
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier: 9YOsmua0Eqy1QZQ6BNrpD9fOv3zDKL0xxTQWEMmkiEE=
Subject key identifier: 80:ED:D1:25:4F:9D:9F:AF:74:DD:79:3C:3D:04:B3:08:7A:1D:11:0D
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial: 019E2091A93C68E04680114C99954679A42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 09:01:17 +0000
Manifest this update: Wed 13 May 2026 09:01:17 +0000
Manifest next update: Thu 14 May 2026 09:01:17 +0000
Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: 7FGyTMtl/ftFTa7ajMYVBZ+QeUbQLHkyTsxPSnDFIAs=)
2: l_5sj0n83h1j-KNddGTmHYrghYs.roa (hash: lWD+ja9YbtyG1MA96ufKgRHVHut4712gK2auViaR/PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:a9:3c:68:e0:46:80:11:4c:99:95:46:79:a4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Validity
Not Before: May 13 09:01:17 2026 GMT
Not After : May 14 09:01:17 2026 GMT
Subject: CN=80edd1254f9d9faf74dd793c3d04b3087a1d110d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fd:27:90:68:e3:1d:7b:68:49:79:1a:4e:90:
eb:5b:08:a1:90:1c:9a:85:3c:83:04:2e:9d:2e:bf:
97:3d:03:4c:69:46:0e:8a:8d:fc:38:94:d3:be:7f:
e1:65:36:4c:a1:cf:22:1b:1d:09:55:15:33:00:e0:
ee:12:aa:86:fe:3c:ba:03:14:78:41:a2:9e:66:36:
7f:58:da:da:db:69:4d:60:2b:b5:5f:7d:10:ab:e2:
62:f8:b7:d1:92:8e:90:72:14:5a:f5:42:37:6d:4d:
11:e7:b3:c2:59:30:e4:93:29:a2:9b:a0:67:b2:b0:
91:ec:27:eb:f9:5e:ae:3b:b6:a5:33:34:f3:3b:05:
a1:9f:71:a5:2c:0b:fb:d1:5b:aa:b8:61:60:f2:75:
4a:48:b9:4f:e5:a9:36:7c:0c:b8:cd:70:62:3d:0c:
7c:6e:26:e4:b0:f2:d5:68:15:a2:65:c9:11:fc:b3:
11:64:e6:02:fe:9c:3a:5e:dc:32:c6:5d:f1:90:3a:
12:16:7f:7d:5c:41:a1:9f:cd:6d:d7:ef:f2:d7:f7:
56:ec:2f:f0:13:26:c3:9f:a0:2d:5c:52:94:84:55:
55:31:59:e5:6d:3f:dc:24:63:16:8f:c4:8a:86:1a:
44:2c:24:0f:32:0a:86:de:c4:ad:5e:ab:66:0a:f9:
c2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:ED:D1:25:4F:9D:9F:AF:74:DD:79:3C:3D:04:B3:08:7A:1D:11:0D
X509v3 Authority Key Identifier:
keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2d:8d:a2:7a:dc:ee:d0:fe:6e:3d:5d:7a:75:b9:84:63:69:
46:33:86:f1:fe:3b:85:1d:e9:0d:05:1a:82:64:7a:ec:6d:52:
41:44:69:d5:e1:07:39:0f:d8:35:51:d6:1d:d7:ff:a7:97:70:
77:cd:11:47:d3:fa:97:08:10:6c:53:d1:df:c7:c0:d1:00:12:
3f:e4:19:06:b2:32:f0:30:9f:1f:e7:62:af:79:59:cd:f6:64:
3a:f3:6b:fc:85:49:5e:99:61:e5:1e:f4:d2:02:cd:10:23:bd:
2c:40:bf:01:1f:de:1b:ac:c7:c0:d6:dd:d8:c6:a2:0b:5e:8d:
6b:6c:8b:ac:42:94:e4:cf:1d:d1:3a:24:09:d1:f2:07:5b:b1:
f1:81:23:8e:1f:b7:99:fe:c5:c9:b0:fd:49:2f:82:4b:52:4d:
66:d8:54:b1:ae:b6:09:32:ce:6e:f3:29:db:da:c8:f6:b3:de:
cb:08:f3:1a:3e:57:14:34:a3:3e:02:89:a9:ce:d3:8f:3a:92:
97:52:f4:5a:56:2c:e6:06:80:f5:78:11:cf:60:cf:c1:fe:c2:
42:d9:c6:3f:83:2f:cf:50:c5:4a:cb:39:86:de:31:4e:8b:5b:
b8:f8:b5:e2:35:0b:72:97:a6:74:23:42:ab:9d:14:cf:d0:cd:
32:d2:63:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:38:53 2026 by rpki-client