Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
File: Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft (raw, json)
Hash identifier: Bx/oLWtRRV+elyGSd/jUoj9MBcnqnHZ0+FhlinswFM8=
Subject key identifier: CC:C0:BD:BA:B4:EA:60:EB:15:62:F6:AD:68:4E:26:98:76:97:1F:31
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Certificate issuer: /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial: 019DCED0735030FC2C67776DCBD3603A3115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
Manifest number: 0C2D
Signing time: Mon 27 Apr 2026 12:01:00 +0000
Manifest this update: Mon 27 Apr 2026 12:01:00 +0000
Manifest next update: Tue 28 Apr 2026 12:01:00 +0000
Files and hashes: 1: KMAEa9OCX7dPwOPc5CJYhNs8ojY.roa (hash: f65tXDX3mMjV/mW2SVpRbEGR4feswzLgiQejwHwqVkw=)
2: Nci9lsNGIPEJciI_02MYQShYrvY.roa (hash: cU3WWc7uClAgsFId9BVjWLwxlIytoViqM1ELsAMYo/k=)
3: Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl (hash: E7PKakpsmWYhctO09tJ/etJss7vu6BVorLoRTG2+kPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:73:50:30:fc:2c:67:77:6d:cb:d3:60:3a:31:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Validity
Not Before: Apr 27 12:01:00 2026 GMT
Not After : Apr 28 12:01:00 2026 GMT
Subject: CN=ccc0bdbab4ea60eb1562f6ad684e269876971f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:a4:c3:c4:2a:65:a7:a7:74:76:53:de:40:
87:08:a8:05:1e:5a:b5:54:14:d5:86:21:95:00:4e:
47:0f:e7:fc:4c:84:c3:bb:28:52:63:cf:f1:cd:29:
07:b1:73:57:1a:49:76:9b:fa:16:84:3e:16:7d:8f:
00:d9:ad:c2:6f:11:c2:d8:85:70:bd:c8:8d:c6:19:
f6:bd:9d:2d:1a:aa:16:63:21:75:60:2b:c5:cb:4e:
05:f0:2a:3e:80:bb:74:9a:50:25:f4:5b:4f:e0:be:
7c:26:e5:d0:0e:82:ea:3a:04:9e:b3:8f:ed:e1:7f:
5a:fb:f8:82:47:35:33:5c:2e:27:26:df:be:2f:71:
ad:02:38:0b:8d:a9:3f:6c:0f:7f:d7:b6:5c:63:68:
90:d8:e4:8c:c4:e3:5c:ef:6b:5c:77:c7:fe:4e:ad:
32:6c:d5:26:6d:70:8f:1d:1d:ee:f2:83:bb:fb:a1:
be:df:8f:a6:cc:fa:c2:c3:23:2e:00:69:d2:70:c5:
40:cc:35:33:05:69:da:09:ac:8e:f9:e1:00:b8:7a:
a9:5a:1f:9b:79:30:9e:c1:1e:5a:d4:cd:da:a9:3f:
ad:b0:18:73:19:d8:d7:7c:3a:f8:05:07:ab:4b:db:
4b:68:16:8f:ba:61:70:d6:ed:2e:44:cd:d8:92:1a:
a7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C0:BD:BA:B4:EA:60:EB:15:62:F6:AD:68:4E:26:98:76:97:1F:31
X509v3 Authority Key Identifier:
keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:19:b0:47:06:af:7c:cc:c6:ac:81:0e:ff:90:80:29:9b:22:
ef:bf:f7:25:24:ee:7c:82:73:6d:4b:52:ab:0c:df:27:7f:ec:
2e:8e:8d:b3:d4:88:2f:4d:88:2f:4a:be:6c:bb:5b:27:73:b4:
95:6a:e4:91:1f:bd:ee:de:83:cd:d6:1a:56:8e:6b:fe:8f:9e:
79:54:c9:b2:9e:b5:76:83:e5:13:db:9d:52:3d:23:f1:29:c3:
b0:4b:8a:13:93:84:ec:0a:6f:9a:5b:bf:55:e1:3e:24:24:5a:
1b:c4:60:0b:49:d7:8c:18:ca:b8:a1:54:1a:f7:46:97:23:8e:
a3:6b:fa:90:29:4c:21:24:30:bc:3d:c3:28:8f:80:82:39:50:
64:ac:75:49:55:fc:e1:13:13:72:ea:fe:fd:ee:d7:5a:89:78:
e3:b7:a1:81:4d:fb:39:eb:9b:53:5b:04:cb:eb:fc:fa:bd:1b:
55:62:ce:59:d1:06:b7:3e:45:81:c9:25:b0:f4:6e:3b:d9:af:
94:65:f9:ac:8b:a2:2e:74:f0:25:9e:85:41:69:80:25:cb:1d:
bf:33:78:21:55:62:9d:07:00:f5:21:2c:c4:63:30:60:fe:8b:
de:55:dc:fd:92:4a:27:43:a3:65:5a:a9:6a:0c:a2:2b:77:f5:
66:68:31:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:04:11 2026 by rpki-client