Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier: h3grN4FU/kknUfpheasTNtyfedOo/9k57D/AQEpCb0g=
Subject key identifier: 02:1D:5E:DB:33:00:C5:CF:A0:BE:0E:CD:F9:CE:3E:CA:4F:E1:F4:B0
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 01A001A6633065BDEB7D0D4274A64DA63897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number: 1A04
Signing time: Fri 14 Aug 2026 19:01:16 +0000
Manifest this update: Fri 14 Aug 2026 19:01:16 +0000
Manifest next update: Sat 15 Aug 2026 19:01:16 +0000
Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: hwtiZUrtMOqvklHtU6HBg5+eUVSzU8zWncFXkPEDOew=)
2: 3Vkd60WGnI7l2PM3HZFLlJxxjrY.roa (hash: Au6VFeA1y/3YJcbru/t0IUFfv15HD8c8YE7GcJ7+Cf8=)
3: ZtbiR2gXLmTAF_Ba81OuZamF65A.roa (hash: E3OpmkUHD20zWo50pMNSXcgN+lKW8YTl+sRAVHhIEok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:63:30:65:bd:eb:7d:0d:42:74:a6:4d:a6:38:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Aug 14 19:01:16 2026 GMT
Not After : Aug 15 19:01:16 2026 GMT
Subject: CN=021d5edb3300c5cfa0be0ecdf9ce3eca4fe1f4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:69:2a:40:06:c7:42:dc:bd:be:aa:b2:f3:
76:b5:fe:3c:9a:ee:ba:e8:ae:0e:bd:f7:37:d4:6d:
1b:a4:77:19:61:5c:ef:26:3b:12:00:48:01:5a:cf:
89:99:f2:e5:87:b4:1d:92:47:4d:4b:65:20:1f:ec:
82:97:4c:62:b3:84:23:5e:0e:d6:e2:4a:9a:78:3e:
f2:6f:5d:e1:08:d6:c8:62:94:87:e0:37:d8:64:49:
6a:f0:88:ab:a7:e0:97:bf:c8:8d:f7:cd:b9:29:d0:
db:32:98:22:2b:90:c8:6c:f0:86:2c:e9:00:45:74:
d9:01:4d:3a:b3:44:0a:64:79:a2:f8:50:17:1f:13:
00:56:b0:7e:ac:c5:ba:8b:5e:e7:9a:4b:16:45:fd:
a4:90:d9:e7:82:4b:58:df:5f:76:c8:21:45:a2:59:
68:cf:83:7b:00:b7:a0:90:65:0a:96:7a:ea:b2:41:
06:48:e7:66:f3:2c:7b:d5:53:99:da:23:e4:21:0a:
77:77:21:65:83:12:55:26:e1:57:0e:e0:84:01:2f:
47:10:b6:17:49:9f:47:e8:c5:7c:98:3f:d2:7c:1e:
db:90:0f:e1:f1:f1:e1:ae:c7:bd:83:aa:df:e3:fa:
d9:41:d7:26:bc:c2:a2:c4:5d:c7:15:4f:7b:28:0c:
64:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1D:5E:DB:33:00:C5:CF:A0:BE:0E:CD:F9:CE:3E:CA:4F:E1:F4:B0
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ed:e0:16:f5:c7:7a:8e:65:aa:64:ed:a9:94:1c:e6:54:3b:
98:e4:8a:87:c1:69:d7:eb:2f:6e:73:c2:65:cb:40:12:dc:47:
f4:e9:8e:12:15:8b:c6:8f:fb:ad:4e:bf:0b:2a:03:7c:33:45:
37:d3:d8:d5:13:fb:bd:9b:ce:da:1b:04:6c:33:bc:4a:70:91:
7c:ad:82:46:4a:96:b6:6c:42:3e:bb:3e:03:59:74:24:95:a5:
2d:50:07:56:c0:66:55:31:86:1e:29:05:6c:d1:ff:53:38:e7:
91:fa:05:f7:0d:d8:01:0f:ab:6f:c3:50:72:77:95:7b:ba:8a:
fa:08:2a:d2:c5:ea:a9:ef:7c:0a:f2:7a:0d:eb:b5:dc:f7:06:
25:af:20:6d:b4:a4:97:a2:6b:44:80:0a:24:6a:f3:07:37:0e:
f5:97:8d:cf:06:e3:f4:d7:b1:1d:cb:ce:0f:79:af:99:d7:15:
61:9c:fe:5e:0f:fc:65:ce:ea:55:47:46:60:35:0a:f8:10:3d:
94:1d:b2:fe:e1:b3:22:19:ac:39:df:f8:2e:1e:60:ac:1a:4d:
07:eb:cf:d2:17:24:df:36:bd:ee:68:98:d6:c6:90:bc:98:9e:
b9:94:b8:29:a7:c5:56:9e:7b:66:f1:2d:77:d6:22:cc:3b:8b:
0c:fe:19:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:22 2026 by rpki-client