Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft
File: orLY2dCvlBb6vW8gNfpyiO-XyME.mft (raw, json)
Hash identifier: zwEBkCVrxJme/zFHHLWkyb6IBP+m1vsuzwLLar98fv4=
Subject key identifier: 49:94:B7:71:76:91:5C:E3:FA:37:3E:83:78:7A:F4:8C:01:92:2F:CC
Authority key identifier: A2:B2:D8:D9:D0:AF:94:16:FA:BD:6F:20:35:FA:72:88:EF:97:C8:C1
Certificate issuer: /CN=a2b2d8d9d0af9416fabd6f2035fa7288ef97c8c1
Certificate serial: 019D277215EBC33DE5DE54FD50A2652A7833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orLY2dCvlBb6vW8gNfpyiO-XyME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft
Manifest number: 08CC
Signing time: Thu 26 Mar 2026 00:01:21 +0000
Manifest this update: Thu 26 Mar 2026 00:01:21 +0000
Manifest next update: Fri 27 Mar 2026 00:01:21 +0000
Files and hashes: 1: orLY2dCvlBb6vW8gNfpyiO-XyME.crl (hash: xXdZrSSVor03QlNNQ2+uqSpHX1UjC6o60kbsX39T2I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft
rsync://rpki.ripe.net/repository/DEFAULT/orLY2dCvlBb6vW8gNfpyiO-XyME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:15:eb:c3:3d:e5:de:54:fd:50:a2:65:2a:78:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b2d8d9d0af9416fabd6f2035fa7288ef97c8c1
Validity
Not Before: Mar 26 00:01:21 2026 GMT
Not After : Mar 27 00:01:21 2026 GMT
Subject: CN=4994b77176915ce3fa373e83787af48c01922fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:fc:27:05:be:cf:8d:7e:8f:08:30:6c:47:
9d:53:f7:6b:a6:87:1a:b6:8c:cf:78:32:16:65:97:
79:f8:dc:52:f3:9b:f3:07:d3:ac:09:96:a4:0a:36:
bc:75:89:ab:5b:17:ac:30:6c:12:8a:e8:5b:e2:75:
60:05:16:7c:28:d0:6d:de:ac:b9:72:64:62:01:9b:
04:c3:b6:46:ba:d0:dd:5f:96:eb:31:ba:6e:73:b6:
e9:9c:dc:f6:9a:e7:7c:a3:b7:dd:8b:0f:25:a7:ea:
9c:fc:82:61:69:b7:79:39:6a:80:d5:2c:2e:40:30:
2d:01:89:55:25:da:86:44:c6:dc:a2:65:71:e2:d1:
24:26:cf:19:8f:a3:04:f6:e3:84:11:cc:b9:7d:22:
79:fe:23:4d:43:1f:1b:ef:46:d4:1f:ae:76:e9:69:
28:94:af:35:56:45:88:6d:78:57:9d:5e:48:ef:73:
b9:e0:9c:04:ee:5b:d8:90:ba:57:48:07:af:21:93:
da:f6:c1:d8:c8:23:24:b5:88:dd:29:99:38:22:06:
b1:bb:c0:7c:03:84:3d:0a:79:34:dd:30:c8:23:20:
7b:7e:ce:11:cb:93:83:c1:3f:42:0b:61:6d:b4:7a:
24:b1:26:a3:15:2e:19:5b:ff:99:1e:47:64:79:f0:
27:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:94:B7:71:76:91:5C:E3:FA:37:3E:83:78:7A:F4:8C:01:92:2F:CC
X509v3 Authority Key Identifier:
keyid:A2:B2:D8:D9:D0:AF:94:16:FA:BD:6F:20:35:FA:72:88:EF:97:C8:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orLY2dCvlBb6vW8gNfpyiO-XyME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a8:9b:cc:27:51:d4:10:67:29:ba:51:d8:06:ae:24:3f:18:
a4:e7:e5:9e:b2:f2:2f:70:de:0f:c1:2f:32:c5:96:b5:e5:e3:
48:20:98:59:42:91:e7:76:7f:b6:44:2e:69:3d:bf:ef:da:0c:
a1:65:88:91:3c:72:9c:2b:7d:ba:49:c9:ea:2e:db:ee:bf:63:
6d:c9:db:99:da:ca:4d:2e:96:17:0e:d9:64:66:db:83:ed:e3:
90:8f:8f:4c:8c:a6:e6:d9:6f:80:06:76:90:af:b4:99:48:3d:
44:e9:b3:b9:01:41:2c:99:7f:b8:e6:de:c0:9d:c1:f1:42:96:
9e:25:47:11:f2:31:9f:b9:88:7e:a9:de:f8:26:ec:3e:d7:0c:
88:7d:f4:76:17:0c:32:0c:d9:03:d0:35:59:12:8c:79:09:e3:
b8:f3:52:b0:7d:09:39:51:1b:bb:e2:97:f1:ae:14:aa:cc:e2:
00:19:f1:00:45:d9:2c:f2:ee:37:cd:f0:5d:0f:94:4f:a5:ad:
65:80:25:df:a9:a3:a5:82:a5:27:a8:97:21:56:1e:f4:f6:bc:
9f:1c:2d:6a:25:03:7d:f4:b4:7d:6e:fa:5f:72:d8:8b:3a:a6:
5e:e3:1e:12:b3:ee:3b:d1:c8:2b:98:a2:22:97:7c:27:a2:7d:
c0:c1:be:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:53 2026 by rpki-client