Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
File: orzYisPgLP-tPADeRrXaM2vWRwI.mft (raw, json)
Hash identifier: Sqm65qaB12j4SIOvODPXgXWGaHyH54Ldj3ekShWaHFM=
Subject key identifier: EF:27:A5:85:16:BD:D5:13:69:5B:58:DA:FD:65:C4:ED:7F:60:39:F8
Authority key identifier: A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02
Certificate issuer: /CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
Certificate serial: 019D27E02885F43CDF64639F31E5AB71F71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
Manifest number: 1595
Signing time: Thu 26 Mar 2026 02:01:35 +0000
Manifest this update: Thu 26 Mar 2026 02:01:35 +0000
Manifest next update: Fri 27 Mar 2026 02:01:35 +0000
Files and hashes: 1: orzYisPgLP-tPADeRrXaM2vWRwI.crl (hash: 7wZ0MtcOxLEMNPfF0wAenz419bZnbvBR4jVxus9vyyI=)
2: qUQtHHzlZlnAdpcBQCFJU2QvkX0.roa (hash: qu1JzAxBAaT1Zxg22q0d5br8OX9u/IStZcSKhmMoN5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:28:85:f4:3c:df:64:63:9f:31:e5:ab:71:f7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
Validity
Not Before: Mar 26 02:01:35 2026 GMT
Not After : Mar 27 02:01:35 2026 GMT
Subject: CN=ef27a58516bdd513695b58dafd65c4ed7f6039f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bf:38:57:3c:12:39:3a:59:c8:13:bb:30:cb:
67:5e:d5:07:1c:5b:8c:ec:85:a0:4e:35:14:d8:58:
d7:1d:09:ff:f8:8a:c7:da:21:7e:7a:7b:2e:e3:f3:
db:c4:03:ed:bc:23:25:89:e9:69:35:25:34:27:84:
53:18:f7:90:e1:f6:a0:75:c5:f0:56:79:13:14:50:
be:e0:af:8f:54:18:6e:88:2f:18:b8:12:07:3e:df:
2f:a8:65:7e:39:06:e4:ff:99:4a:ed:44:6d:1d:9a:
e5:b1:22:d9:c2:b9:0f:a4:cf:7b:0c:9a:cf:11:8f:
09:9c:84:71:e5:14:42:3f:4a:f4:98:f8:11:d0:dd:
6d:8b:52:4a:ec:7c:64:17:79:97:b9:5c:53:46:d8:
aa:0b:74:b4:71:1a:bc:74:2c:8b:ac:37:c3:4f:3a:
70:5f:e3:89:64:2a:f8:19:8b:d8:66:b5:d1:45:86:
bd:d0:56:7d:fa:56:a9:f8:41:f5:6c:4d:c9:c6:01:
b4:3e:32:8e:3b:aa:c5:30:bd:89:71:ba:8a:e0:2b:
9e:80:c7:6d:56:8a:6b:5d:a0:54:f1:08:49:ab:8c:
09:36:d1:ae:71:37:46:14:83:53:f3:28:59:9b:6c:
c1:45:01:10:e6:0a:95:c9:e4:6d:65:85:8e:67:ac:
c4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:27:A5:85:16:BD:D5:13:69:5B:58:DA:FD:65:C4:ED:7F:60:39:F8
X509v3 Authority Key Identifier:
keyid:A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d9:45:5f:da:82:cf:8a:80:74:25:8b:09:1f:ee:9d:36:b6:
5b:85:93:6c:04:f3:54:d9:1e:25:40:a4:71:75:20:d5:73:d2:
6b:9d:a7:05:7d:62:25:71:71:85:d1:fc:29:32:82:56:5f:aa:
38:2d:ba:3c:92:86:c1:e9:23:4c:02:fe:75:8f:68:d4:22:6f:
d9:3c:fa:e1:9f:16:db:78:52:b3:3e:23:da:5a:c2:b6:e8:9d:
4d:01:75:b1:1e:02:4d:c8:6b:42:ee:96:ec:c6:c2:64:bc:9b:
77:89:15:f7:0a:88:d4:71:bf:0e:b9:a0:3b:0f:f7:c8:4e:a2:
c0:8e:e1:74:8b:9a:1f:5f:a9:d3:36:13:45:41:20:b9:d8:13:
6e:8a:7d:2c:ac:50:c1:d6:d2:e2:50:c7:a1:f6:6d:02:db:ef:
82:c9:b5:2c:d6:e3:59:e1:ad:f0:f6:9a:85:70:9a:81:6b:b0:
f4:db:96:81:ef:3f:58:4d:3d:e9:de:a2:3c:a8:22:47:e7:2e:
46:73:3f:58:81:06:84:44:0d:c1:06:e2:1b:9c:d1:b5:46:9b:
8a:13:f5:00:65:94:50:c1:b7:4c:9b:59:3e:41:0c:28:fa:bd:
d2:b1:25:d2:bb:df:48:89:af:8e:c8:21:0f:2e:15:56:e3:20:
f5:a7:93:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:32 2026 by rpki-client