Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier: v9fIwEWUToXSg95b+rzq8KxhkwwfCA080FChzX6O/uE=
Subject key identifier: DE:F2:77:9E:5E:51:A1:78:2B:F4:55:B9:AC:42:79:D0:97:CA:E9:C9
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 019E2091D4D974A1FD5AC31A8C0098BBEC4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number: 18AA
Signing time: Wed 13 May 2026 09:01:28 +0000
Manifest this update: Wed 13 May 2026 09:01:28 +0000
Manifest next update: Thu 14 May 2026 09:01:28 +0000
Files and hashes: 1: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: iOV+J5kIeZFAIOtIPThY0JGlF89YZ3A56X94uJSoWjM=)
2: s7RCJecrkvhO4O8n4hnHhMn63mI.roa (hash: RMUboypqGxzOTuEkOaIhesKwecXYlREEbxutxlq+fCs=)
3: yhoQSW5m0HxnhBThODAYvKmDatA.roa (hash: Zj3xva8IbUjYyCWlM9IRCPCWul21ZtyOBPZl0zgZK3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:d4:d9:74:a1:fd:5a:c3:1a:8c:00:98:bb:ec:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: May 13 09:01:28 2026 GMT
Not After : May 14 09:01:28 2026 GMT
Subject: CN=def2779e5e51a1782bf455b9ac4279d097cae9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f7:d4:e6:24:43:ea:ae:bf:6e:fe:b4:9e:65:
b2:89:20:28:73:86:e2:d9:ef:e0:9a:0d:76:ea:22:
4c:e6:cf:c6:ad:a9:c3:08:69:c0:5b:2c:2a:76:40:
1b:5c:08:d8:0c:c7:da:e8:43:fd:40:89:89:11:fd:
53:19:25:89:65:0a:24:d0:5a:04:c5:37:e8:50:b4:
de:c0:d8:24:6a:70:56:79:1b:6f:74:26:b9:c3:5b:
93:51:2a:e0:9f:26:be:f7:61:93:5f:67:2f:47:ae:
60:57:9b:a3:5d:7c:e5:5e:8a:9e:42:41:f7:c2:09:
b7:cf:e4:4e:e1:cb:f2:a2:0f:fe:f7:72:42:54:31:
70:dc:e9:e4:0b:ab:6f:8d:76:b2:3a:9b:c5:6b:9a:
01:88:9b:bd:9f:07:0e:5a:e8:e3:00:5e:29:26:b3:
82:c1:76:89:5b:8b:17:16:94:37:51:23:b1:da:44:
7f:64:25:90:0e:b5:a5:87:d0:a2:c0:2d:a0:bb:c9:
36:75:60:6d:96:36:7e:50:5a:4b:4a:af:29:e1:66:
0d:2a:1d:eb:e0:be:cc:c5:51:48:f6:0d:ce:c4:ba:
65:3e:5c:2d:05:14:18:8f:9e:c2:3d:42:ee:7e:da:
55:72:95:3e:b4:65:c0:09:c7:86:33:3c:a7:50:b6:
e5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F2:77:9E:5E:51:A1:78:2B:F4:55:B9:AC:42:79:D0:97:CA:E9:C9
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:64:de:a6:3e:eb:90:19:42:5f:46:94:c8:84:ad:e7:32:c7:
f2:aa:7c:80:2e:5f:84:57:e1:45:6b:99:4d:36:f7:00:2e:29:
c4:6a:b2:f0:4e:05:2a:ae:5b:54:ef:be:d9:dd:cd:2b:4f:70:
47:d7:24:0c:eb:46:ed:27:4c:ee:44:d6:55:e2:14:91:11:ec:
a8:a2:ae:69:8f:cf:5e:dd:df:67:b4:da:35:26:07:a4:cc:0f:
f0:42:00:4c:ea:a9:18:26:92:a0:50:20:6c:af:8e:ab:83:62:
31:4f:ba:a0:60:2d:40:9d:76:dd:41:b1:e2:bd:79:fa:d0:3d:
79:a6:18:fc:a8:d5:d1:bc:92:d7:6b:a4:40:f3:b5:c0:0c:bd:
b6:23:24:4f:98:c4:f7:58:0e:ae:38:d9:64:74:50:a6:df:7a:
6a:98:d5:42:72:5a:d2:47:4b:e3:c8:97:d8:07:c1:4a:20:87:
7d:7c:49:ef:85:6a:69:24:fe:99:b3:06:0d:65:98:94:1b:89:
61:0b:27:89:36:ce:1d:de:05:bb:b4:5f:50:a6:ff:65:b8:39:
63:7a:10:d6:0e:59:2d:ad:62:53:15:b2:4a:29:23:e9:7a:5d:
42:a9:69:ae:1f:b8:2b:53:7b:96:f8:57:82:b4:15:a8:10:13:
0a:af:27:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:57 2026 by rpki-client