
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
File: Or4W6uZkLTO7wPuQzeI0_QITRwk.mft (raw, json)
Hash identifier: L2PfAHCm9X8uTPiV4oNJnYY8JtRbvMKe8QF/lKhsBu8=
Subject key identifier: 93:AB:E1:02:88:92:1E:08:2B:40:30:41:8C:53:FE:99:CD:EC:AC:C7
Authority key identifier: 3A:BE:16:EA:E6:64:2D:33:BB:C0:FB:90:CD:E2:34:FD:02:13:47:09
Certificate issuer: /CN=3abe16eae6642d33bbc0fb90cde234fd02134709
Certificate serial: 01A0DCF2B58A032054D269F5384C048FFFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
Manifest number: 0136
Signing time: Sat 26 Sep 2026 09:01:28 +0000
Manifest this update: Sat 26 Sep 2026 09:01:28 +0000
Manifest next update: Sun 27 Sep 2026 09:01:28 +0000
Files and hashes: 1: Or4W6uZkLTO7wPuQzeI0_QITRwk.crl (hash: Pryd5axraGUClNMXPq7VntFHp8VPb0VQ4xBOT+nRMiA=)
2: P-NUTyH2nVmRcyECHCRmEz-xvik.roa (hash: qicAikWH5uUaAqp5U7Os+UidSM1o4zOBz4zwJdo3kRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:b5:8a:03:20:54:d2:69:f5:38:4c:04:8f:ff:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3abe16eae6642d33bbc0fb90cde234fd02134709
Validity
Not Before: Sep 26 09:01:28 2026 GMT
Not After : Sep 27 09:01:28 2026 GMT
Subject: CN=93abe10288921e082b4030418c53fe99cdecacc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ff:eb:fd:5e:54:d8:81:ba:89:a2:07:78:18:
48:96:68:8f:4a:2b:df:26:db:18:80:26:09:1c:de:
a0:cd:f2:b9:10:bc:db:10:fd:9b:40:da:9a:59:83:
35:0d:25:32:15:de:3c:ba:e5:13:e2:be:78:c8:52:
29:c4:05:5e:e6:a5:f1:c2:89:2b:c0:2b:24:6b:15:
47:82:50:ac:06:a9:6a:8f:61:77:c0:e7:06:5c:52:
d6:3b:8d:0e:57:5f:00:28:a8:a5:2a:78:80:48:44:
5d:93:d6:1c:c6:f0:ea:91:3e:2a:f5:af:ec:b6:fa:
b7:56:ea:b2:0d:d9:c3:6b:0a:3a:e8:39:cc:6d:d5:
7d:a1:fb:8d:4e:07:27:84:19:65:1b:3c:95:8f:6d:
8f:8e:3b:e7:11:be:74:83:c2:fa:f1:85:77:11:99:
06:d6:44:bf:15:9c:45:c1:d0:78:bc:4a:b2:76:e3:
01:4d:dd:91:dd:ca:8a:df:63:69:12:9d:b7:a3:87:
89:70:ea:18:04:11:d5:cd:f8:ef:cf:06:18:8b:7a:
fc:f1:27:b4:0e:00:1a:40:6e:36:6b:48:0e:4c:53:
08:7b:4a:84:cb:24:4e:5e:a6:d5:72:34:35:11:0b:
a9:10:08:4e:49:e4:fa:02:a9:43:5d:b7:0e:81:db:
6d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AB:E1:02:88:92:1E:08:2B:40:30:41:8C:53:FE:99:CD:EC:AC:C7
X509v3 Authority Key Identifier:
keyid:3A:BE:16:EA:E6:64:2D:33:BB:C0:FB:90:CD:E2:34:FD:02:13:47:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:be:e4:0d:9a:38:00:12:29:76:11:73:12:24:7c:31:91:2c:
ff:30:e0:33:a3:8d:10:ca:51:78:97:7b:ae:53:d5:85:bc:c5:
7f:6b:2b:1f:fa:20:7d:e0:9d:91:89:90:63:f0:c7:eb:85:6d:
58:bb:f6:b3:c6:b8:74:bd:c4:ab:13:cd:cf:f4:0d:b9:72:d1:
62:cb:2e:a1:9f:1c:d3:ca:b3:bb:07:91:12:f1:10:7e:78:fc:
8d:28:08:25:9a:fe:ce:cc:91:76:0c:a9:1d:47:b5:b2:8c:96:
65:01:f4:fa:b9:96:30:a1:e5:ad:60:b0:3f:73:6a:ba:a4:3a:
f3:87:6b:63:98:7b:45:6a:7e:9c:72:82:9d:24:82:07:e1:5d:
8f:2a:9b:b6:43:5b:14:9e:82:62:f1:de:9a:40:8b:46:8c:61:
bb:18:c7:f3:48:82:8d:c0:45:56:b5:04:48:eb:f4:27:e5:96:
71:98:4f:63:bd:8f:c3:8e:1c:fb:6a:53:e7:2e:66:0b:06:cf:
1e:5d:00:06:e2:41:17:fb:4b:55:ee:1f:d8:ae:61:32:ad:18:
62:a3:2b:3c:4f:a2:34:1b:e7:d1:f4:7c:84:37:e0:25:f9:56:
b9:84:b1:b3:67:f3:74:cf:6a:5e:7f:68:e7:99:06:a2:bb:c3:
f0:82:65:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:24:18 2026 by rpki-client