Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
File: ORxdMzEUXsjicYdvgEIge50Ay2Q.mft (raw, json)
Hash identifier: 7zSrmBmphZNMAMOc8wa4E+MDbE7m/wOF57i3a9iApjw=
Subject key identifier: 38:31:3A:A6:9A:ED:0E:37:84:ED:66:9C:A3:75:91:B9:43:B2:BD:CF
Authority key identifier: 39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
Certificate issuer: /CN=391c5d3331145ec8e271876f8042207b9d00cb64
Certificate serial: 019D265FD5F9C51CF91EB9913B2222FEEF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
Manifest number: 115D
Signing time: Wed 25 Mar 2026 19:01:48 +0000
Manifest this update: Wed 25 Mar 2026 19:01:48 +0000
Manifest next update: Thu 26 Mar 2026 19:01:48 +0000
Files and hashes: 1: ORxdMzEUXsjicYdvgEIge50Ay2Q.crl (hash: onhCXQtxaGS0ezBOsfJWVpmpRwbS2M1OgbtJQqa9rA8=)
2: bv7crWXlDlytvYkySG7c5NmMUkA.roa (hash: hgMG06MlwTq9Qr8spukEtgFAVFOnQKq96lFNbYV3uWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:d5:f9:c5:1c:f9:1e:b9:91:3b:22:22:fe:ef:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391c5d3331145ec8e271876f8042207b9d00cb64
Validity
Not Before: Mar 25 19:01:48 2026 GMT
Not After : Mar 26 19:01:48 2026 GMT
Subject: CN=38313aa69aed0e3784ed669ca37591b943b2bdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:bc:49:d2:ce:e3:1d:69:5e:bd:32:c4:00:
8e:d7:28:3c:f8:b6:b7:65:db:3f:96:29:8d:bf:f3:
86:e5:e5:8f:44:e8:21:26:1d:a9:cf:7a:0a:42:30:
d4:a4:5b:c5:01:53:4a:66:9c:7a:d2:ff:1c:73:f5:
eb:87:8e:29:04:84:7b:73:7a:63:f0:aa:c4:f1:18:
0c:15:c9:58:80:87:46:45:58:91:63:84:48:70:34:
f1:09:fb:50:21:0e:7d:9f:d1:b8:dc:f6:5c:68:e6:
d3:59:c6:41:14:82:6f:28:da:41:02:1d:24:53:0f:
4e:03:47:07:98:f8:55:79:c8:b2:49:12:a1:c0:2b:
73:d1:7b:b3:d5:b7:41:8b:75:31:9f:18:b6:f4:96:
af:2c:b1:58:89:dd:eb:76:98:b0:2d:d8:42:ae:07:
dc:4c:72:ac:63:48:2e:f0:54:a5:16:e4:a4:66:5f:
33:1d:91:17:ba:4c:9b:bf:25:b8:53:10:d3:ad:fe:
b5:81:50:ed:7a:c0:16:5f:44:70:82:10:a1:de:2b:
95:da:5d:6a:b4:f1:2a:61:50:98:ec:84:08:39:04:
6e:74:25:83:7c:8c:f8:b7:ad:f9:10:1e:ac:1f:fb:
ba:56:5f:53:3a:55:64:fa:4b:cd:d0:a7:61:67:5a:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:31:3A:A6:9A:ED:0E:37:84:ED:66:9C:A3:75:91:B9:43:B2:BD:CF
X509v3 Authority Key Identifier:
keyid:39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c0:04:c6:ce:70:a6:c9:72:08:ce:77:d9:5c:3e:a5:06:6f:
28:6d:03:61:1e:fe:09:63:b9:d9:ea:31:42:57:b6:8d:7c:1a:
aa:7c:cc:20:06:74:19:cc:04:9e:e8:90:47:4f:28:6d:d6:ff:
d9:7c:e9:70:6e:3a:a6:b6:4e:7c:95:19:7d:96:3b:16:8b:ae:
45:2d:db:d6:f5:46:51:ad:80:b9:f3:2c:f6:9a:aa:9d:ae:49:
78:1f:c4:b6:fd:00:3b:f5:2f:26:29:0b:57:05:c7:ae:be:55:
ad:6a:4a:09:9a:8d:b5:e7:29:6f:9a:59:fd:95:31:05:56:38:
96:02:0a:f6:fb:64:d6:37:04:d1:35:cc:d7:ca:e5:ad:d9:b2:
90:09:2b:94:a9:01:c9:df:91:30:43:9e:e0:e2:56:a5:0f:41:
9a:9f:28:9b:44:01:25:2c:90:21:70:b8:dd:c4:e0:64:c4:23:
55:49:72:bd:00:51:47:5c:ee:b3:4e:5c:1c:03:76:55:9f:dd:
9a:9d:c7:20:88:55:0e:ed:14:ae:79:9a:75:13:a6:ee:37:34:
45:1a:de:e8:93:38:28:a2:be:ac:11:49:81:61:e2:a1:94:83:
cd:90:63:0e:8d:ff:36:b3:ff:e0:0a:3a:27:e1:15:9c:39:ff:
94:d0:8c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:54 2026 by rpki-client