Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
File: orYtO_awxSR-3fRJjCzOYMDR5Qg.mft (raw, json)
Hash identifier: 9chnOfHv+S6JdDzFMPIPC83vALGxds4IkNjN4oTf+QA=
Subject key identifier: 39:7B:00:31:1E:7B:AE:6C:64:9C:D0:27:24:81:E0:4B:F9:12:69:CD
Authority key identifier: A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
Certificate issuer: /CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Certificate serial: 01A0D9F13C3F96FAE070CA04499192E45B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
Manifest number: 03DA
Signing time: Fri 25 Sep 2026 19:01:00 +0000
Manifest this update: Fri 25 Sep 2026 19:01:00 +0000
Manifest next update: Sat 26 Sep 2026 19:01:00 +0000
Files and hashes: 1: kXoK6s5aaaUzOJxxUcmmhqIaSLQ.asa (hash: 59NmHjBSvzipBM//GfVuJezWtnTbIsL21l5xvXSlCcM=)
2: mEVvhwiNz6QqGLc9f-BWMr-sDwM.roa (hash: h1jacdxfF70jEn15fnToAbzAGwIESAy79zZWfqs5+II=)
3: orYtO_awxSR-3fRJjCzOYMDR5Qg.crl (hash: EK2Rm/ppGhKPNVflQ08vKikTauHyeetfxZnZN3eoDs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:3c:3f:96:fa:e0:70:ca:04:49:91:92:e4:5b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Validity
Not Before: Sep 25 19:01:00 2026 GMT
Not After : Sep 26 19:01:00 2026 GMT
Subject: CN=397b00311e7bae6c649cd0272481e04bf91269cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:9b:07:2d:f7:1b:4f:e7:50:ca:1a:a7:91:
49:21:ec:33:d1:17:d6:c6:bd:13:eb:4e:1c:9f:b1:
6f:32:7b:16:30:17:c3:be:41:37:dc:7e:0a:26:d1:
bf:ef:62:78:3d:cf:21:1d:79:69:81:b0:77:d0:35:
ec:b7:7c:4d:2f:d3:7c:d7:38:f3:dc:4b:75:7e:d8:
f5:0f:ac:cb:d2:d9:8f:68:f9:06:5a:12:a4:62:f1:
f1:c6:d4:bb:83:cf:a2:ff:5c:37:75:e3:d2:01:49:
99:95:5d:8e:d7:38:93:e7:82:d3:cf:42:7e:bb:12:
02:95:0f:55:5f:7f:40:7a:9e:c8:bb:13:48:5f:b4:
94:b1:7c:2f:2d:8f:4d:6f:61:69:13:df:65:01:3d:
75:8d:4f:e4:43:d0:d9:9b:47:27:16:83:e6:83:0a:
dc:45:f1:79:5c:c4:89:1f:65:1d:b8:ff:e3:3e:7f:
02:e4:08:cc:ab:fc:df:bc:83:a8:ec:f9:e0:b5:9b:
b0:0f:6c:52:f2:62:cd:3d:68:b0:be:7c:0d:93:ce:
9e:09:58:e4:0c:49:a7:3b:dd:73:f8:a8:99:ea:bf:
97:8b:d9:5e:cf:2e:1c:2c:d8:cb:b6:fa:d0:39:8e:
42:46:92:c3:13:05:33:17:81:a8:67:da:5d:99:f6:
50:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7B:00:31:1E:7B:AE:6C:64:9C:D0:27:24:81:E0:4B:F9:12:69:CD
X509v3 Authority Key Identifier:
keyid:A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a8:f7:3a:43:40:0b:9d:30:98:42:33:62:3c:94:70:37:c6:
e1:7d:eb:74:40:2a:7a:6a:a8:f4:bf:31:9e:91:23:8c:47:2e:
01:28:44:f2:20:d7:cb:fb:10:21:fd:7d:c1:07:a9:dd:84:3a:
06:6a:08:d8:13:6c:8f:eb:d2:7e:83:f4:2b:b6:74:31:3a:29:
b0:f0:1b:91:01:fc:95:25:87:bd:e2:98:2c:36:a1:a3:34:cc:
13:87:35:75:90:69:b7:2c:06:3d:ab:2c:4a:f4:43:90:1f:bc:
c3:50:48:97:5e:48:22:01:b1:8c:68:2c:d2:92:ee:8c:02:d5:
1f:0c:dd:e6:02:b4:8d:2b:d0:7d:08:37:c1:92:3a:8d:79:54:
22:96:c8:f9:e7:68:81:d7:f5:29:ad:c1:d2:c2:b2:46:14:97:
a7:3b:38:16:22:17:c9:c8:8e:c7:7e:a4:7b:9a:8f:0f:b7:40:
91:5f:36:d7:4e:ac:87:eb:2e:b0:1e:ca:0f:fe:f6:50:f0:65:
23:ac:e8:ec:90:d2:ce:cf:aa:88:4f:0a:f4:af:17:7e:ec:c1:
cb:6e:a2:8e:98:99:45:c7:2f:e3:a9:d4:b3:11:d7:2b:5a:56:
44:9c:47:c4:2f:c1:1e:7a:e5:ec:95:d6:f8:00:d9:72:3a:01:
6f:ea:e4:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZ8Tw/lvrgcMoESZGS5FsUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYjYyZDNiZjZiMGM1MjQ3ZWRkZjQ0OThjMmNjZTYwYzBk
MWU1MDgwHhcNMjYwOTI1MTkwMTAwWhcNMjYwOTI2MTkwMTAwWjAzMTEwLwYDVQQD
EygzOTdiMDAzMTFlN2JhZTZjNjQ5Y2QwMjcyNDgxZTA0YmY5MTI2OWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpabBy33G0/nUMoap5FJIewz0RfW
xr0T604cn7FvMnsWMBfDvkE33H4KJtG/72J4Pc8hHXlpgbB30DXst3xNL9N81zjz
3Et1ftj1D6zL0tmPaPkGWhKkYvHxxtS7g8+i/1w3dePSAUmZlV2O1ziT54LTz0J+
uxIClQ9VX39Aep7IuxNIX7SUsXwvLY9Nb2FpE99lAT11jU/kQ9DZm0cnFoPmgwrc
RfF5XMSJH2UduP/jPn8C5AjMq/zfvIOo7PngtZuwD2xS8mLNPWiwvnwNk86eCVjk
DEmnO91z+KiZ6r+Xi9lezy4cLNjLtvrQOY5CRpLDEwUzF4GoZ9pdmfZQDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDl7ADEee65sZJzQJySB4Ev5EmnNMB8GA1UdIwQY
MBaAFKK2LTv2sMUkft30SYwszmDA0eUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS84M2RjMmQtNTMxMS00NWE2LWEwOGEt
NjJiZjE1YzQ2NzRhLzEvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS84M2RjMmQtNTMxMS00NWE2LWEwOGEtNjJiZjE1YzQ2NzRh
LzEvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6j3OkNA
C50wmEIzYjyUcDfG4X3rdEAqemqo9L8xnpEjjEcuAShE8iDXy/sQIf19wQep3YQ6
BmoI2BNsj+vSfoP0K7Z0MTopsPAbkQH8lSWHveKYLDahozTME4c1dZBptywGPass
SvRDkB+8w1BIl15IIgGxjGgs0pLujALVHwzd5gK0jSvQfQg3wZI6jXlUIpbI+edo
gdf1Ka3B0sKyRhSXpzs4FiIXyciOx36ke5qPD7dAkV82106sh+susB7KD/72UPBl
I6zo7JDSzs+qiE8K9K8XfuzBy26ijpiZRccv46nUsxHXK1pWRJxHxC/BHnrl7JXW
+ADZcjoBb+rk3A==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:51:46 2026 by rpki-client