46:be:36:68:
25:d7:8b:9f:eb:ac:4d:c8:bf:79:e1:f8:b5:2f:20:
8f:5d:ca:55:86:b1:05:ef:26:d0:b3:41:5b:7f:5e:
60:78:b2:35:6d:77:87:e2:22:82:c7:26:89:2f:72:
28:18:2b:8f:72:73:00:27:7b:4b:58:ff:9d:b0:99:
04:31:28:16:de:49:9e:18:24:a3:ab:62:53:87:cf:
da:4f:50:d6:1e:71:34:c9:07:fa:12:31:f1:c7:05:
26:17:e6:82:ba:72:ef:af:75:95:e9:63:ed:f0:bf:
11:27:d0:f4:d9:12:db:74:10:61:04:6a:7c:3c:cf:
5e:95:9f:c7:15:96:c1:29:ae:ec:fc:b6:f5:41:50:
3f:00:db:3c:e0:08:a4:9f:01:e3:25:91:3d:c1:10:
09:79:17:84:d6:f4:de:b6:a7:4c:c7:e6:cf:a8:7f:
48:29:ec:3e:67:ab:16:02:6f:9a:13:10:fb:73:e4:
c0:04:79:83:04:21:45:da:5f:77:54:8d:0e:0b:d5:
86:8e:ee:32:0e:1c:a8:7c:43:72:f8:f0:2a:ef:99:
b8:8f:70:69:55:79:5c:62:04:9d:f9:86:f1:3e:82:
09:cc:7d:4f:50:cd:ae:f9:2a:ed:f1:8c:64:10:8d:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A2:E8:00:B2:8A:BD:BB:44:4A:E8:66:FC:FD:E9:28:66:D2:48:AC
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:58:64:a9:f8:94:1d:58:72:cb:e9:6e:3f:35:14:24:22:12:
f8:ea:31:ea:48:3f:ba:8b:32:1a:30:3b:4f:0c:bd:8a:30:5a:
b1:b2:a0:f9:e5:f3:f2:6a:ee:4b:08:e9:a3:31:62:08:7c:06:
29:34:c1:a8:ce:46:ff:d1:2e:d4:02:47:5e:d5:9d:9d:a7:14:
d3:c8:d1:0c:68:57:b4:c1:b9:cb:cd:d6:9c:9b:28:e6:79:8d:
a2:7c:5e:32:72:b6:c9:73:25:89:34:79:0d:cc:84:aa:f7:c8:
b7:48:77:06:87:f7:5a:3e:12:b4:7b:0b:17:47:2a:52:d0:53:
25:81:75:3f:63:a8:17:a9:ed:ac:7c:27:b1:ba:1c:98:ff:6f:
45:20:48:0b:2c:14:7e:93:a9:78:be:e9:0c:9c:b5:e3:71:2a:
ca:8f:a0:68:ba:4f:b8:4b:b9:3a:9f:95:0b:62:7f:a2:80:38:
34:75:df:2a:41:e4:f1:e5:84:66:2c:83:cf:7d:28:25:32:ef:
8d:41:3b:51:27:5b:68:09:2f:16:61:a5:aa:ac:26:63:d4:f7:
ed:d9:22:7c:32:f1:af:7d:07:b0:ce:ae:94:59:59:e6:d1:d5:
02:c7:70:9e:35:bb:02:af:af:d4:ae:3d:5d:98:a6:b8:ab:74:
4d:2d:bd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:30:19 2026 by rpki-client