Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier: rG8YP+BZBezrr3ih5IGkmEw7xPYpcMFczf95XG3HRvY=
Subject key identifier: 16:25:6A:3D:2B:1A:FA:8C:0A:BE:81:BF:E9:3F:BE:EE:DF:DC:33:CA
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 01A113AA70D704EC1D633A1FA76699CD74D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number: 07AA
Signing time: Wed 07 Oct 2026 00:01:39 +0000
Manifest this update: Wed 07 Oct 2026 00:01:39 +0000
Manifest next update: Thu 08 Oct 2026 00:01:39 +0000
Files and hashes: 1: 6ztTDGBSEjfUz5YPUm3xJqrFtBQ.roa (hash: NaCtdBF9yWOeFeahp2D+pL4fXJjohl4aTNmTP8dCNsQ=)
2: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: /pkDMk/tMijKNhqrdFmvf5c3Tu2RO5PPomH3f0l7enE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:aa:70:d7:04:ec:1d:63:3a:1f:a7:66:99:cd:74:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: Oct 7 00:01:39 2026 GMT
Not After : Oct 8 00:01:39 2026 GMT
Subject: CN=16256a3d2b1afa8c0abe81bfe93fbeeedfdc33ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:54:9a:b7:0e:d5:08:04:c7:2e:dd:d3:8d:df:
36:11:91:c8:57:6c:a6:0a:80:d4:1e:a3:b7:11:a6:
b1:06:6f:86:cc:e6:a4:52:86:69:13:54:fa:ab:8d:
81:da:5c:d3:bc:e4:88:ad:81:49:6a:c8:62:b6:58:
91:8f:22:c0:f2:77:ef:16:8d:92:88:04:09:6c:93:
ca:8b:ac:17:aa:5c:0b:13:46:79:1b:67:e9:6f:68:
3e:b7:b3:46:68:02:cb:e8:a8:01:dd:48:e4:6a:38:
f4:a6:be:9c:21:a0:26:09:b6:e5:ee:e0:d3:79:ed:
69:cf:23:4c:93:60:9b:e6:ee:d2:36:f7:96:36:a0:
46:2e:b6:36:e5:94:12:9c:6c:43:eb:37:98:bd:f9:
b7:34:69:e6:e3:10:ed:12:66:b1:35:29:27:a2:f8:
a5:50:d3:63:1b:e0:cd:6c:ed:61:8f:2b:a5:1f:b4:
a3:ac:7f:39:22:9d:fe:b8:f7:d2:e3:c7:a9:a1:bf:
9b:d5:13:85:43:db:81:82:a0:55:e9:c5:db:2a:20:
db:9c:e7:98:77:82:0b:e2:31:1a:67:60:fb:76:1c:
22:5a:37:05:0b:4e:20:a1:fc:95:d0:7c:26:7b:ef:
fe:df:e7:0f:c9:a3:31:61:e9:8a:da:a2:c7:7c:54:
3d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:25:6A:3D:2B:1A:FA:8C:0A:BE:81:BF:E9:3F:BE:EE:DF:DC:33:CA
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4f:ae:29:da:7a:bc:d6:e8:a9:48:e2:3b:24:1f:8c:ea:93:
07:18:60:68:2f:ef:ea:a9:29:9f:49:fb:ba:03:f6:44:05:ce:
0c:ce:1e:30:51:e0:16:8a:0c:a1:9c:fa:4b:03:bf:99:54:9e:
13:bd:b6:df:79:82:bb:d6:11:4e:06:80:fd:55:fc:4d:56:de:
e2:4a:f7:e4:cf:36:b6:ce:cd:15:c0:2e:ff:5a:1d:17:91:3c:
c8:4b:67:52:a4:8f:ad:e1:fd:1b:20:21:d1:05:1f:cb:fc:f9:
e7:c2:39:aa:6d:dc:c5:3c:e7:6c:17:33:49:db:25:f5:7c:7f:
ea:50:7d:0c:56:35:99:fd:17:e3:f8:80:1a:7b:64:7b:95:ba:
62:96:6f:ef:cf:6d:35:39:de:5e:18:99:91:d0:84:56:67:b7:
03:19:8b:5e:2f:1a:f5:a3:16:12:8f:a3:24:65:bc:79:de:b1:
2b:fe:de:21:9c:39:cf:12:91:35:b6:8d:db:30:93:85:a2:d8:
29:6e:78:bc:25:13:ca:7c:f3:cb:63:c5:c4:89:28:57:83:11:
ba:6b:d4:40:87:59:e7:6f:55:6b:7e:98:7f:a2:c4:b3:5a:2d:
06:73:21:1d:35:a6:fc:ae:4d:4c:a1:01:65:49:25:e4:12:e8:
07:c9:e1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 03:56:30 2026 by rpki-client