Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/orWthdxjIax7o93JxiqqBsfVPc4.mft
File: orWthdxjIax7o93JxiqqBsfVPc4.mft (raw, json)
Hash identifier: 1lLFsS5w4ORLUr6fl99w73+WiC9td7R+p8Gk1ev1WtY=
Subject key identifier: 7E:1D:D3:63:F6:2F:58:00:AF:89:A5:A4:0A:0B:2A:4C:5B:AA:FD:A9
Authority key identifier: A2:B5:AD:85:DC:63:21:AC:7B:A3:DD:C9:C6:2A:AA:06:C7:D5:3D:CE
Certificate issuer: /CN=a2b5ad85dc6321ac7ba3ddc9c62aaa06c7d53dce
Certificate serial: 019D330772D96C267287FB2C671BD0E58D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orWthdxjIax7o93JxiqqBsfVPc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/orWthdxjIax7o93JxiqqBsfVPc4.mft
Manifest number: EF
Signing time: Sat 28 Mar 2026 06:00:19 +0000
Manifest this update: Sat 28 Mar 2026 06:00:19 +0000
Manifest next update: Sun 29 Mar 2026 06:00:19 +0000
Files and hashes: 1: orWthdxjIax7o93JxiqqBsfVPc4.crl (hash: sV7Lvj77IleJp1JL3kfCEM8T5LXszFAZDNnhNyF/DRo=)
2: zH59FOjEeW0tX1tZPAKwttZubxc.roa (hash: E7WqBqxeqDORrFZVX5AFQ14CSfk2SIvYpV/ckuWWz5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/orWthdxjIax7o93JxiqqBsfVPc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/orWthdxjIax7o93JxiqqBsfVPc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/orWthdxjIax7o93JxiqqBsfVPc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:72:d9:6c:26:72:87:fb:2c:67:1b:d0:e5:8d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b5ad85dc6321ac7ba3ddc9c62aaa06c7d53dce
Validity
Not Before: Mar 28 06:00:19 2026 GMT
Not After : Mar 29 06:00:19 2026 GMT
Subject: CN=7e1dd363f62f5800af89a5a40a0b2a4c5baafda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:3c:6f:7c:ee:e9:fc:9f:c8:a8:87:cc:38:
30:35:be:61:1d:05:99:5b:f3:3a:62:93:ba:5f:27:
a1:52:85:1d:8b:44:11:ea:9c:ad:c3:40:b0:a7:bc:
00:09:65:03:d4:f6:01:c7:e6:e2:2c:e4:8f:82:76:
fc:d5:83:19:26:c3:5d:e8:62:46:e9:dc:47:43:d2:
04:4c:b6:18:d5:4f:4f:ed:f1:70:5d:72:b3:f9:e2:
59:17:d5:10:87:6f:68:64:74:be:7d:8a:dc:41:4c:
58:b1:10:c7:f8:14:8f:f9:64:7f:73:07:de:c7:7a:
92:da:69:c9:99:ab:18:4c:fc:ae:23:91:7d:a7:9b:
1d:e4:5a:d4:64:cc:6a:d3:50:8a:fc:32:60:ce:de:
d5:69:8d:1c:85:9b:af:03:34:e5:cc:27:85:34:64:
77:f9:59:d0:99:44:e5:0c:29:3e:8e:b0:42:7f:2f:
9c:b3:9c:aa:f6:5d:ac:0a:1e:01:1a:ec:4d:9a:33:
c6:f2:e4:4f:d2:22:d8:4b:06:38:b4:ae:87:b7:28:
d1:6c:19:99:4b:a8:55:1b:a1:32:95:96:8c:9d:ad:
08:64:61:12:32:54:ef:d6:00:97:2f:fd:ea:0b:b7:
c7:e4:9f:79:81:f8:c6:00:55:d4:a8:01:00:09:25:
a7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1D:D3:63:F6:2F:58:00:AF:89:A5:A4:0A:0B:2A:4C:5B:AA:FD:A9
X509v3 Authority Key Identifier:
keyid:A2:B5:AD:85:DC:63:21:AC:7B:A3:DD:C9:C6:2A:AA:06:C7:D5:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orWthdxjIax7o93JxiqqBsfVPc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/orWthdxjIax7o93JxiqqBsfVPc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/orWthdxjIax7o93JxiqqBsfVPc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d6:24:81:b5:b7:b9:1d:ad:43:e4:3f:f1:e0:fd:c1:85:00:
aa:70:71:e5:e9:db:0b:a1:74:ee:b1:9f:b8:dc:32:f0:e0:6f:
50:fd:e7:6f:7b:20:b5:8b:73:d8:e6:8a:69:5a:ea:35:a5:70:
8f:b7:0f:40:7d:ad:98:0f:03:cd:0e:d5:d5:86:ce:16:e3:bf:
c4:9f:09:cb:dd:a5:7d:93:9a:2d:be:b7:42:f7:83:e8:a7:33:
08:01:e4:f8:b7:66:27:df:fa:f1:e5:cb:82:9e:22:e3:5a:16:
84:27:87:8b:47:b5:ba:1b:f3:ab:93:d6:d7:a1:84:65:9f:bb:
24:77:be:00:a6:82:ef:9a:06:93:ea:33:7f:7f:79:79:f4:4d:
ac:3b:ca:d1:96:26:ca:3e:8e:b2:7b:b2:8e:19:e2:35:4d:93:
28:74:84:90:e0:86:1b:8a:7e:ac:57:58:07:c5:a1:d5:37:25:
64:d2:16:bb:8f:ec:c3:6e:b4:45:16:83:ba:fd:a1:24:23:e0:
a0:e7:8d:74:04:c6:24:33:5c:3b:e2:da:51:ea:fc:90:ce:a7:
f8:30:65:8f:7d:cf:2c:cb:d2:e8:55:6a:96:31:19:3f:4e:d9:
a2:4a:69:96:23:77:bf:ea:4c:5d:b7:b7:cd:d8:41:77:89:c6:
a6:e5:87:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:37 2026 by rpki-client