Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
File: _ORf1v09kyaEwMW8J_T6YVoQkOA.mft (raw, json)
Hash identifier: ygRr0aEQZ7oSDEUtGIOh/wM/Gzori0Fe0E9Ec4f/cqI=
Subject key identifier: 2C:5E:79:8D:B3:0E:13:29:06:7E:C4:4C:D2:DC:8B:EB:B9:81:B5:C4
Authority key identifier: FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
Certificate issuer: /CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Certificate serial: 019E2248C187E396B8663CB15AE5E8D21846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
Manifest number: 0F8C
Signing time: Wed 13 May 2026 17:00:53 +0000
Manifest this update: Wed 13 May 2026 17:00:53 +0000
Manifest next update: Thu 14 May 2026 17:00:53 +0000
Files and hashes: 1: _ORf1v09kyaEwMW8J_T6YVoQkOA.crl (hash: 19QQyGvXWxcnUooQvVDkLtJj9R3FQNR3z1V/0oL6wH0=)
2: abxz-YS2pIcWJysLZsLURj3wFjE.roa (hash: v8u8I3KyfjrBtGFxRTuhA7B6RHsn+uH/zjkzCl303+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:48:c1:87:e3:96:b8:66:3c:b1:5a:e5:e8:d2:18:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Validity
Not Before: May 13 17:00:53 2026 GMT
Not After : May 14 17:00:53 2026 GMT
Subject: CN=2c5e798db30e1329067ec44cd2dc8bebb981b5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:02:bd:14:ac:c0:31:19:ed:7a:e7:55:b2:
6d:a1:8c:f7:f6:7c:dd:24:9d:2b:9a:79:e7:83:ea:
ba:91:e9:d6:9f:61:80:df:ea:14:63:c7:7d:75:84:
52:6b:4a:5f:ee:bb:e0:6b:fb:a8:f6:59:4b:58:a7:
dd:78:2a:6a:44:67:cb:8e:ee:34:e9:81:a0:27:6a:
e4:7c:a5:e1:60:04:b1:b1:e3:68:92:ac:20:8c:6a:
01:47:de:e1:e3:60:96:f9:93:60:4b:ba:fa:76:fe:
01:d2:58:8e:a7:71:a2:91:87:28:53:24:80:8c:cd:
73:57:d8:54:de:60:ff:c2:08:bd:df:f7:79:e0:cf:
0a:cf:62:0e:44:51:6c:cd:d5:a5:70:a1:54:b2:69:
3b:2d:b9:17:25:40:44:50:8a:7a:33:5f:43:7f:52:
ae:10:13:67:ea:4e:7f:c5:90:2b:fd:ec:73:11:4a:
d6:eb:bd:ab:e3:a3:ef:60:b3:35:e1:23:7f:74:9f:
ce:61:11:27:a1:99:f1:56:5b:ee:08:fd:3c:7e:1d:
56:ce:4d:fb:61:c5:a5:e3:ad:4f:ab:ba:ad:36:b8:
35:ac:d9:39:84:84:d1:d0:81:98:19:cc:38:3b:10:
a8:17:b2:97:5f:92:56:d9:a2:93:17:8b:f3:f8:18:
c1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5E:79:8D:B3:0E:13:29:06:7E:C4:4C:D2:DC:8B:EB:B9:81:B5:C4
X509v3 Authority Key Identifier:
keyid:FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cc:ac:2e:27:46:7b:3a:e4:89:9d:bc:df:d7:cb:fb:75:f9:
e2:3c:d5:68:95:90:6d:2b:68:04:e4:d7:a2:4c:b3:2c:fe:6a:
4f:7e:d1:39:e1:fb:16:60:c0:8d:a4:0f:7a:ad:2c:01:6f:73:
2b:bd:c5:6e:17:94:59:9b:5c:34:82:24:05:fd:05:eb:a6:47:
41:78:a3:dc:eb:30:3a:2c:68:2f:99:7c:43:b4:10:9f:4e:66:
bf:28:3e:9e:be:6b:6b:d4:2c:86:44:98:91:bf:97:4a:db:02:
33:2e:d0:8c:68:1d:70:0b:99:e7:42:fa:fe:3b:08:7a:c5:90:
fa:98:c7:3c:cc:2a:77:88:5a:9f:c5:8d:94:f8:ee:ac:e7:86:
06:10:5d:f8:3b:b8:d4:0d:08:0b:ef:bc:76:14:7c:9c:ad:e5:
e7:28:e9:3d:66:53:e7:0d:9b:7e:5e:ff:a0:0a:5b:6d:2c:47:
ec:40:ed:2b:e8:58:ff:21:ca:f2:f8:48:da:31:c4:a1:63:f1:
cd:c8:c0:c2:af:e2:a3:8e:01:23:f4:0f:d1:b3:a6:0a:59:0f:
db:fe:22:68:25:b8:10:39:f8:ab:c9:c7:49:dd:d9:df:01:a3:
31:5b:57:d0:b9:0a:44:13:4b:ec:e0:04:bc:d3:f7:3e:be:84:
74:8b:ab:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:37:56 2026 by rpki-client