Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
File: OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft (raw, json)
Hash identifier: pqrjdbixFDcSNwJHtU5H5WtNFL535u+/ii3WHIjoeYA=
Subject key identifier: 42:E4:E6:7C:FA:CC:85:61:1C:7F:4A:54:D3:6B:7F:5A:AA:09:D7:6E
Authority key identifier: 39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
Certificate issuer: /CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Certificate serial: 019D29CDDBE5B6A4291C8A3BF7CFE90EEC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
Manifest number: 0F02
Signing time: Thu 26 Mar 2026 11:00:50 +0000
Manifest this update: Thu 26 Mar 2026 11:00:50 +0000
Manifest next update: Fri 27 Mar 2026 11:00:50 +0000
Files and hashes: 1: OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl (hash: R4IWbdeiPh3N2LcU1Rka0JHqkAjjN2AVKh+41DZJGUI=)
2: U_9ae0dR5bvWF_m8_-n5IQjoXho.roa (hash: YhkIXrg11/s9MnoBurHE21hW+DopIbiFzMqganoNxbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:db:e5:b6:a4:29:1c:8a:3b:f7:cf:e9:0e:ec:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Validity
Not Before: Mar 26 11:00:50 2026 GMT
Not After : Mar 27 11:00:50 2026 GMT
Subject: CN=42e4e67cfacc85611c7f4a54d36b7f5aaa09d76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d9:87:9e:16:23:c7:e7:e5:bd:0d:4c:ef:b2:
9b:33:1e:f6:f7:74:39:84:b5:88:66:52:22:9c:3d:
d1:18:e0:7b:55:00:73:4f:5d:92:fd:3b:49:b9:02:
10:74:91:63:ef:9b:bb:30:de:46:ae:25:cb:ae:9d:
af:2e:ab:6f:42:ea:06:69:c7:31:e0:e4:bb:c4:fb:
51:d3:0b:e4:f1:1a:ae:39:e9:03:03:6d:82:16:f6:
66:97:6d:66:b7:fb:68:97:f1:92:38:50:42:5a:40:
40:ec:ce:da:b6:cb:e7:98:57:db:16:f6:d0:ec:40:
28:04:cb:05:a2:ff:41:92:40:ef:bb:42:e4:af:3e:
02:9a:ce:7b:de:2d:81:3e:e0:c1:a4:51:64:2d:9a:
9d:95:97:8a:b9:db:e5:83:de:7a:38:45:c1:30:de:
5e:2a:d2:60:d2:7b:5f:70:b3:21:a2:b5:77:7f:f4:
90:6e:7f:8a:0f:b5:29:6b:ac:98:ae:5b:13:a7:c6:
24:8f:25:c9:13:6d:b7:a9:18:6c:d2:1c:54:0c:3e:
e8:67:4b:cd:ae:ba:f3:72:f3:7a:db:09:0f:af:23:
e9:67:72:a3:9b:39:2c:b3:f4:d2:38:41:d1:72:2e:
00:1e:b6:03:14:c9:95:21:2f:b8:87:59:27:8d:80:
a0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E4:E6:7C:FA:CC:85:61:1C:7F:4A:54:D3:6B:7F:5A:AA:09:D7:6E
X509v3 Authority Key Identifier:
keyid:39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:78:d3:f5:6b:51:fa:af:de:89:71:b3:92:83:d3:f0:09:b6:
ff:b6:d0:63:1c:a2:6c:13:f0:63:ea:34:d1:bc:59:f2:48:55:
8c:92:64:88:dd:7a:ee:41:d7:b8:a3:82:5e:20:28:e2:8d:08:
dd:d1:7e:52:22:e8:dd:fd:64:44:d1:fc:27:39:7c:f4:38:55:
cb:ad:5d:fb:34:20:83:8e:cc:dd:3d:bf:8d:8c:3a:71:64:69:
96:3d:19:dd:d5:ff:32:b0:1f:ac:d4:da:e5:fa:e0:9b:a5:1b:
84:b7:33:0b:a8:01:75:f2:e7:1d:b8:81:84:7c:94:e6:35:56:
8f:99:d5:b3:f8:48:9d:bb:4f:63:40:16:85:d9:35:d3:28:fb:
c7:50:64:8c:ca:4c:1e:40:2b:96:8c:73:6d:cf:88:a7:f8:03:
5c:9d:53:ac:9f:a6:65:07:a0:d6:0a:ed:a0:5c:66:ec:b1:56:
b8:77:cb:bd:5e:15:f9:1e:9e:fd:d8:d0:7f:6e:0b:aa:a5:a2:
9f:0f:d3:de:1e:dc:27:2a:5e:7a:47:c7:4e:98:62:ca:40:0a:
c6:b4:d1:a7:f9:02:fa:a8:d1:64:6a:50:bf:de:cf:d7:25:30:
75:8d:ea:76:3f:20:41:bb:18:8b:5e:2f:2a:2e:62:6e:25:22:
72:e3:60:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:47:42 2026 by rpki-client