Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
File: ORvm1CiPvt6_hkKmoeOXeupfHzU.mft (raw, json)
Hash identifier: KeWaK0opwZhu4DmIAj/spUzKNODZ56vgRhAN2eJF6rw=
Subject key identifier: B2:FC:C4:CC:66:6F:4F:63:53:C9:A6:22:DC:26:1F:7E:57:08:34:01
Authority key identifier: 39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35
Certificate issuer: /CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
Certificate serial: 019D2A3B64025DCC465505CF4CEE7D76D240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
Manifest number: 1003
Signing time: Thu 26 Mar 2026 13:00:28 +0000
Manifest this update: Thu 26 Mar 2026 13:00:28 +0000
Manifest next update: Fri 27 Mar 2026 13:00:28 +0000
Files and hashes: 1: ORvm1CiPvt6_hkKmoeOXeupfHzU.crl (hash: 5fbkSQtnFLw2rsyIoQvTX4uOF7l4/gwQ7lf6Bibvg5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:64:02:5d:cc:46:55:05:cf:4c:ee:7d:76:d2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
Validity
Not Before: Mar 26 13:00:28 2026 GMT
Not After : Mar 27 13:00:28 2026 GMT
Subject: CN=b2fcc4cc666f4f6353c9a622dc261f7e57083401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f8:82:5e:c2:f6:fe:47:db:15:1e:3c:c1:5c:
51:a6:3f:2a:a5:b2:d8:16:72:da:0b:c2:8d:5b:63:
8c:0a:a6:63:71:1a:b9:bf:94:48:a4:b1:f5:bf:37:
dc:24:53:52:51:0d:3d:eb:70:5c:4d:2b:4e:75:6c:
fc:8e:82:2a:07:e4:3a:e6:da:35:47:54:9c:44:0b:
41:d3:d8:c2:54:90:d0:73:c4:a8:80:a5:6f:84:ab:
71:74:bc:d5:0c:7b:01:f9:9d:39:1f:fb:f6:1a:0a:
64:1d:34:3c:ad:c2:3d:6a:17:f9:3a:8a:30:a8:a6:
c8:86:54:d8:ee:0f:36:70:27:d3:99:03:9c:91:7a:
78:ab:d9:f3:51:2e:9c:bf:53:e8:bf:ee:87:98:0f:
0f:55:02:68:5c:9e:f6:44:79:fb:23:43:6a:8b:3d:
94:94:08:57:66:e7:cb:9b:c8:34:7a:0a:00:71:46:
96:b7:23:b0:74:63:28:2c:45:0d:26:3e:5c:a1:2d:
82:4f:1e:2d:a3:02:bf:6e:14:58:7e:3d:ae:e2:2b:
a4:df:58:68:7d:9f:d6:f6:4e:15:d7:0c:83:fb:61:
66:cd:e3:cd:05:a1:e1:c1:c2:de:65:b0:bd:fb:13:
87:2e:2f:24:0e:cc:a9:dd:29:1e:a0:37:91:67:b3:
92:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FC:C4:CC:66:6F:4F:63:53:C9:A6:22:DC:26:1F:7E:57:08:34:01
X509v3 Authority Key Identifier:
keyid:39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1d:88:33:1a:64:c0:20:dc:06:fc:c3:48:59:e0:c3:72:13:
fe:48:ef:5e:9e:b0:b2:bb:4b:f5:56:8a:fb:8d:21:6e:c7:23:
2f:e7:c2:d4:40:0f:39:74:45:ff:d9:54:13:44:82:12:af:db:
df:e3:1f:33:98:d5:21:25:8b:45:9e:93:76:e1:fb:f9:70:99:
3c:a1:7a:06:c2:19:05:88:94:a1:64:ff:1a:42:6d:1a:41:e5:
f1:33:5a:67:3c:24:6c:60:15:9a:ef:89:5e:a9:2e:c5:23:ea:
52:98:ac:82:e5:b0:69:87:96:77:5d:92:1d:25:2d:da:91:91:
48:24:ef:93:a3:61:50:f8:11:c7:fc:b7:3b:26:de:60:68:b0:
d1:36:b8:eb:71:c5:29:c3:82:5f:19:fc:39:d9:2d:4a:36:fb:
e5:89:5b:84:bc:0f:98:dd:f5:63:55:10:7c:8e:cf:ff:ea:f3:
09:fd:3c:26:77:78:50:21:e2:53:f7:6f:e2:39:c8:35:7e:b5:
7f:89:2a:31:14:e5:28:38:6a:6b:a2:8b:cf:31:b7:c0:3b:f0:
74:13:c9:a7:20:f7:90:e3:c2:92:61:1b:1e:e5:e5:35:dd:dd:
14:37:72:bd:30:a5:78:f0:45:a7:87:0d:34:c6:b1:4f:d5:34:
8b:5d:98:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:25:02 2026 by rpki-client