Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
File: orYtO_awxSR-3fRJjCzOYMDR5Qg.mft (raw, json)
Hash identifier: TZCdtW8wLTKj8Mbc5sUcrTlbJSd6h2VUKicgO09pL6k=
Subject key identifier: D8:B0:4B:0B:DD:35:2F:0E:8F:4D:90:A4:66:49:E8:4C:BE:39:C1:21
Authority key identifier: A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
Certificate issuer: /CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Certificate serial: 019F9392670A77E9EC84BC2646F608B5E65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
Manifest number: 0331
Signing time: Fri 24 Jul 2026 10:01:13 +0000
Manifest this update: Fri 24 Jul 2026 10:01:13 +0000
Manifest next update: Sat 25 Jul 2026 10:01:13 +0000
Files and hashes: 1: kXoK6s5aaaUzOJxxUcmmhqIaSLQ.asa (hash: 59NmHjBSvzipBM//GfVuJezWtnTbIsL21l5xvXSlCcM=)
2: mEVvhwiNz6QqGLc9f-BWMr-sDwM.roa (hash: h1jacdxfF70jEn15fnToAbzAGwIESAy79zZWfqs5+II=)
3: orYtO_awxSR-3fRJjCzOYMDR5Qg.crl (hash: v/+hiK41Fsdet52DPPDw5fwFMn3VjotKesai5IzessI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:67:0a:77:e9:ec:84:bc:26:46:f6:08:b5:e6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Validity
Not Before: Jul 24 10:01:13 2026 GMT
Not After : Jul 25 10:01:13 2026 GMT
Subject: CN=d8b04b0bdd352f0e8f4d90a46649e84cbe39c121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:a0:3d:76:ef:c8:47:90:dc:fe:12:32:95:
e6:5b:9c:15:96:70:6c:5a:71:43:24:17:65:da:c8:
00:11:2e:41:f3:77:4f:1c:1b:1c:22:ae:83:20:b6:
0b:63:55:f1:0e:45:9b:ba:c7:c2:61:ad:f1:cf:89:
43:b9:c6:92:a8:f8:49:da:73:cb:db:d1:88:0c:5c:
31:0e:4c:e6:4b:2a:0d:af:be:b9:bb:dc:58:7f:9b:
4e:8a:24:c4:1b:f4:29:36:28:7c:de:b5:3a:79:e3:
ee:b4:ec:48:06:a0:82:0a:9e:e7:f3:70:ef:34:99:
cc:80:7c:80:a2:44:34:a2:1d:45:d6:af:e7:94:55:
f5:d0:a6:b4:1d:06:28:80:70:f8:d8:dc:ce:86:a1:
84:0c:d7:59:ef:7f:cc:bf:3d:c8:03:fc:d2:30:a1:
f2:a9:fa:2a:43:3f:8d:e9:17:fb:78:ba:08:4a:b3:
1d:17:8c:5d:39:b2:56:81:3c:6c:bd:5b:58:e6:f8:
df:da:fa:37:ec:c0:fa:08:c1:1f:29:bf:15:91:66:
f5:c5:5b:1a:85:99:ca:71:db:cf:fe:48:49:28:4b:
a7:af:c3:ef:7f:ef:60:0d:aa:36:cf:84:5b:26:90:
81:f5:21:e5:15:2a:83:99:6d:56:e4:f6:26:fd:f0:
d6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B0:4B:0B:DD:35:2F:0E:8F:4D:90:A4:66:49:E8:4C:BE:39:C1:21
X509v3 Authority Key Identifier:
keyid:A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6f:cb:3f:51:ff:4c:27:68:dc:cd:46:09:a8:ed:b0:93:ed:
cb:8d:dd:7a:19:2b:00:e3:7a:20:2f:dc:80:90:a1:3c:f2:1e:
78:a1:c2:6a:3b:d0:2a:a3:5c:76:e9:8b:fa:98:a2:e6:e2:b9:
04:ed:b9:96:8b:0a:9a:24:76:c9:48:5e:08:5a:b3:28:e3:4a:
df:01:07:f8:2d:34:6d:91:ef:df:10:99:63:6a:ff:07:de:38:
73:12:0c:2a:fc:d9:da:00:b9:a9:fb:3c:03:4c:60:ba:ac:68:
4e:83:02:50:34:5f:04:b3:88:10:c1:93:7a:3e:de:cc:54:61:
22:ec:30:3c:cc:3f:61:0d:48:68:a5:93:20:05:16:2c:a1:ad:
d6:b0:a5:0a:83:c9:a2:e8:b6:0b:c2:60:e4:51:d5:2c:55:bb:
30:b9:e0:c5:12:21:95:ac:13:d1:71:35:02:70:9f:d2:4d:38:
7d:79:11:a3:14:47:ea:fb:d0:4f:46:43:ef:fc:fa:f1:4c:87:
ca:e8:05:9c:8b:e8:72:ba:aa:66:f3:eb:27:dc:04:3f:56:54:
48:84:8c:2e:18:c8:1d:db:6f:dd:dd:c6:8f:45:d7:d0:ec:12:
06:cc:43:77:10:77:1f:3d:34:ff:e1:d2:9b:78:7c:e3:63:81:
ba:f3:c3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:42:20 2026 by rpki-client