Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
File: orYtO_awxSR-3fRJjCzOYMDR5Qg.mft (raw, json)
Hash identifier: +DdUS6J1Mo0pVL+qtiy8RB1HJNngyBCl5UcdyiO7vT4=
Subject key identifier: 0B:9D:2D:F8:E8:38:4E:6F:A9:B0:3E:9F:BD:51:67:8C:45:88:A6:C0
Authority key identifier: A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
Certificate issuer: /CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Certificate serial: 019D25BA628445ECF6D85CA54CFD28CD74A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
Manifest number: 01EF
Signing time: Wed 25 Mar 2026 16:01:04 +0000
Manifest this update: Wed 25 Mar 2026 16:01:04 +0000
Manifest next update: Thu 26 Mar 2026 16:01:04 +0000
Files and hashes: 1: kXoK6s5aaaUzOJxxUcmmhqIaSLQ.asa (hash: 59NmHjBSvzipBM//GfVuJezWtnTbIsL21l5xvXSlCcM=)
2: mEVvhwiNz6QqGLc9f-BWMr-sDwM.roa (hash: h1jacdxfF70jEn15fnToAbzAGwIESAy79zZWfqs5+II=)
3: orYtO_awxSR-3fRJjCzOYMDR5Qg.crl (hash: iQqsWPIyZ+b0R82P1urE0LfVxPgCVJfuz8dDkgaylMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:62:84:45:ec:f6:d8:5c:a5:4c:fd:28:cd:74:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Validity
Not Before: Mar 25 16:01:04 2026 GMT
Not After : Mar 26 16:01:04 2026 GMT
Subject: CN=0b9d2df8e8384e6fa9b03e9fbd51678c4588a6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:a5:a1:31:39:5f:02:80:a9:e0:a6:f3:e5:
1e:34:d4:d8:c4:51:61:bc:15:c4:73:bb:14:69:42:
4a:41:e0:b9:30:e6:e0:52:14:2d:eb:48:46:91:69:
7b:c9:e3:14:89:13:a5:0e:49:89:cd:8a:45:ed:1d:
c4:05:1c:19:84:08:ae:79:d1:e4:cc:26:7d:7a:cf:
55:c8:45:46:02:54:69:e3:2d:ee:19:d4:b7:7c:04:
a4:e4:ff:aa:39:61:ab:d3:d7:99:3c:e1:a2:b8:12:
b1:56:d9:fa:76:cf:b8:25:bf:b7:68:2b:dc:02:55:
cc:7c:ac:68:76:1f:4c:c9:9e:da:8e:45:65:fc:11:
f5:d7:12:65:63:4f:b7:ed:b6:4b:10:65:8a:7f:c2:
d8:0d:84:8e:45:e8:66:ea:a3:93:a7:d8:2a:52:2b:
be:2d:18:10:29:bb:8b:30:a7:42:af:fc:f6:db:07:
2e:04:05:31:73:4f:83:cd:61:33:5f:53:af:f3:20:
cc:2d:2c:40:99:d6:ec:35:b2:cd:ac:c7:e7:0e:95:
4d:22:7a:cc:6d:c9:66:4d:40:7c:11:b4:e3:84:87:
74:d5:d3:3d:3b:fa:71:c7:9c:f7:0f:48:a2:89:2f:
a2:07:09:6c:43:1f:92:03:82:8b:10:ff:54:b5:01:
d9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9D:2D:F8:E8:38:4E:6F:A9:B0:3E:9F:BD:51:67:8C:45:88:A6:C0
X509v3 Authority Key Identifier:
keyid:A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:23:85:1b:19:bf:d5:ad:c2:2a:c5:10:b1:6a:7c:b8:3f:a2:
44:76:25:a4:20:6f:6e:1a:6e:41:75:62:eb:19:88:9b:60:88:
2d:e8:1f:58:63:aa:04:50:9a:11:ad:e6:f0:dd:dc:a2:4e:cf:
92:d9:ff:70:47:fa:a3:5f:8e:c0:28:09:f4:c0:f4:3a:c3:15:
05:a2:19:f0:c2:16:64:92:2e:db:3f:04:36:a6:e7:0c:79:9c:
be:c8:6c:41:d5:a6:7e:54:79:1c:5c:cd:63:1f:c3:2e:18:bb:
f9:b8:c4:2b:27:e9:ff:bd:a7:36:bf:84:f7:34:50:bc:9b:4a:
e3:5a:80:7f:31:df:36:fb:34:a8:a8:f0:b9:78:74:be:d1:9f:
dd:10:25:b4:3f:df:88:c1:ae:a2:e2:8b:16:83:e9:3d:d2:32:
05:3f:31:0c:8c:02:70:58:df:a4:f9:f8:8a:06:33:2e:46:3a:
1d:f4:6c:09:a7:b4:a6:6a:dd:81:1e:56:dd:83:24:ef:97:1f:
a3:1d:07:87:02:8e:cc:60:5a:c5:96:5d:08:34:b7:49:a1:0d:
de:39:ea:14:d6:65:e6:23:3d:89:6e:b2:ee:9d:ca:1a:aa:4d:
6e:8b:6e:84:2b:4a:ef:32:a6:0c:76:cf:ce:ad:ad:9a:c5:31:
42:59:11:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:29 2026 by rpki-client