Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
File: orYtO_awxSR-3fRJjCzOYMDR5Qg.mft (raw, json)
Hash identifier: pRL6ipDKcbe8GB9f/ccsEMBclsAr05XMtfZ4mbeyDIk=
Subject key identifier: 0D:B3:95:13:C5:59:20:96:A7:0D:DA:C3:0C:25:7A:AB:19:A8:03:78
Authority key identifier: A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
Certificate issuer: /CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Certificate serial: 01A0E9645D4FDF9C51D719AE676BA52DEBEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
Manifest number: 03E2
Signing time: Mon 28 Sep 2026 19:01:03 +0000
Manifest this update: Mon 28 Sep 2026 19:01:03 +0000
Manifest next update: Tue 29 Sep 2026 19:01:03 +0000
Files and hashes: 1: kXoK6s5aaaUzOJxxUcmmhqIaSLQ.asa (hash: 59NmHjBSvzipBM//GfVuJezWtnTbIsL21l5xvXSlCcM=)
2: mEVvhwiNz6QqGLc9f-BWMr-sDwM.roa (hash: h1jacdxfF70jEn15fnToAbzAGwIESAy79zZWfqs5+II=)
3: orYtO_awxSR-3fRJjCzOYMDR5Qg.crl (hash: TfsmKaRfjIZkx6Vzvw4Ec02Mv++wLxUvfdalzHwKLzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:64:5d:4f:df:9c:51:d7:19:ae:67:6b:a5:2d:eb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Validity
Not Before: Sep 28 19:01:03 2026 GMT
Not After : Sep 29 19:01:03 2026 GMT
Subject: CN=0db39513c5592096a70ddac30c257aab19a80378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:7c:ed:24:88:43:c2:0b:93:80:ce:54:8e:
01:c1:c3:ca:79:ce:d4:45:1b:d7:6c:fd:16:2a:59:
e3:99:14:db:14:68:40:0a:12:67:47:75:90:b4:ee:
ab:95:f7:06:e8:d0:36:57:58:0e:c0:64:16:f2:8c:
fd:39:33:88:3d:51:c7:76:a1:ee:64:44:d1:f2:66:
02:ce:57:3e:cd:f8:ae:cd:d0:9d:28:0b:40:85:bd:
dc:5b:bf:04:10:27:d2:a5:03:60:c1:6b:f0:1a:87:
00:8b:59:f5:7c:ff:b1:d7:00:f3:75:a3:c0:d5:44:
c3:72:25:4f:fb:33:e7:ef:ec:3f:1c:6b:f1:4e:4d:
3c:16:47:10:2a:0d:ef:b5:ef:a2:0c:bc:d9:c1:a4:
e7:23:91:d9:b8:e3:a2:ea:3c:3f:85:90:b5:25:dd:
37:25:da:8d:62:34:4d:25:6d:3b:7c:92:79:58:fd:
60:62:e1:4e:fa:8f:c8:07:72:4d:30:58:c9:20:d8:
cb:dc:93:58:77:c8:a5:a3:39:c4:79:ad:e9:cb:2f:
df:5a:0f:e3:ff:77:59:d1:33:01:55:87:f7:b3:c5:
f7:b9:80:a2:22:c9:9b:32:0c:75:0e:59:08:fc:49:
bc:31:5c:ca:4b:07:36:48:5e:cc:d3:3f:24:8d:2c:
13:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B3:95:13:C5:59:20:96:A7:0D:DA:C3:0C:25:7A:AB:19:A8:03:78
X509v3 Authority Key Identifier:
keyid:A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c9:7a:3a:0f:e6:6e:62:c7:15:89:e5:1c:cb:ec:9a:07:d2:
1b:2d:10:b4:58:8b:03:88:50:fc:61:09:f7:1c:0e:24:e8:90:
fe:e1:22:bd:8b:bf:ee:3a:e4:f3:bb:4e:f7:3b:75:11:d0:44:
a7:24:8f:85:1e:4c:a2:9b:be:f5:3f:e1:e0:a8:fe:08:8e:57:
80:4e:e3:f3:43:ad:cd:eb:73:f3:9c:f8:73:d1:8e:bc:77:13:
cb:f2:89:cb:17:3b:06:98:e4:19:ba:1d:a8:09:8d:25:37:b4:
62:7d:90:b1:b0:c9:df:95:fb:11:e6:06:be:c8:50:cb:d6:d1:
a7:a9:66:61:a7:67:84:da:f5:7d:f3:ec:c2:43:50:fd:b3:32:
d3:f4:2b:0b:24:9e:6b:86:5c:7e:1e:ce:2f:d6:78:c9:c4:3d:
59:94:a6:e8:da:ed:8f:15:0b:71:00:4c:7f:71:44:18:36:d8:
de:8e:81:0d:6e:3f:44:93:dd:69:a0:a5:f8:39:80:90:57:ba:
ef:44:de:b1:1d:2f:73:55:ac:61:87:ef:d5:03:0e:3b:54:1d:
85:07:e0:18:43:d4:b3:b5:38:7e:76:83:f9:85:a5:e5:24:5b:
83:14:b7:c0:7a:13:93:d5:31:f5:3a:13:9f:64:79:c2:3c:a3:
8f:21:96:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpZF1P35xR1xmuZ2ulLevuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYjYyZDNiZjZiMGM1MjQ3ZWRkZjQ0OThjMmNjZTYwYzBk
MWU1MDgwHhcNMjYwOTI4MTkwMTAzWhcNMjYwOTI5MTkwMTAzWjAzMTEwLwYDVQQD
EygwZGIzOTUxM2M1NTkyMDk2YTcwZGRhYzMwYzI1N2FhYjE5YTgwMzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDl87SSIQ8ILk4DOVI4BwcPKec7U
RRvXbP0WKlnjmRTbFGhAChJnR3WQtO6rlfcG6NA2V1gOwGQW8oz9OTOIPVHHdqHu
ZETR8mYCzlc+zfiuzdCdKAtAhb3cW78EECfSpQNgwWvwGocAi1n1fP+x1wDzdaPA
1UTDciVP+zPn7+w/HGvxTk08FkcQKg3vte+iDLzZwaTnI5HZuOOi6jw/hZC1Jd03
JdqNYjRNJW07fJJ5WP1gYuFO+o/IB3JNMFjJINjL3JNYd8iloznEea3pyy/fWg/j
/3dZ0TMBVYf3s8X3uYCiIsmbMgx1DlkI/Em8MVzKSwc2SF7M0z8kjSwT8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2zlRPFWSCWpw3awwwleqsZqAN4MB8GA1UdIwQY
MBaAFKK2LTv2sMUkft30SYwszmDA0eUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS84M2RjMmQtNTMxMS00NWE2LWEwOGEt
NjJiZjE1YzQ2NzRhLzEvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS84M2RjMmQtNTMxMS00NWE2LWEwOGEtNjJiZjE1YzQ2NzRh
LzEvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMl6Og/m
bmLHFYnlHMvsmgfSGy0QtFiLA4hQ/GEJ9xwOJOiQ/uEivYu/7jrk87tO9zt1EdBE
pySPhR5Mopu+9T/h4Kj+CI5XgE7j80Otzetz85z4c9GOvHcTy/KJyxc7BpjkGbod
qAmNJTe0Yn2QsbDJ35X7EeYGvshQy9bRp6lmYadnhNr1ffPswkNQ/bMy0/QrCySe
a4Zcfh7OL9Z4ycQ9WZSm6NrtjxULcQBMf3FEGDbY3o6BDW4/RJPdaaCl+DmAkFe6
70TesR0vc1WsYYfv1QMOO1QdhQfgGEPUs7U4fnaD+YWl5SRbgxS3wHoTk9Ux9ToT
n2R5wjyjjyGW1g==
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:42:23 2026 by rpki-client