Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier: qo8c65MzpS7Y+c1AYD+9ah74kH6KUfG5GHujAWcCQJ4=
Subject key identifier: DE:DA:A2:ED:BD:8B:82:F6:8E:3E:0A:47:3E:C2:2E:28:12:07:B5:5D
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 01A1024958E533597B1D6EA5A056EB9F2A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number: 1A28
Signing time: Sat 03 Oct 2026 15:02:03 +0000
Manifest this update: Sat 03 Oct 2026 15:02:03 +0000
Manifest next update: Sun 04 Oct 2026 15:02:03 +0000
Files and hashes: 1: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: nDOs02o0YV/CV0zaRA3BYKxR+CRb29F0BIn5Frjkbxw=)
2: s7RCJecrkvhO4O8n4hnHhMn63mI.roa (hash: RMUboypqGxzOTuEkOaIhesKwecXYlREEbxutxlq+fCs=)
3: yhoQSW5m0HxnhBThODAYvKmDatA.roa (hash: Zj3xva8IbUjYyCWlM9IRCPCWul21ZtyOBPZl0zgZK3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:49:58:e5:33:59:7b:1d:6e:a5:a0:56:eb:9f:2a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Oct 3 15:02:03 2026 GMT
Not After : Oct 4 15:02:03 2026 GMT
Subject: CN=dedaa2edbd8b82f68e3e0a473ec22e281207b55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:33:88:37:95:5d:1a:e4:93:4d:68:fe:9e:
52:92:fe:67:93:d4:f0:a1:dd:66:e8:fa:36:05:48:
3b:7a:09:0a:7c:6e:3d:85:13:bf:9d:fa:27:ff:44:
b6:f0:f7:a1:06:83:95:99:4f:ef:5c:92:50:3b:24:
1e:3d:92:2f:d7:8f:43:fc:9b:0d:83:2d:ad:90:2a:
c5:0e:38:8e:76:97:66:82:52:0a:45:29:6c:ff:12:
e8:26:15:26:c5:e7:f7:67:57:0c:03:5c:eb:f6:ad:
4e:1d:db:bb:69:25:55:48:5f:19:c9:08:65:fd:77:
cc:7a:b4:eb:48:0f:71:bf:39:5c:65:1a:d0:3e:d0:
bd:23:2c:2e:44:9c:15:23:4b:8d:ac:ec:f8:a7:e2:
82:6e:c6:14:4e:a8:f7:5c:68:0e:4b:0e:04:cb:09:
1f:7d:de:dc:dc:75:9c:cf:64:e4:ab:ce:89:4f:d4:
43:f9:77:38:8d:92:bf:1b:85:79:a3:0e:12:c8:e8:
47:91:7e:76:24:06:24:b3:14:9b:8e:e9:6d:bc:de:
9d:f1:8a:60:8e:ce:40:92:ec:ec:42:53:44:0f:eb:
b8:c5:b0:91:28:3a:ce:58:e2:8d:11:b1:f7:d4:bc:
94:49:74:fc:1e:3e:f8:22:cb:8a:7e:0a:c4:79:02:
7d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DA:A2:ED:BD:8B:82:F6:8E:3E:0A:47:3E:C2:2E:28:12:07:B5:5D
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f7:24:7a:4b:6e:fc:69:ae:4f:83:a3:3c:55:91:fc:19:82:
1d:a4:d4:bb:0d:8e:c9:6c:af:71:c3:08:87:8e:26:61:fb:1b:
ea:78:73:72:12:be:a9:fa:7c:6c:26:db:19:ea:5a:42:f3:a4:
b6:ca:b5:d1:e4:78:23:01:d1:27:ec:2d:a0:55:7e:bc:fc:97:
b1:b8:5d:49:ae:e2:28:4f:dd:f9:c2:53:8c:93:13:38:3a:ed:
d1:50:52:36:84:98:66:bd:dd:97:c8:d1:61:20:e6:e0:d9:80:
e4:c3:20:d4:7a:69:9a:0c:b5:6c:e7:e7:33:3e:bf:0d:85:1b:
69:03:12:f8:d5:f1:4a:45:d8:60:29:51:ef:52:3b:05:93:3b:
e2:7c:12:de:80:b7:cc:e6:9d:70:86:94:a6:b0:27:5d:a7:bc:
eb:77:86:3f:63:7f:85:68:bd:fd:31:12:e8:96:26:a3:87:52:
61:95:30:9b:a9:9e:e8:ba:a9:26:31:23:84:a3:61:f4:20:51:
a0:6a:ea:1a:42:b8:ea:fa:97:8f:02:37:c2:b3:06:01:f2:e8:
7e:30:90:80:be:20:a0:33:17:3b:ff:49:0c:f6:78:44:ac:14:
9d:4c:e6:06:a5:75:9a:d5:fb:09:13:a5:f2:03:b6:67:59:ac:
64:09:5f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 21:06:04 2026 by rpki-client