Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
File: ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json)
Hash identifier: 60DrfP7ZyG1tlist0eiy3nnO09gwxMUTHeIEqRbwnY4=
Subject key identifier: D2:8F:09:92:88:FC:9A:E9:09:2C:CA:5C:77:DD:F9:C9:B5:E8:BB:9E
Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
Certificate issuer: /CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Certificate serial: 01A1DCF0254E647563745E4C4F09F60C7F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
Manifest number: 1A89
Signing time: Sun 15 Nov 2026 02:01:28 +0000
Manifest this update: Sun 15 Nov 2026 02:01:28 +0000
Manifest next update: Mon 16 Nov 2026 02:01:28 +0000
Files and hashes: 1: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: QAWRIRMtbrX/kqkIe9NKG5y988zbqHAR57EHDQL6HNg=)
2: bIXByjX6LuW26aekk-7LgPK4WBo.roa (hash: YUnrsrT600MTRy40cCZkhQACX77mVDjnM+ubjSZDc0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:25:4e:64:75:63:74:5e:4c:4f:09:f6:0c:7f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Validity
Not Before: Nov 15 02:01:28 2026 GMT
Not After : Nov 16 02:01:28 2026 GMT
Subject: CN=d28f099288fc9ae9092cca5c77ddf9c9b5e8bb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:4a:cb:b9:06:a2:65:1a:92:72:80:8d:b4:
8e:19:fa:f2:4c:3b:6a:a1:28:a4:74:bf:aa:00:28:
ca:7d:88:0c:ab:fc:63:f2:67:ec:93:68:7f:78:79:
86:2e:02:a6:64:42:3d:33:6a:0e:b8:08:22:f3:aa:
35:6f:5d:ac:77:83:e9:c1:70:f9:c1:71:fc:f1:7f:
19:87:21:37:7f:04:1e:58:98:aa:ea:9c:1e:c8:ac:
98:e5:f1:e8:38:69:ea:61:fc:61:5e:b9:a9:88:f2:
92:7b:63:09:ce:65:68:0e:88:8c:1e:30:5d:c1:c5:
91:7d:a8:02:32:24:d0:47:62:03:87:5f:5c:cc:50:
e2:1e:48:18:db:48:3d:de:61:8d:83:7a:1a:e4:78:
58:f9:7a:26:bf:5e:c1:cf:4e:8d:36:44:4a:ed:f6:
53:ca:58:8e:ef:ca:de:34:ad:c8:c1:ef:41:b4:c1:
88:e3:fb:cf:0f:5a:f2:86:f8:9b:33:ff:ae:e2:de:
5b:65:99:b1:dd:df:67:14:d6:24:a2:d6:17:5c:2d:
23:26:5f:4e:11:27:66:2f:c0:22:c0:08:1b:ab:32:
cf:26:a2:6e:47:99:8c:8e:bc:d9:a3:b9:36:56:bd:
71:44:24:6d:d7:d6:3e:9c:c6:4d:04:5b:b6:da:c4:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8F:09:92:88:FC:9A:E9:09:2C:CA:5C:77:DD:F9:C9:B5:E8:BB:9E
X509v3 Authority Key Identifier:
keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e4:9e:1d:74:72:e4:05:63:4c:58:b6:73:88:6d:bf:48:a5:
1f:89:c6:ed:aa:05:9f:9d:52:88:35:e6:6d:2e:54:36:4b:ed:
b3:c2:3b:69:48:47:ed:ea:f4:c6:83:7c:92:0a:64:37:cd:f9:
27:20:5d:4c:6e:12:ff:72:d7:f6:42:aa:ef:cd:39:11:df:30:
12:cd:79:c3:38:4f:2d:60:cd:d3:ab:34:f1:2d:5f:2d:72:99:
c8:54:44:83:5f:fc:c0:66:29:2d:bd:7c:66:c1:05:3a:d3:12:
f5:32:c8:90:31:10:b8:8e:6c:41:25:d7:18:c8:ae:25:2a:b3:
37:21:05:d1:3f:87:4e:c3:d4:23:33:18:b6:73:f6:0f:4f:bb:
ff:2c:bc:a7:52:fd:cb:b3:af:b0:01:0c:63:ef:30:f2:db:a5:
2e:d3:5c:1a:02:0a:47:33:31:15:69:36:0e:3b:a6:35:78:9f:
47:e8:47:e9:09:1b:1b:9e:d7:64:44:69:dd:45:fe:97:b7:b1:
56:45:5f:69:e4:47:e5:23:76:c6:a6:c1:2c:8d:b9:13:bd:fd:
6a:e7:bf:f4:6f:a8:fa:fd:d9:a8:03:2b:43:0c:64:fa:b1:3d:
79:34:dc:40:dc:31:6a:a2:b7:38:7a:9e:ad:63:c8:a3:fc:65:
0e:25:d9:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHc8CVOZHVjdF5MTwn2DH8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MTQ2MjM2NGVkNDVmNjc2YWQ1MGE5ZWFlMmQzNDJkOGNm
ZDc0NDEwHhcNMjYxMTE1MDIwMTI4WhcNMjYxMTE2MDIwMTI4WjAzMTEwLwYDVQQD
EyhkMjhmMDk5Mjg4ZmM5YWU5MDkyY2NhNWM3N2RkZjljOWI1ZThiYjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+5Ky7kGomUaknKAjbSOGfryTDtq
oSikdL+qACjKfYgMq/xj8mfsk2h/eHmGLgKmZEI9M2oOuAgi86o1b12sd4PpwXD5
wXH88X8ZhyE3fwQeWJiq6pweyKyY5fHoOGnqYfxhXrmpiPKSe2MJzmVoDoiMHjBd
wcWRfagCMiTQR2IDh19czFDiHkgY20g93mGNg3oa5HhY+Xomv17Bz06NNkRK7fZT
yliO78reNK3Iwe9BtMGI4/vPD1ryhvibM/+u4t5bZZmx3d9nFNYkotYXXC0jJl9O
ESdmL8AiwAgbqzLPJqJuR5mMjrzZo7k2Vr1xRCRt19Y+nMZNBFu22sQQdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKPCZKI/JrpCSzKXHfd+cm16LueMB8GA1UdIwQY
MBaAFDkUYjZO1F9natUKnq4tNC2M/XRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZGFlMmYtZDIzNi00MWY3LWIxYmMt
ODQ0OGRjZmIyN2FhLzEvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83ZGFlMmYtZDIzNi00MWY3LWIxYmMtODQ0OGRjZmIyN2Fh
LzEvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+SeHXRy
5AVjTFi2c4htv0ilH4nG7aoFn51SiDXmbS5UNkvts8I7aUhH7er0xoN8kgpkN835
JyBdTG4S/3LX9kKq7805Ed8wEs15wzhPLWDN06s08S1fLXKZyFREg1/8wGYpLb18
ZsEFOtMS9TLIkDEQuI5sQSXXGMiuJSqzNyEF0T+HTsPUIzMYtnP2D0+7/yy8p1L9
y7OvsAEMY+8w8tulLtNcGgIKRzMxFWk2DjumNXifR+hH6QkbG57XZERp3UX+l7ex
VkVfaeRH5SN2xqbBLI25E739aue/9G+o+v3ZqAMrQwxk+rE9eTTcQNwxaqK3OHqe
rWPIo/xlDiXZqw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:48:28 2026 by rpki-client