Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier: Fj1aoqiElAtW4Lt++7Bl8ZjhpgU2ar++2I3Tw4oaRZE=
Subject key identifier: 18:EE:71:7B:9D:2E:9A:C2:2C:A4:67:E5:65:C1:48:9A:51:1E:41:5B
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 019D25836159B923DA1EFBACFFD4009C2A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number: 05A1
Signing time: Wed 25 Mar 2026 15:01:00 +0000
Manifest this update: Wed 25 Mar 2026 15:01:00 +0000
Manifest next update: Thu 26 Mar 2026 15:01:00 +0000
Files and hashes: 1: 6ztTDGBSEjfUz5YPUm3xJqrFtBQ.roa (hash: NaCtdBF9yWOeFeahp2D+pL4fXJjohl4aTNmTP8dCNsQ=)
2: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: Q5bfUGQTNWIBoMHzfduIoxaA1hq8iF1QDjFoxzIU1KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:61:59:b9:23:da:1e:fb:ac:ff:d4:00:9c:2a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: Mar 25 15:01:00 2026 GMT
Not After : Mar 26 15:01:00 2026 GMT
Subject: CN=18ee717b9d2e9ac22ca467e565c1489a511e415b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:20:a6:10:74:f1:fc:39:d6:8c:09:b2:bd:
f2:35:89:bb:51:f3:1f:bd:11:92:89:e3:d7:94:e1:
85:28:d1:1d:52:a0:72:81:0c:33:1c:a3:9a:1d:00:
50:ff:5d:19:3b:42:67:f7:e7:6b:38:a9:1e:11:20:
0f:0a:87:ce:5f:2e:a3:7d:ad:cf:d6:de:b7:d6:47:
54:6b:82:61:27:f3:e3:98:b3:6d:67:a2:1b:96:05:
b9:69:f2:81:55:bc:fa:ee:2b:7a:b7:ba:48:a8:a6:
20:dd:d1:0d:9c:ee:06:77:95:08:84:ad:2a:1d:63:
ab:c9:76:0a:b0:79:87:32:cc:c2:9c:f0:d7:ce:42:
43:21:56:c4:26:0e:c8:a0:1c:0a:ba:89:17:60:e5:
b1:64:87:2f:0b:a9:2a:d0:72:dd:8b:bb:0a:25:db:
61:b9:d8:32:00:c8:af:4e:5f:b8:bb:9a:57:9d:a1:
97:21:bf:73:b9:19:d3:b9:06:42:26:46:2f:42:87:
c3:d9:ed:d8:a9:b6:a9:24:41:e8:ff:d2:20:f5:86:
86:bc:62:c5:3c:b7:e8:3e:3c:5c:6d:07:ff:fa:e5:
23:30:68:11:f3:41:65:46:e9:e9:cb:9d:6e:4a:c8:
da:05:48:8f:95:c7:1d:a8:d4:48:15:cb:99:7e:c6:
ad:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EE:71:7B:9D:2E:9A:C2:2C:A4:67:E5:65:C1:48:9A:51:1E:41:5B
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:55:43:b0:3b:0e:cf:b0:c4:9b:06:c4:59:a6:6c:bb:3e:9b:
da:5e:b2:9a:49:d3:1a:81:c5:67:02:1e:ea:16:90:3a:b3:45:
72:21:40:fd:d3:53:7b:00:5d:74:7f:e5:76:81:f4:ab:59:de:
7a:a1:96:5f:64:d0:68:d7:b4:a6:8d:7d:a6:82:c2:70:4a:24:
29:5d:e8:d7:e5:25:31:be:52:d4:0b:e4:4d:42:ae:6d:52:74:
55:30:0f:d8:3e:9e:93:53:93:07:36:de:15:e9:4b:7e:bc:df:
ad:58:f1:54:79:60:20:a7:12:68:28:82:b1:cb:bd:97:c9:38:
78:a5:5b:fb:d7:36:7f:8d:d3:de:16:1a:c5:d6:fd:64:ee:2b:
05:f8:4e:8e:1a:be:ac:b9:3b:87:a5:04:66:5f:35:ec:86:04:
5a:34:ad:73:06:f2:04:7d:24:36:01:55:14:69:50:b3:eb:11:
35:69:84:05:22:dd:13:b3:40:ff:60:c3:d0:7f:a0:54:3a:69:
fc:db:b6:d7:aa:09:12:1b:d8:a8:29:df:44:5d:d2:95:6d:a0:
eb:1e:64:66:24:7c:af:e8:0a:aa:3e:ef:40:98:6f:1c:aa:27:
97:3b:ca:eb:30:25:7c:21:21:b4:20:af:b2:af:1f:2c:c3:61:
6b:fb:02:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:27 2026 by rpki-client