Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
File: _ORf1v09kyaEwMW8J_T6YVoQkOA.mft (raw, json)
Hash identifier: KMUY1MXAro3P+J9fN+dgBXJsygaGeHHc7jtOoqqeXJY=
Subject key identifier: E6:55:0E:9F:34:5F:5F:B4:FB:B8:4B:45:77:64:26:87:B0:00:95:65
Authority key identifier: FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
Certificate issuer: /CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Certificate serial: 019D29299C252AD99EF0769A69D6A3AA1C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
Manifest number: 0F0B
Signing time: Thu 26 Mar 2026 08:01:25 +0000
Manifest this update: Thu 26 Mar 2026 08:01:25 +0000
Manifest next update: Fri 27 Mar 2026 08:01:25 +0000
Files and hashes: 1: _ORf1v09kyaEwMW8J_T6YVoQkOA.crl (hash: 1bdL5PitEjCN3qn/8IHK/rlUrapReYDhMRdbV0VG08c=)
2: abxz-YS2pIcWJysLZsLURj3wFjE.roa (hash: v8u8I3KyfjrBtGFxRTuhA7B6RHsn+uH/zjkzCl303+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:9c:25:2a:d9:9e:f0:76:9a:69:d6:a3:aa:1c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Validity
Not Before: Mar 26 08:01:25 2026 GMT
Not After : Mar 27 08:01:25 2026 GMT
Subject: CN=e6550e9f345f5fb4fbb84b4577642687b0009565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:ed:f0:47:5a:62:ca:c0:73:aa:8f:21:ef:
f7:fa:94:c1:63:64:26:64:1f:73:50:85:04:6e:06:
44:42:b7:1f:05:6a:a4:71:75:9c:2f:e3:e1:b5:57:
41:b3:a1:f1:11:a8:ca:d4:98:33:a5:15:0c:3b:5c:
c0:4b:1d:82:b3:b5:be:4c:49:8d:61:38:90:f1:e7:
a4:96:e2:aa:ff:7a:64:ab:1b:10:37:50:89:bd:f8:
30:c1:81:c0:5b:9b:a4:52:6c:4b:e6:7f:68:3b:65:
58:9b:15:b6:5e:a2:ab:f6:4b:1f:7e:3b:3b:40:05:
e7:ae:90:a1:40:6a:68:54:70:9a:5e:46:4f:e8:64:
a6:d4:80:7e:7d:42:01:d1:d1:b7:67:40:ad:14:79:
6a:e0:ca:48:b9:2b:e7:ca:16:a5:1a:5e:ad:0c:ef:
98:f3:f3:41:33:6e:23:f0:3a:45:9d:7d:8a:e8:e2:
7d:9e:54:c2:46:51:6c:99:e5:90:26:58:68:b6:69:
78:03:84:d6:72:70:90:34:64:99:33:80:8a:bf:72:
c4:da:34:38:3b:45:d1:61:af:6d:73:63:82:ec:46:
32:6f:73:ce:99:95:02:48:e2:ac:4a:2a:4d:5c:9f:
e1:da:9a:b6:ec:a8:54:c8:f7:54:44:af:15:db:8f:
dd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:55:0E:9F:34:5F:5F:B4:FB:B8:4B:45:77:64:26:87:B0:00:95:65
X509v3 Authority Key Identifier:
keyid:FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:88:01:39:88:86:22:83:e1:a3:3b:bd:b8:a9:45:39:3a:4b:
30:e6:5a:3f:19:8c:8b:fd:5f:82:38:46:c3:92:54:fb:d5:79:
4c:a9:a8:d5:bb:dd:19:34:e6:6a:a6:3d:69:a1:65:3a:dd:31:
37:0c:bb:de:d4:61:30:7c:56:70:cb:0d:29:d2:1f:af:bf:e0:
cf:f4:db:3a:ac:a1:b3:db:eb:7a:41:ed:57:42:23:0f:47:79:
cd:a1:69:70:ca:8d:eb:ff:10:5a:ce:03:c0:80:cb:0a:1f:88:
de:79:8e:3d:f2:b1:6f:3a:83:18:ee:dc:82:6a:49:c7:56:45:
d6:77:71:08:d1:4f:01:c9:2b:cb:08:26:75:03:b1:7b:52:88:
a4:76:a8:bf:17:e9:23:e4:b7:d7:7b:35:78:93:f5:2e:7c:3a:
95:b6:08:2d:69:4d:49:c9:6a:9f:de:9d:87:25:8f:55:db:af:
d5:8a:e9:6a:a8:53:91:6d:d6:8f:b3:30:11:00:41:90:15:c8:
f1:6b:1d:35:c0:28:87:ec:4f:94:dd:74:3a:df:12:45:8c:7c:
5d:7b:7a:fd:10:9d:e0:c4:c9:7d:52:31:9f:e5:5c:d2:56:6d:
d8:67:cb:06:36:0f:90:52:0e:b9:d3:4f:08:f4:1e:78:66:1d:
0b:a8:fe:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:28 2026 by rpki-client