Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
File: ORhwDqnHvi31aIr_vt2KTlU5LeY.mft (raw, json)
Hash identifier: 8qG/O5ku5BrTflEEoc4AG43+cFXqh6WWnHGxi4vItio=
Subject key identifier: CE:33:0C:D6:E1:E8:12:CB:A6:11:54:7F:5B:EB:30:72:00:0E:3E:C1
Authority key identifier: 39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
Certificate issuer: /CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Certificate serial: 019D27DF70ABC010B824A7A38E91910032E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
Manifest number: 096F
Signing time: Thu 26 Mar 2026 02:00:47 +0000
Manifest this update: Thu 26 Mar 2026 02:00:47 +0000
Manifest next update: Fri 27 Mar 2026 02:00:47 +0000
Files and hashes: 1: DKhVHpk7iZz_01UXRjCn1_OlprQ.roa (hash: wsHOQQguXdPejumCbMkMQ0ogcO61399D5EWcawmOeUw=)
2: ORhwDqnHvi31aIr_vt2KTlU5LeY.crl (hash: eyfHqEtLYpl/3RCq5KrRI/bcwEBEfDalEd19uNjTWdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:70:ab:c0:10:b8:24:a7:a3:8e:91:91:00:32:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Validity
Not Before: Mar 26 02:00:47 2026 GMT
Not After : Mar 27 02:00:47 2026 GMT
Subject: CN=ce330cd6e1e812cba611547f5beb3072000e3ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9a:97:cc:7d:a3:50:ab:ea:c6:9a:03:62:5b:
b4:b9:ef:ef:28:98:4f:71:4b:ce:73:3f:5c:92:0e:
d7:87:0d:a3:72:39:79:11:c8:79:03:4b:65:e7:1a:
f0:56:16:5e:0f:09:0b:e2:d0:a5:51:33:95:9d:39:
47:3d:48:d5:d7:7e:a0:46:e2:db:32:fb:13:60:66:
09:f3:d2:d1:80:df:5b:ba:7c:63:dd:44:ec:47:52:
f6:eb:81:12:e1:09:d1:54:97:6f:60:e4:16:18:fb:
16:76:be:77:0e:f0:f0:82:91:61:e0:35:e5:ad:77:
14:cd:b6:3c:d8:b0:7c:0b:3a:65:5f:49:e7:ea:30:
df:93:c7:4f:ff:21:0d:42:b2:3e:0e:fe:2d:8c:5f:
47:ee:92:0b:37:5d:56:c1:5e:3d:07:4d:35:d6:a7:
07:cd:bc:a3:32:89:8f:1e:74:db:d0:9c:d9:8b:7c:
6e:fa:b9:09:70:2a:46:33:76:e5:ff:97:fd:0d:28:
51:4c:17:0f:b7:7c:87:9c:82:f3:88:e1:d5:ca:99:
bd:b9:c0:95:93:0b:3f:ac:cf:1f:22:9d:ee:e6:7e:
b5:18:ba:93:1e:83:a5:33:f9:58:2a:8e:f8:04:be:
2d:71:37:dd:59:45:d3:cb:3d:4f:b5:c8:eb:e5:1c:
e7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:33:0C:D6:E1:E8:12:CB:A6:11:54:7F:5B:EB:30:72:00:0E:3E:C1
X509v3 Authority Key Identifier:
keyid:39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:16:25:70:d5:4e:9a:53:22:f2:cc:73:67:bb:02:0c:9a:d5:
7d:49:1a:20:77:db:a6:b5:8d:ef:8c:4d:d3:e8:bb:4a:65:19:
5d:65:12:d7:3e:b0:97:35:80:f4:c6:5d:23:d5:3b:5d:5b:4f:
99:fe:17:49:b4:c6:61:71:4c:f5:5c:8d:89:a2:85:3c:76:e0:
93:d3:2c:eb:09:c8:a8:d1:39:73:74:93:39:47:2c:0d:d9:f6:
0a:43:ea:96:b1:3d:d4:c8:34:46:cc:dc:1e:dd:b1:0a:1f:2b:
9f:3e:54:9a:be:ce:c0:69:5b:56:9f:4b:37:dd:84:ab:2e:7b:
4e:78:ea:ab:83:72:a7:93:69:56:f2:f6:86:af:9f:5a:a3:d4:
16:71:d3:c9:08:c2:4d:e9:7c:9f:f8:12:37:00:95:57:16:ab:
9f:44:93:0a:03:d2:0f:e4:3e:e1:9d:95:6d:e2:e3:1f:c4:52:
a7:79:71:ad:76:e1:f1:86:32:bd:12:38:62:cb:ad:2b:60:6f:
47:51:83:6d:81:22:21:f5:c2:10:8f:73:0b:81:2d:a3:c0:0c:
50:97:d6:90:6e:8a:5b:c7:97:46:e7:53:b0:95:bf:0e:ea:fc:
5f:08:5a:b3:05:59:06:6c:d9:bb:78:9a:d7:88:06:cd:05:a8:
eb:02:3d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:30 2026 by rpki-client