Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier: 0bJTCZmXkgXdtYFzB+yG+/oZiSaKkgtVk8NeGCunjoI=
Subject key identifier: AA:B4:BA:9B:CF:BC:1B:30:2B:78:17:1C:49:9A:1B:BC:BA:CA:29:2D
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 019D2771D8B824D29C074B71C84440FB68FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number: 1829
Signing time: Thu 26 Mar 2026 00:01:05 +0000
Manifest this update: Thu 26 Mar 2026 00:01:05 +0000
Manifest next update: Fri 27 Mar 2026 00:01:05 +0000
Files and hashes: 1: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: i5XhyVXOQ5ANBpOZzoYDBtySOPM/CR9i06UIhVjmlgI=)
2: s7RCJecrkvhO4O8n4hnHhMn63mI.roa (hash: RMUboypqGxzOTuEkOaIhesKwecXYlREEbxutxlq+fCs=)
3: yhoQSW5m0HxnhBThODAYvKmDatA.roa (hash: Zj3xva8IbUjYyCWlM9IRCPCWul21ZtyOBPZl0zgZK3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d8:b8:24:d2:9c:07:4b:71:c8:44:40:fb:68:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Mar 26 00:01:05 2026 GMT
Not After : Mar 27 00:01:05 2026 GMT
Subject: CN=aab4ba9bcfbc1b302b78171c499a1bbcbaca292d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:95:5d:3d:31:7a:61:97:ff:df:3d:67:41:
f7:47:a1:98:f6:5c:40:63:29:b2:4b:e0:a8:7d:2d:
e8:0d:f0:9a:80:b4:ae:ad:08:cd:8a:50:50:1d:e1:
a0:55:04:45:27:04:2f:02:36:bd:1a:8d:51:4a:e2:
b3:8b:69:6c:5a:7a:1d:75:da:07:ae:6a:49:85:36:
4b:93:d8:0f:d3:b9:8c:cc:7b:9c:7f:da:6f:9a:18:
41:1d:8e:27:21:8b:e4:3c:6b:4a:01:45:53:5d:fb:
2b:43:f1:41:c3:c7:31:a0:40:3d:27:06:93:09:75:
33:27:9f:e9:ed:81:34:62:ca:29:d1:cf:cf:99:13:
16:d9:2e:d7:2b:52:83:60:13:ff:02:49:7c:bd:61:
7f:78:66:5f:ae:ea:12:9e:6d:cb:ef:9c:6a:fd:de:
44:49:c0:5f:18:29:4a:31:db:57:67:8f:ca:5f:d3:
0d:d9:5b:93:60:22:25:51:46:86:4b:ae:e8:d7:11:
55:3c:57:8d:a9:06:05:bb:2a:12:0a:39:58:e2:94:
fa:f0:b3:f2:47:5a:e7:bb:5e:d4:25:c3:ea:0c:82:
1a:83:18:b9:01:d8:be:da:ad:9e:43:41:e4:53:20:
84:05:59:ec:b4:ed:4d:2f:ed:1e:27:cd:81:b1:54:
e1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B4:BA:9B:CF:BC:1B:30:2B:78:17:1C:49:9A:1B:BC:BA:CA:29:2D
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:af:de:59:52:79:fb:e8:64:53:b2:03:b9:21:c8:25:05:0b:
92:bc:5a:51:26:73:67:ad:08:3c:17:18:19:d9:f5:4d:5d:f9:
b3:36:ce:03:34:d4:47:14:4f:46:df:0e:49:28:d5:7e:80:01:
fe:0e:f4:41:82:ff:e2:85:50:b9:c1:02:ea:f0:fd:b3:2f:ad:
d4:1c:6e:ac:11:94:46:ba:ac:ba:fe:33:c7:f6:89:a2:03:0e:
0e:37:f4:d5:d4:23:6c:ba:87:11:a0:79:cd:8a:bf:21:24:67:
84:3e:a7:27:ed:ad:70:c9:ef:b3:56:3c:7f:77:93:aa:4c:53:
52:db:2f:1e:a0:61:5f:1d:40:ab:68:42:1c:23:43:97:85:0f:
85:b4:7d:98:60:c4:df:b0:16:fb:6b:3d:83:55:a7:ce:54:5f:
39:25:8e:63:4d:e9:9c:75:cb:e0:01:f2:4e:8d:8f:25:aa:8e:
74:df:25:27:c3:de:67:ee:75:1b:2f:78:c9:89:17:fa:32:fa:
5a:4c:8f:de:79:45:61:b4:57:2a:2c:86:53:0f:51:77:7f:8f:
5a:4a:11:9e:77:16:7a:3b:13:c4:f0:71:82:2f:1d:42:8c:35:
cc:98:2d:36:ce:6e:d4:2b:7b:6f:83:d1:40:7f:3a:e9:8d:f2:
7a:20:cf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:14 2026 by rpki-client