Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
File: Or4W6uZkLTO7wPuQzeI0_QITRwk.mft (raw, json)
Hash identifier: mNQ5egLnHiAU6a54C7+Q9wnVm1dbgsHClnQ4xSAFR+g=
Subject key identifier: 86:74:0B:6C:20:6C:8A:5F:14:DA:5D:73:EC:5C:21:35:C8:C1:CC:6A
Authority key identifier: 3A:BE:16:EA:E6:64:2D:33:BB:C0:FB:90:CD:E2:34:FD:02:13:47:09
Certificate issuer: /CN=3abe16eae6642d33bbc0fb90cde234fd02134709
Certificate serial: 01A0D727D2A940A956EC3A142B347B5C02F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
Manifest number: 0133
Signing time: Fri 25 Sep 2026 06:01:46 +0000
Manifest this update: Fri 25 Sep 2026 06:01:46 +0000
Manifest next update: Sat 26 Sep 2026 06:01:46 +0000
Files and hashes: 1: Or4W6uZkLTO7wPuQzeI0_QITRwk.crl (hash: WBACrpffeuQynwuCDshNOIdsobx67x1KFTOpbyO57qY=)
2: P-NUTyH2nVmRcyECHCRmEz-xvik.roa (hash: qicAikWH5uUaAqp5U7Os+UidSM1o4zOBz4zwJdo3kRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:d2:a9:40:a9:56:ec:3a:14:2b:34:7b:5c:02:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3abe16eae6642d33bbc0fb90cde234fd02134709
Validity
Not Before: Sep 25 06:01:46 2026 GMT
Not After : Sep 26 06:01:46 2026 GMT
Subject: CN=86740b6c206c8a5f14da5d73ec5c2135c8c1cc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:4d:e6:0d:b1:6c:1b:bc:6d:6f:26:2c:d6:
bd:bb:0c:86:ce:2f:31:9a:8f:e6:47:ed:a9:b1:f2:
63:98:66:06:96:ce:17:be:83:75:16:6e:cc:92:dc:
83:1f:f8:dd:59:cb:6d:7c:14:d9:11:d7:e6:50:36:
56:70:28:90:06:f3:ee:98:b7:a2:8a:f6:ce:e9:b0:
84:ea:65:1b:6c:32:90:1f:1e:05:ad:b1:63:e8:33:
db:c9:c8:62:cb:d9:cd:c0:29:6c:23:95:32:ab:39:
39:d1:36:ba:2f:c2:4b:68:04:44:17:a2:f0:a0:43:
c5:6f:71:51:c4:2c:73:ae:36:a6:9d:ff:c2:15:11:
78:b7:59:59:b4:44:76:02:4c:16:ff:73:2d:32:6a:
e5:63:d4:4a:22:bd:b8:04:ac:f7:ae:ce:ce:be:21:
f8:fb:96:2a:c8:53:99:17:b1:1c:10:c6:af:69:82:
69:66:b9:17:3a:62:80:64:16:8a:f9:f3:5e:fa:75:
85:50:35:ee:a4:5b:d5:81:f0:e8:9a:f9:67:c8:16:
77:17:76:0e:ef:69:fa:47:88:07:d8:04:00:52:ee:
54:11:b2:62:51:b0:7d:41:a4:31:63:31:87:8c:97:
99:5c:db:d0:57:b6:ef:cb:07:64:27:04:d1:84:5a:
d8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:74:0B:6C:20:6C:8A:5F:14:DA:5D:73:EC:5C:21:35:C8:C1:CC:6A
X509v3 Authority Key Identifier:
keyid:3A:BE:16:EA:E6:64:2D:33:BB:C0:FB:90:CD:E2:34:FD:02:13:47:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d1:8a:ce:86:b3:fc:b7:7e:c5:9c:8f:92:52:5a:e7:ec:5a:
e0:e2:03:5f:88:4c:54:3b:5b:04:f1:af:5a:45:cb:33:c1:3c:
12:27:a8:0b:32:33:f2:a5:13:df:42:7d:67:1c:ea:a6:8c:00:
33:40:8e:bd:0f:d1:2f:ce:51:5f:6e:68:1c:8e:7d:f0:21:17:
31:8a:24:81:4f:bb:49:da:76:c4:d6:a6:1d:07:90:c0:d3:d9:
b4:9c:55:3f:e3:26:33:24:50:9f:5a:87:01:ad:2e:45:0a:3e:
3b:1d:0c:e6:a1:e6:cd:99:52:aa:1e:17:96:8d:94:41:5d:02:
10:38:9c:05:f7:56:58:6e:22:25:97:88:0b:88:00:99:bd:e6:
11:55:aa:c9:5e:09:9d:5e:e7:7c:1a:92:86:27:ef:ab:fe:34:
23:63:a0:56:75:b6:2c:44:db:c6:5f:d2:45:6c:3e:92:5e:28:
4e:92:eb:80:b6:d6:03:10:35:0a:92:e8:ed:c7:75:c1:10:1a:
da:54:c5:f6:77:93:2f:06:4e:9f:62:53:98:9e:f6:4c:52:e2:
f7:04:f4:ac:e4:af:9c:c6:02:85:0c:8e:85:d0:15:fb:a5:e2:
e2:15:88:b8:4e:6e:c5:8d:37:aa:d1:94:48:8a:e4:53:63:2c:
3f:dd:00:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:18:33 2026 by rpki-client