Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
File: orzYisPgLP-tPADeRrXaM2vWRwI.mft (raw, json)
Hash identifier: oWDtNP0hUwBkEBQe+sEd1jv597ODKpnP6oKl1+XcluM=
Subject key identifier: C3:7C:0A:C7:3D:D9:5E:1B:17:22:28:91:8E:4B:D6:A5:4F:92:07:6F
Authority key identifier: A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02
Certificate issuer: /CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
Certificate serial: 019DA3781635241C947924D7B9FE036E4DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
Manifest number: 15D5
Signing time: Sun 19 Apr 2026 02:00:49 +0000
Manifest this update: Sun 19 Apr 2026 02:00:49 +0000
Manifest next update: Mon 20 Apr 2026 02:00:49 +0000
Files and hashes: 1: orzYisPgLP-tPADeRrXaM2vWRwI.crl (hash: Y+NnorgWCP2cKNYYjBW9ZcgCpdG+Ovm66bg4iJongyU=)
2: qUQtHHzlZlnAdpcBQCFJU2QvkX0.roa (hash: qu1JzAxBAaT1Zxg22q0d5br8OX9u/IStZcSKhmMoN5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:16:35:24:1c:94:79:24:d7:b9:fe:03:6e:4d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
Validity
Not Before: Apr 19 02:00:49 2026 GMT
Not After : Apr 20 02:00:49 2026 GMT
Subject: CN=c37c0ac73dd95e1b172228918e4bd6a54f92076f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e7:25:e9:51:c6:52:54:e2:8e:34:21:0a:a0:
ff:79:c1:7b:8b:4c:5e:64:ff:f8:df:6c:d6:ce:85:
f0:92:ee:fa:31:be:ce:7c:51:63:87:f8:dd:aa:b4:
d0:f0:8c:1b:da:e8:72:21:12:06:9b:4e:b3:ee:66:
e2:8a:f6:e1:94:55:7c:3b:dc:75:34:ca:ff:0d:02:
bd:d2:03:31:29:3f:7b:41:83:e3:59:70:8f:da:1e:
aa:62:b0:c2:b7:87:d3:b9:f0:45:46:0c:23:38:ae:
c1:5d:87:d5:87:3c:7e:7b:fd:bd:6c:9b:d0:9e:68:
0f:1c:f1:1f:32:0e:25:a7:8c:e7:ce:e4:de:88:e7:
88:fe:ab:49:8f:9e:55:3c:f1:05:c3:75:31:20:61:
1e:74:64:35:b3:76:52:9a:a3:6d:d0:0c:8e:1b:fb:
cd:73:78:cf:07:fc:47:bb:91:46:cd:75:0b:59:f6:
b2:62:74:04:6f:30:3f:6b:43:0d:f1:7e:8a:f0:c6:
29:c1:52:94:83:f7:a2:26:82:aa:57:2b:42:d4:7b:
0b:98:1f:82:d5:ee:e2:5e:3e:39:97:b1:fc:52:a4:
9c:c6:b8:6d:d3:70:78:dd:be:7c:d6:f6:07:19:f3:
e9:e0:b4:fa:28:44:75:2f:15:e8:8b:ea:30:11:5e:
d9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7C:0A:C7:3D:D9:5E:1B:17:22:28:91:8E:4B:D6:A5:4F:92:07:6F
X509v3 Authority Key Identifier:
keyid:A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:08:7d:7f:62:19:ef:2a:35:91:9b:70:33:1e:3a:f6:a6:1f:
07:f7:15:73:31:05:a6:17:32:03:05:b3:f5:e1:cf:42:77:46:
c7:c1:8c:46:6d:4c:3b:45:c6:72:ba:12:60:74:04:a0:f3:a4:
e4:4d:90:b2:70:eb:4b:a3:e8:a8:5b:2b:35:14:d8:2a:fb:8c:
5f:12:eb:0a:fc:7a:f5:ce:43:07:9f:26:48:c1:7f:0c:e8:6b:
cc:0c:ec:93:e2:63:6e:33:9a:62:8d:ad:70:d7:e5:57:77:d3:
c8:16:0c:7e:db:a2:16:b7:e3:80:58:1f:57:95:59:4a:9b:5f:
f2:fe:11:b3:28:2d:ae:ef:c6:b7:e5:65:85:dc:04:b4:39:c9:
a8:7c:88:31:2d:a4:54:4f:93:10:09:c5:ce:e2:43:4c:1d:e4:
78:22:d4:37:72:b5:a6:2e:1e:b8:c3:81:5c:e0:98:bf:d2:b8:
2d:07:7f:95:08:e0:8b:dc:47:6a:48:38:52:a4:41:70:63:a3:
9c:18:ee:b7:ea:88:6b:cd:be:93:cf:be:58:2d:0d:2c:61:22:
a2:d4:10:37:93:4e:5b:b3:12:53:b6:70:91:bf:c0:bd:27:a6:
61:8c:dc:87:cd:bd:54:a3:48:ef:d6:de:00:95:18:5c:1c:fa:
f2:27:24:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:34 2026 by rpki-client