Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
File: ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft (raw, json)
Hash identifier: IfHEwejj7IXstMzKYR4vvJENQD08236YW6PbZrnEAAM=
Subject key identifier: 92:DD:90:B2:1B:43:1E:49:DE:FA:D1:12:E7:A5:E9:43:ED:27:57:E6
Authority key identifier: 39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9
Certificate issuer: /CN=391b36bf39d2bc7f078e0279991876709c85acd9
Certificate serial: 019D26600EABD9D3A99136ADE58C409AAF93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
Manifest number: 0312
Signing time: Wed 25 Mar 2026 19:02:02 +0000
Manifest this update: Wed 25 Mar 2026 19:02:02 +0000
Manifest next update: Thu 26 Mar 2026 19:02:02 +0000
Files and hashes: 1: ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl (hash: 7Zlbhdf5maq8pKCDJWeKo2sqzjF+j+oC1gIbKtXyFgY=)
2: vkfnJrHiy2sJ2-fSn0x2K1mT3tU.roa (hash: RiiYyuDkNY9o+2d4f389MOhfKC15CjzA8CBlt+hYg4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:60:0e:ab:d9:d3:a9:91:36:ad:e5:8c:40:9a:af:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391b36bf39d2bc7f078e0279991876709c85acd9
Validity
Not Before: Mar 25 19:02:02 2026 GMT
Not After : Mar 26 19:02:02 2026 GMT
Subject: CN=92dd90b21b431e49defad112e7a5e943ed2757e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:1c:a4:7d:42:5f:35:6a:a2:0c:1e:4b:ba:
9d:b0:07:ba:54:ea:3f:f5:9d:99:24:4f:41:3c:88:
5e:bb:17:94:7e:08:6e:56:9f:a6:6f:53:e9:2a:0c:
c8:b5:63:c7:67:de:89:98:a7:80:9f:6b:51:16:21:
dd:b9:c6:99:fe:b4:7d:46:47:20:d4:47:70:64:f8:
4f:9d:c6:eb:02:2f:f6:d6:97:00:43:e2:11:8a:d2:
d6:8a:bd:89:31:f0:2e:63:b9:06:54:4c:77:e0:75:
59:87:ac:32:38:c3:65:66:c4:1e:7d:1c:c3:d9:5b:
86:02:48:54:0c:dc:a5:d8:0f:7b:28:3c:68:ed:5e:
37:f3:dc:8f:50:73:d8:68:aa:99:05:12:6c:4e:1f:
4b:95:10:57:b3:e5:f0:a5:cb:11:7f:56:bc:78:0c:
63:7a:c9:15:57:d2:cb:2a:b1:94:dd:52:d7:8a:be:
d0:71:a1:27:54:f7:42:64:e6:07:7a:c7:7b:c8:d8:
78:70:73:22:70:1d:0c:40:65:41:4f:ef:5b:d0:76:
cb:69:4c:f6:9f:b2:3a:0d:14:d3:c4:f9:9b:f4:e3:
07:16:80:3d:44:39:12:d2:3d:89:57:20:83:c4:c3:
02:7c:21:8b:52:f5:70:07:d8:df:b3:c0:a5:bf:00:
6e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DD:90:B2:1B:43:1E:49:DE:FA:D1:12:E7:A5:E9:43:ED:27:57:E6
X509v3 Authority Key Identifier:
keyid:39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:02:25:d4:13:7f:9d:46:f4:a8:b6:05:0f:0b:17:ba:46:9c:
df:29:64:40:26:08:ad:2a:71:45:3e:db:d5:7f:19:52:b3:c3:
7e:ed:ef:59:26:6a:f4:a3:71:48:c8:2a:b4:e1:06:bf:70:2e:
72:89:1e:f7:06:38:97:80:38:0d:68:2b:12:de:01:d3:91:12:
91:a8:9b:2f:a4:88:fd:e0:22:f1:ba:55:c8:80:c4:fc:42:24:
34:ab:0b:ca:94:ef:20:6b:ef:bc:ba:f5:ae:3a:10:7d:2f:95:
ce:27:8b:17:2b:a8:71:9b:06:60:f3:ad:97:39:47:5b:03:e4:
0b:49:b1:8e:43:e6:a5:c8:ec:51:50:6e:c8:0b:28:75:57:e3:
da:4f:5b:0c:b7:8d:4a:2b:48:bf:a2:57:8e:73:64:03:e5:41:
ff:be:b9:42:f0:05:2f:e0:b7:38:e2:ee:0a:4b:0f:d2:cb:eb:
6d:5b:ff:a4:87:8f:27:8f:ac:fa:b9:44:7e:d1:1c:dd:5c:0e:
cf:46:d7:79:7e:c0:a8:87:bb:3b:15:7e:8f:89:09:01:e9:9f:
ca:c8:8e:c7:9d:e5:d6:7e:65:d9:30:83:c1:38:2d:4c:8c:69:
58:00:55:94:50:06:d6:32:30:ea:27:72:2e:18:05:42:9f:bb:
39:76:10:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:30 2026 by rpki-client