Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
File: bOrnoCiJYKda-M6A54iFQ8f3fNc.mft (raw, json)
Hash identifier: kFzK35LfqNTlODOib3amA8nebT5n0eHSIEDb2sNWm6E=
Subject key identifier: 7A:00:0A:D8:47:FA:04:CC:04:20:7B:5C:46:B3:9F:E6:7B:B1:FE:91
Authority key identifier: 6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
Certificate issuer: /CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Certificate serial: 019D26CD8B972A34200120995A21712B6576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
Manifest number: 1594
Signing time: Wed 25 Mar 2026 21:01:37 +0000
Manifest this update: Wed 25 Mar 2026 21:01:37 +0000
Manifest next update: Thu 26 Mar 2026 21:01:37 +0000
Files and hashes: 1: 06iciWMnCvsa1G81d73kMnybKl0.roa (hash: 9/zv2guSkQOWznP9YeG/uAwYzC8tOeda3ReFt/vmKVQ=)
2: bOrnoCiJYKda-M6A54iFQ8f3fNc.crl (hash: qmbQp86oQYlWuNOe7aSqGSZ1HYYh7M53qgpoYnt0fts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:8b:97:2a:34:20:01:20:99:5a:21:71:2b:65:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Validity
Not Before: Mar 25 21:01:37 2026 GMT
Not After : Mar 26 21:01:37 2026 GMT
Subject: CN=7a000ad847fa04cc04207b5c46b39fe67bb1fe91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:7f:05:dd:dd:5a:7c:f1:ac:e1:bd:93:e5:
08:a4:55:0c:2c:08:db:2f:eb:59:5f:f7:42:b4:f8:
e2:28:18:b2:93:92:f3:94:83:7e:78:54:fe:11:1a:
db:f1:f7:bf:78:db:67:85:3f:51:eb:4b:17:ea:29:
dc:92:84:7b:f5:3d:75:c0:0d:fd:54:57:0a:e8:df:
37:d2:40:83:05:88:00:7c:7e:71:bf:84:3f:9c:08:
b6:a1:ab:59:f3:f0:fc:7e:84:ac:4f:09:86:a9:73:
4f:a0:7a:47:9f:e3:38:c5:2d:32:20:61:ca:61:4c:
c8:70:7f:bb:f5:08:22:6d:03:b1:29:51:e0:bb:25:
97:71:03:48:0a:9a:20:81:02:6e:97:1a:c2:e2:bf:
1e:d9:0f:4d:c6:2e:a3:44:12:07:5c:20:eb:f3:d4:
14:49:ac:9a:b6:a3:e9:ca:fc:bb:d1:08:35:85:08:
92:f5:c7:3d:ce:20:05:b9:80:a2:78:80:00:2a:ea:
b2:b4:1a:1a:f6:e5:15:c4:fa:45:26:36:c8:b5:0b:
53:bd:43:bd:05:75:e3:32:96:39:50:f1:53:bb:60:
0b:65:86:39:79:3f:36:98:36:fa:b6:33:10:fb:a8:
3d:ef:0e:45:6d:e3:28:41:08:9f:a3:aa:ce:d7:3c:
33:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:00:0A:D8:47:FA:04:CC:04:20:7B:5C:46:B3:9F:E6:7B:B1:FE:91
X509v3 Authority Key Identifier:
keyid:6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d8:ba:37:42:98:83:3e:71:1f:e6:6c:fa:07:23:60:92:4a:
dc:d9:bd:8e:0f:c5:b0:99:16:7a:85:43:0e:32:52:bd:30:d0:
df:ea:84:f3:49:34:71:a2:52:3b:df:92:ff:81:43:4d:a6:e2:
37:f2:1a:e6:db:6a:26:92:75:fe:54:f0:66:d7:0d:e2:5c:65:
af:a1:d9:0e:87:65:f9:41:27:01:b0:91:2d:3c:7b:3f:50:29:
2b:7b:95:3f:f7:5a:20:a8:76:56:2f:61:61:6c:f9:d2:9c:5e:
2b:0a:04:53:45:e3:c0:45:dd:c1:0e:b6:19:21:b9:8a:c2:ed:
83:cc:e9:17:b0:9f:b6:23:06:2f:07:a5:ee:76:80:16:c5:ad:
22:fb:54:29:e2:5a:2b:ea:ca:6a:4c:b6:33:a3:b1:7d:be:17:
7a:54:8e:b8:66:e8:db:0d:a0:7b:1f:fd:e7:36:fa:0b:29:ae:
3f:ec:40:4f:f3:a7:1c:98:06:51:8b:e3:d4:67:42:be:bf:08:
56:d1:5b:af:99:31:b8:0c:cf:8c:35:02:21:ad:b3:97:d7:02:
5a:fc:c9:73:c0:89:e7:db:9b:63:33:75:1d:c0:ca:2d:b7:24:
2b:b0:17:1c:bd:d9:99:72:bc:d6:5f:3b:c8:1e:48:ef:cc:c1:
48:58:6c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:52 2026 by rpki-client