Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
File: orzYisPgLP-tPADeRrXaM2vWRwI.mft (raw, json)
Hash identifier: NwH6Ealawd8AlscLl2p8xPm2dsge8OwaGIIl/QHV9ig=
Subject key identifier: C4:AB:C2:E6:B4:08:82:0B:41:60:04:06:4D:80:40:75:76:65:17:0D
Authority key identifier: A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02
Certificate issuer: /CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
Certificate serial: 019CAA588AFE2C2E788D12B4B62EBE145064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
Manifest number: 1554
Signing time: Sun 01 Mar 2026 17:00:55 +0000
Manifest this update: Sun 01 Mar 2026 17:00:55 +0000
Manifest next update: Mon 02 Mar 2026 17:00:55 +0000
Files and hashes: 1: orzYisPgLP-tPADeRrXaM2vWRwI.crl (hash: O9up+FKoylARhqVY3jmaXo7FVQgAXI41DzDSL2BrYZc=)
2: qUQtHHzlZlnAdpcBQCFJU2QvkX0.roa (hash: qu1JzAxBAaT1Zxg22q0d5br8OX9u/IStZcSKhmMoN5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:8a:fe:2c:2e:78:8d:12:b4:b6:2e:be:14:50:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2bcd88ac3e02cffad3c00de46b5da336bd64702
Validity
Not Before: Mar 1 17:00:55 2026 GMT
Not After : Mar 2 17:00:55 2026 GMT
Subject: CN=c4abc2e6b408820b416004064d8040757665170d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:f8:29:2f:07:b6:04:66:f2:2e:2a:26:23:
ee:e5:5e:77:c3:51:38:e0:0c:6f:65:d7:81:62:0c:
fe:6d:93:bc:84:fc:36:dd:1a:82:98:d8:3d:a5:c0:
0e:01:79:fd:4c:3d:f7:4f:45:42:b4:6c:0d:21:cf:
1b:ce:5c:78:f0:29:53:d6:1f:aa:bc:9e:73:69:ef:
d2:17:f6:25:ad:0a:9a:c0:c6:c5:6e:c3:ac:08:11:
34:60:25:33:0d:75:a0:71:de:9f:1d:42:43:f3:f1:
b4:0d:b5:cf:55:5f:47:c5:41:3b:5f:60:58:d1:8a:
2c:8a:10:21:95:21:e9:03:34:05:3c:33:93:f1:e7:
42:b3:9d:40:2d:39:b0:a6:0b:1b:79:82:49:ac:6e:
b4:72:2f:0b:68:5f:8a:bc:16:00:1a:d3:f2:6f:d4:
35:f0:8d:5a:62:ab:cb:fd:7e:54:a0:72:a0:92:49:
95:d4:9c:c5:e5:d2:3a:10:4b:75:3e:59:d5:ef:52:
29:4b:3b:ee:a6:12:ff:17:b3:4f:8c:22:c3:8d:23:
3d:cf:93:36:77:99:d8:75:c1:bd:a4:33:d4:e5:d4:
bc:90:63:f8:30:77:20:c8:a5:ac:38:3b:e6:37:d6:
eb:12:53:f5:22:04:71:bb:00:47:a5:80:14:c9:8f:
62:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AB:C2:E6:B4:08:82:0B:41:60:04:06:4D:80:40:75:76:65:17:0D
X509v3 Authority Key Identifier:
keyid:A2:BC:D8:8A:C3:E0:2C:FF:AD:3C:00:DE:46:B5:DA:33:6B:D6:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orzYisPgLP-tPADeRrXaM2vWRwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cf4db5-fb29-4b2a-a215-aab862861a09/1/orzYisPgLP-tPADeRrXaM2vWRwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:40:6a:da:b5:d7:8a:cf:3a:bf:bd:59:9a:d8:0b:ef:45:84:
5a:13:f4:b5:7f:d7:74:ee:fd:7a:af:b9:7e:d5:63:53:94:2b:
cf:72:9b:11:5f:0f:17:5a:96:eb:72:e4:43:19:d5:f1:38:38:
b9:c5:52:f9:6e:d7:aa:b3:ce:c5:3d:94:d5:2d:14:6d:b2:70:
86:2e:51:4b:b4:d8:f6:6f:d9:31:21:c0:f3:d0:c2:19:a6:d2:
bf:bd:51:f7:98:93:a9:82:89:0d:6a:7b:e4:41:85:e8:81:4a:
25:f1:72:0a:3e:28:d6:85:40:86:9c:2e:de:26:ef:91:59:a6:
29:55:da:d6:80:e9:8e:88:bc:57:5d:ad:59:d7:ba:25:99:8f:
27:4b:a0:d3:fc:d7:7c:59:7f:09:9e:8e:a4:b1:e0:58:cf:02:
b9:cc:ce:2a:68:d6:e0:d4:dd:a3:2a:70:cc:cc:f5:ce:6e:f0:
15:fb:e2:a8:49:fd:ba:91:4e:a0:21:8b:61:0e:ba:04:82:4e:
97:44:fb:0c:d2:06:c2:d6:bf:ad:c9:7a:b6:76:c4:82:1d:db:
34:a8:1f:87:9e:14:c9:f9:1d:32:da:95:8c:60:ee:27:ee:59:
ab:ba:83:95:dc:88:f2:aa:35:20:b2:82:e8:93:3c:03:14:34:
aa:b4:a0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:08 2026 by rpki-client