Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier: pciT1Z6UQWBdbSU1iaupgG3iBoHV/EKvM3OwNW2faog=
Subject key identifier: 42:A4:C2:F1:1A:7E:F9:7E:5B:6F:30:D0:BF:96:F8:52:28:B0:AA:DB
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 019E1EA39796E4FE4B26BD7B9E692D75061D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number: 0622
Signing time: Wed 13 May 2026 00:01:38 +0000
Manifest this update: Wed 13 May 2026 00:01:38 +0000
Manifest next update: Thu 14 May 2026 00:01:38 +0000
Files and hashes: 1: 6ztTDGBSEjfUz5YPUm3xJqrFtBQ.roa (hash: NaCtdBF9yWOeFeahp2D+pL4fXJjohl4aTNmTP8dCNsQ=)
2: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: p8ZcPVjzJ4/uPItvo9/G3TgYLWYP0bnEezMMVbXdHj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:97:96:e4:fe:4b:26:bd:7b:9e:69:2d:75:06:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: May 13 00:01:38 2026 GMT
Not After : May 14 00:01:38 2026 GMT
Subject: CN=42a4c2f11a7ef97e5b6f30d0bf96f85228b0aadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:05:f6:d6:d3:69:5b:3c:10:e4:b1:bf:bf:
9c:90:be:e5:34:c3:cc:99:6e:79:2a:d7:a4:a6:3f:
62:80:e4:0d:41:c7:f8:b0:0b:d5:02:53:c2:40:7a:
be:fb:e6:bd:63:58:ab:ac:ee:78:c0:db:36:26:d3:
76:01:7f:1a:c2:e2:de:f4:b2:e1:b2:bc:9b:76:1f:
a6:f8:8d:07:d1:c4:9d:96:61:11:ee:48:fa:b4:46:
2c:37:05:f9:c8:03:5d:a1:98:99:20:2d:b2:ac:34:
e5:36:7a:a5:4a:59:6f:46:dd:aa:55:b2:b3:7f:71:
b8:2c:da:48:dc:75:c9:70:e6:a4:f6:3a:ba:01:e4:
8c:61:8e:2e:cd:bd:87:02:48:9b:18:32:39:e1:b2:
91:69:2b:c0:dc:32:61:47:a9:0a:4b:9a:75:04:ae:
1a:f3:8a:cf:6a:85:bc:60:46:51:42:0f:22:5c:f8:
88:cf:df:d3:f2:00:b2:1f:68:d4:ec:2f:fd:18:43:
10:d3:f6:1c:01:ea:30:d9:67:f4:dc:5b:7b:27:5f:
96:f1:13:e6:12:1a:ca:2c:79:0d:ed:67:c8:62:8a:
02:43:dc:7b:eb:f8:26:0e:ca:ef:bc:d0:76:b7:c9:
31:1f:bc:2e:a2:08:4d:af:11:31:ae:fb:33:b1:f7:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A4:C2:F1:1A:7E:F9:7E:5B:6F:30:D0:BF:96:F8:52:28:B0:AA:DB
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2e:12:fd:9e:44:26:d5:58:cc:74:81:65:45:89:f0:87:02:
75:8f:f8:9b:71:31:10:a4:58:4d:f7:37:51:6d:f6:1b:c0:4e:
92:5d:cc:65:5e:da:da:36:d3:3c:48:95:b1:3a:2b:11:ab:10:
6d:62:da:db:a0:9e:40:bd:a2:8b:ed:cb:d4:d6:fc:20:d5:0f:
80:c1:67:42:b3:d8:0f:f8:1b:a1:40:d7:be:a1:f9:1d:c1:a1:
6f:c2:e3:8d:84:88:0a:84:24:4d:4e:6f:d2:80:65:76:ba:50:
cd:d3:f5:e6:0e:37:51:e7:e0:cc:96:bf:6c:53:fb:95:cf:0b:
dc:b6:a3:c4:39:90:c2:01:78:a3:88:14:6d:ec:cf:41:e1:de:
33:94:5a:62:08:c7:bd:ac:b5:bc:18:cc:ad:fa:e9:86:6d:67:
ac:25:ca:e3:d1:72:ec:ec:e1:68:8a:69:e4:c4:5a:3b:e6:e7:
60:29:6f:d3:df:9b:e7:f3:3a:de:04:61:ab:51:b9:69:b9:29:
d0:80:eb:36:30:34:27:58:78:e0:f7:cb:9f:24:3a:f0:3e:bf:
b1:5a:61:fd:44:71:8c:c7:72:d9:9d:33:b0:f7:82:de:21:74:
67:83:d8:28:48:4e:a0:60:e9:f7:2e:25:c7:60:b4:48:f8:23:
05:e4:ca:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:58:26 2026 by rpki-client