Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
File: ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json)
Hash identifier: wdF6UZoQ4RpV/hihN+8MKKx/bJixRrut1bgpVa2ZwWk=
Subject key identifier: E0:E3:26:58:FD:BE:5B:A1:27:D1:80:27:73:3F:5C:0A:A0:AC:44:DD
Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
Certificate issuer: /CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Certificate serial: 019D27E03A660297200D88C83985FD4996D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 02:01:39 +0000
Manifest this update: Thu 26 Mar 2026 02:01:39 +0000
Manifest next update: Fri 27 Mar 2026 02:01:39 +0000
Files and hashes: 1: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: xw51W5Mf7XMH4uYj/RzMw9MYyeEPmxkq/FvKxBvc6EQ=)
2: bIXByjX6LuW26aekk-7LgPK4WBo.roa (hash: YUnrsrT600MTRy40cCZkhQACX77mVDjnM+ubjSZDc0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:3a:66:02:97:20:0d:88:c8:39:85:fd:49:96:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Validity
Not Before: Mar 26 02:01:39 2026 GMT
Not After : Mar 27 02:01:39 2026 GMT
Subject: CN=e0e32658fdbe5ba127d18027733f5c0aa0ac44dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:28:9a:be:ae:8e:d8:aa:ec:38:63:56:e5:2d:
25:f7:b5:74:92:c7:40:01:1d:b6:49:6d:3a:24:3a:
7a:0f:cf:5d:8a:c3:75:25:4b:0d:f3:ff:2d:70:87:
ae:5c:2a:70:c9:88:94:14:f4:50:eb:cc:2a:27:84:
d1:9e:f8:5b:91:6c:c5:0f:be:30:80:27:95:8b:67:
cf:c8:cc:76:7f:40:73:e0:69:8d:50:ca:cd:00:c1:
fa:44:43:85:76:6e:c5:87:e3:9b:eb:1c:3b:2b:ad:
8c:6e:36:a6:45:87:a7:db:51:a1:3b:58:c8:eb:66:
d7:5b:af:76:b8:b7:57:1d:b2:82:3a:d7:be:3d:f5:
bc:00:c9:6d:1f:2c:3a:a8:65:d3:11:66:2d:fd:20:
09:37:3a:c6:52:c9:35:c0:1a:2a:a4:43:e3:ef:02:
86:f2:cd:43:21:6e:2b:94:4c:a2:d7:0b:db:2f:13:
62:6e:d3:45:9e:a2:42:de:be:47:6a:da:78:7c:d5:
8e:ee:e8:a7:62:00:59:e6:d5:83:a8:7d:e3:9a:9d:
92:c2:55:b2:ba:da:52:1e:17:c7:ee:35:b4:49:16:
20:5b:d1:66:e5:e0:86:53:16:5d:23:41:dd:24:ab:
84:d0:07:1f:68:17:05:77:28:81:55:b7:1b:5c:4d:
40:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E3:26:58:FD:BE:5B:A1:27:D1:80:27:73:3F:5C:0A:A0:AC:44:DD
X509v3 Authority Key Identifier:
keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2b:bc:89:78:d9:c0:89:63:90:5c:99:12:2a:bc:f7:aa:9c:
f4:7b:67:e6:a2:42:1e:01:e7:2c:82:2c:85:a8:93:e0:78:62:
b7:2a:68:e0:9b:04:bf:0b:30:5e:bb:f7:05:98:db:0f:8c:b3:
c8:97:6b:47:73:d8:5f:a0:8b:3d:45:4b:c1:70:3b:d5:2a:6d:
c8:be:8c:32:6c:61:a7:62:22:3e:36:3e:a3:82:80:de:dc:1f:
ec:6a:a0:b4:57:a2:b5:b7:8e:55:8c:16:72:82:39:65:00:9b:
7d:b3:8b:67:cb:bf:09:ea:19:02:16:8a:d1:dc:de:3f:e2:9e:
c1:b6:86:cb:4b:1c:21:e5:00:33:da:57:12:50:95:ae:21:f1:
76:a0:59:a7:5d:ed:56:54:7c:56:e5:47:64:17:af:0a:ea:51:
93:73:f1:c2:1f:6f:d7:f4:6f:4e:44:ea:21:ef:23:7d:cc:e1:
40:63:89:6f:fd:82:ac:4b:65:c2:ce:1e:0e:67:7c:72:3e:0a:
f8:72:8d:64:ca:c8:e1:91:04:5a:90:3a:68:85:c4:a0:e4:1f:
41:a4:7a:cd:95:5a:6b:d4:eb:05:07:da:f4:3c:2b:3f:fc:65:
c4:3c:1f:ab:95:5a:fd:57:bb:ce:e7:55:fc:a9:8b:b0:b2:1e:
9d:8d:8e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:42 2026 by rpki-client