Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier: 5CgwZ0Nr1e4X+OYFvByEujGcgIix7ojLoSDDzp6Hslc=
Subject key identifier: AA:9D:3E:9A:5F:8D:7C:AF:03:47:56:E0:CA:94:4D:D8:F9:B2:06:1D
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 019E303B5BC632A6BAF406627707A54AFE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number: 1913
Signing time: Sat 16 May 2026 10:00:56 +0000
Manifest this update: Sat 16 May 2026 10:00:56 +0000
Manifest next update: Sun 17 May 2026 10:00:56 +0000
Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: lwBFGGDOF2cvVS4MRtKYQalrlLi7qNrTWeFvufQg4Eg=)
2: 3Vkd60WGnI7l2PM3HZFLlJxxjrY.roa (hash: Au6VFeA1y/3YJcbru/t0IUFfv15HD8c8YE7GcJ7+Cf8=)
3: ZtbiR2gXLmTAF_Ba81OuZamF65A.roa (hash: E3OpmkUHD20zWo50pMNSXcgN+lKW8YTl+sRAVHhIEok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:5b:c6:32:a6:ba:f4:06:62:77:07:a5:4a:fe:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: May 16 10:00:56 2026 GMT
Not After : May 17 10:00:56 2026 GMT
Subject: CN=aa9d3e9a5f8d7caf034756e0ca944dd8f9b2061d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:2f:e4:c4:b2:42:ef:8a:25:c2:05:8d:09:
7c:4a:8d:b5:4b:57:c0:31:e1:de:3c:6c:87:b1:67:
97:25:db:76:a2:d0:3c:d0:f3:48:ec:12:a0:a6:2e:
b6:9a:9c:9b:81:7f:be:ee:80:18:d4:9d:73:7e:7e:
8e:3c:53:5e:4d:10:6f:49:0f:ba:76:aa:90:cc:92:
48:14:89:59:2a:21:e0:67:23:e2:5f:80:db:0b:46:
cd:4b:42:ac:ac:6b:af:3a:d1:c0:14:e1:45:31:24:
98:c6:02:a2:be:44:b5:06:9b:9d:a6:c8:cd:42:67:
fe:d6:70:0f:26:6c:87:28:cf:50:f7:b5:aa:c9:db:
67:e7:da:09:d6:fa:a3:0b:3f:0d:87:b6:2e:c9:f4:
f6:53:f0:ff:12:95:25:bc:4e:eb:70:1c:a0:ba:85:
50:47:23:c6:3d:76:35:aa:ac:89:e6:fb:92:f9:f7:
25:32:40:6b:51:3b:0f:8f:d2:fa:b6:6b:0a:db:24:
be:f1:60:58:c7:5f:71:85:5f:45:e0:3f:b3:f8:c9:
30:2c:02:eb:c1:19:42:96:fe:64:ff:02:26:fe:a1:
3b:dc:04:8a:c0:12:ab:d4:b3:de:c7:2e:80:2b:b8:
9b:7b:c0:d6:a8:4a:72:38:b0:fb:f4:64:1b:a1:16:
e3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9D:3E:9A:5F:8D:7C:AF:03:47:56:E0:CA:94:4D:D8:F9:B2:06:1D
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:98:29:eb:c5:d5:d7:d6:72:ff:70:54:e4:02:83:c9:45:39:
0c:70:e9:dd:b2:35:4e:86:f9:de:5d:f5:53:2c:46:78:ce:e8:
3d:02:fe:f4:be:d7:07:43:40:b8:4e:b6:74:03:6d:09:72:25:
5e:00:cd:41:24:5d:6f:9f:9b:28:5b:92:a9:1c:27:dc:ec:f4:
58:be:d5:94:b5:71:af:04:6b:2a:65:11:6e:94:21:66:c9:79:
10:e1:f3:f0:84:e3:c0:99:5d:0e:80:b2:6b:1b:63:12:1c:3c:
02:ab:31:16:eb:a5:0d:38:93:97:1a:8a:77:ff:0e:76:dd:1f:
23:a2:03:19:95:e8:4c:6a:a8:fa:4d:42:c6:9b:a0:e2:dc:52:
78:43:e0:43:54:15:61:35:d6:75:72:bb:aa:3f:8f:0e:bb:2f:
13:bf:d7:5c:1c:da:5e:ca:38:dd:7f:75:28:f5:61:9d:cd:29:
03:5e:a6:96:bf:99:fc:f8:cb:d2:3a:9c:c2:41:03:d9:1c:67:
1a:52:9e:21:94:a5:10:2f:5f:82:67:1b:03:08:39:a6:02:4c:
9c:7c:e7:41:f5:07:fc:84:88:df:a9:67:09:0f:1c:0d:70:e5:
11:81:be:b7:8c:76:10:3c:3c:3a:fa:1b:78:19:38:26:ba:e7:
33:d0:3f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:15 2026 by rpki-client