Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier: qp8TG6IKokZ7aLO24grKURK9YiMeBqxEwDsC4EgKqpc=
Subject key identifier: 9F:DB:2A:29:54:DE:7C:B8:D9:C6:4F:8B:97:B7:88:2E:17:50:21:D0
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 019D27722F07AF5C157215175263C00EDB30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number: 05A2
Signing time: Thu 26 Mar 2026 00:01:27 +0000
Manifest this update: Thu 26 Mar 2026 00:01:27 +0000
Manifest next update: Fri 27 Mar 2026 00:01:27 +0000
Files and hashes: 1: 6ztTDGBSEjfUz5YPUm3xJqrFtBQ.roa (hash: NaCtdBF9yWOeFeahp2D+pL4fXJjohl4aTNmTP8dCNsQ=)
2: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: X/OUWguv+Te+i4eKy1WVANWKPYE1gM5bUvsKh/8Ures=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:2f:07:af:5c:15:72:15:17:52:63:c0:0e:db:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: Mar 26 00:01:27 2026 GMT
Not After : Mar 27 00:01:27 2026 GMT
Subject: CN=9fdb2a2954de7cb8d9c64f8b97b7882e175021d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:dc:ec:06:b1:a9:aa:28:99:f2:c9:b3:2d:
b1:65:de:4e:76:d3:20:b8:05:e1:e7:7e:88:1e:f4:
50:c0:dd:5a:d3:24:76:c6:37:e5:0e:c0:c9:cf:54:
c3:3d:9a:4d:bd:2b:79:5e:ba:bb:fa:04:87:ec:e2:
22:50:e0:34:90:f9:97:08:59:a4:fd:63:6c:8b:be:
d3:f8:ac:e1:e7:9b:27:8c:66:35:0c:04:0f:d2:3d:
ac:a6:10:47:75:80:3d:39:db:c7:b2:2c:10:89:ef:
5f:d9:d6:36:e0:1f:83:10:5c:07:6a:06:2d:f3:50:
a6:4c:a1:45:a6:56:33:ab:4b:48:c6:73:9b:cd:29:
9e:62:dd:ed:45:1b:66:d6:c3:e4:a2:1e:61:c9:84:
27:ad:0f:b8:9d:67:57:b8:1a:a3:17:85:88:4b:7c:
0a:33:8d:b5:da:6a:38:11:03:d5:0a:88:e0:18:81:
5e:c7:13:49:41:bd:da:3d:c4:c3:39:2a:a6:ce:39:
1a:d6:02:db:8d:4b:35:74:14:88:98:f1:65:42:bb:
a3:26:97:37:a8:60:61:16:9c:fa:f4:0f:6c:01:39:
a7:f6:9c:ee:79:a8:9d:cf:ed:82:78:a9:15:52:cc:
44:fe:b5:5c:31:bf:0a:1d:8a:67:66:8f:8b:b1:aa:
45:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DB:2A:29:54:DE:7C:B8:D9:C6:4F:8B:97:B7:88:2E:17:50:21:D0
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:21:05:da:f3:01:fc:1a:ad:5e:87:0e:de:21:c0:3e:4c:ea:
9c:a8:67:0c:89:92:f0:08:6d:1d:50:d1:e6:37:41:75:27:a8:
fe:da:32:3c:d6:12:d2:4f:7f:f4:79:5b:87:4b:b3:b4:2e:ec:
cc:e9:57:96:47:ef:37:02:e3:16:ea:45:0b:19:e3:f3:32:8f:
09:eb:24:02:70:68:26:e2:fd:66:80:bc:f1:4b:e1:ac:6c:80:
96:99:04:22:82:e5:b4:8f:48:78:47:15:15:f1:c1:9d:1c:f6:
cf:d2:cd:ac:cb:54:7e:88:88:69:a3:5f:bc:8b:e1:66:bc:74:
e7:42:47:20:f1:da:dc:06:cd:d0:9e:e3:9f:df:fd:40:60:e0:
65:d8:59:f1:2a:c9:ee:94:44:29:0c:14:42:83:0b:f8:2f:8c:
6c:63:49:e9:63:a6:6f:08:60:5c:a6:7c:6f:4c:7c:50:81:69:
59:f8:5c:29:43:17:62:ce:3c:c2:10:d5:68:ab:89:ca:32:8d:
00:0a:04:27:8a:6d:60:ec:ab:e7:44:35:9a:9e:e0:74:08:1c:
fc:37:e0:20:b2:3b:87:d3:a6:27:4d:ca:72:4e:80:35:c6:e0:
fc:28:59:59:32:5c:a9:97:5b:77:d8:32:58:39:e7:15:3f:28:
28:91:87:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nci8Hr1wVchUXUmPADtswMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYjYyMzcxZWM2MmVmZDBmNDM4NWZhMDQ3MzA1NmYwODgx
OGRlNzMwHhcNMjYwMzI2MDAwMTI3WhcNMjYwMzI3MDAwMTI3WjAzMTEwLwYDVQQD
Eyg5ZmRiMmEyOTU0ZGU3Y2I4ZDljNjRmOGI5N2I3ODgyZTE3NTAyMWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTXc7AaxqaoomfLJsy2xZd5OdtMg
uAXh536IHvRQwN1a0yR2xjflDsDJz1TDPZpNvSt5Xrq7+gSH7OIiUOA0kPmXCFmk
/WNsi77T+Kzh55snjGY1DAQP0j2sphBHdYA9OdvHsiwQie9f2dY24B+DEFwHagYt
81CmTKFFplYzq0tIxnObzSmeYt3tRRtm1sPkoh5hyYQnrQ+4nWdXuBqjF4WIS3wK
M4212mo4EQPVCojgGIFexxNJQb3aPcTDOSqmzjka1gLbjUs1dBSImPFlQrujJpc3
qGBhFpz69A9sATmn9pzueaidz+2CeKkVUsxE/rVcMb8KHYpnZo+LsapF0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/bKilU3ny42cZPi5e3iC4XUCHQMB8GA1UdIwQY
MBaAFKK2I3HsYu/Q9DhfoEcwVvCIGN5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8wYmU1NTEtZDYwZC00OWJiLThjYWQt
Njc1ZTA3MjM1NjU3LzEvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8wYmU1NTEtZDYwZC00OWJiLThjYWQtNjc1ZTA3MjM1NjU3
LzEvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiEF2vMB
/BqtXocO3iHAPkzqnKhnDImS8AhtHVDR5jdBdSeo/toyPNYS0k9/9Hlbh0uztC7s
zOlXlkfvNwLjFupFCxnj8zKPCeskAnBoJuL9ZoC88UvhrGyAlpkEIoLltI9IeEcV
FfHBnRz2z9LNrMtUfoiIaaNfvIvhZrx050JHIPHa3AbN0J7jn9/9QGDgZdhZ8SrJ
7pREKQwUQoML+C+MbGNJ6WOmbwhgXKZ8b0x8UIFpWfhcKUMXYs48whDVaKuJyjKN
AAoEJ4ptYOyr50Q1mp7gdAgc/DfgILI7h9OmJ03Kck6ANcbg/ChZWTJcqZdbd9gy
WDnnFT8oKJGHLA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:41:57 2026 by rpki-client