Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
File: orYtO_awxSR-3fRJjCzOYMDR5Qg.mft (raw, json)
Hash identifier: 2DTJXcWJWi+i9DpudnH8Wo7ldYZGzp04r7x82O6jvQw=
Subject key identifier: 17:98:E1:0C:4C:C9:F4:71:41:E8:AA:D5:18:8C:32:75:75:2D:41:7A
Authority key identifier: A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
Certificate issuer: /CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Certificate serial: 019DA52FA039DE81D48A3659280E73A7A76F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
Manifest number: 0231
Signing time: Sun 19 Apr 2026 10:00:54 +0000
Manifest this update: Sun 19 Apr 2026 10:00:54 +0000
Manifest next update: Mon 20 Apr 2026 10:00:54 +0000
Files and hashes: 1: kXoK6s5aaaUzOJxxUcmmhqIaSLQ.asa (hash: 59NmHjBSvzipBM//GfVuJezWtnTbIsL21l5xvXSlCcM=)
2: mEVvhwiNz6QqGLc9f-BWMr-sDwM.roa (hash: h1jacdxfF70jEn15fnToAbzAGwIESAy79zZWfqs5+II=)
3: orYtO_awxSR-3fRJjCzOYMDR5Qg.crl (hash: n7kpKWVp3b72x1PYW5JjhOeM5r2FCczjKGonY9qobjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:a0:39:de:81:d4:8a:36:59:28:0e:73:a7:a7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Validity
Not Before: Apr 19 10:00:54 2026 GMT
Not After : Apr 20 10:00:54 2026 GMT
Subject: CN=1798e10c4cc9f47141e8aad5188c3275752d417a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:71:c7:fd:0c:2e:d4:44:f2:7c:87:74:73:
e7:fc:3c:3d:4e:5f:9c:67:99:3a:cc:7c:ab:96:60:
9b:e7:1e:26:26:ba:5e:ef:fe:b2:a5:57:26:28:3d:
bb:4e:39:c4:2d:8e:6e:e2:3e:4e:0c:4c:de:ff:36:
bf:58:6d:2f:d4:d1:c0:91:dd:2f:5c:68:83:96:66:
80:50:63:4c:21:3c:a4:35:c8:e2:8c:08:90:3a:b4:
e0:09:96:ab:e4:84:3b:db:94:04:2c:c6:c6:fd:36:
36:4b:b5:a0:7c:e0:84:73:91:8a:82:ad:9b:ac:dd:
f0:70:f4:81:5e:e8:e2:76:14:86:2f:5a:20:13:63:
aa:99:91:e9:4f:03:bd:44:0f:65:2b:a0:a9:46:bb:
60:4a:86:2f:fc:75:61:37:5b:db:5d:75:8c:20:e9:
74:72:03:22:d9:23:6a:ab:b5:4d:72:87:68:eb:79:
74:0c:6b:c7:a8:c6:81:f8:aa:8e:e4:5f:b2:65:2e:
5e:19:f3:0b:4b:24:d9:20:fd:99:42:36:83:6a:ab:
f2:45:d6:b2:6d:9e:1b:8f:61:ea:01:d6:fc:91:9d:
25:ac:e9:84:4f:f0:25:8a:ed:e9:4c:d6:bf:90:7f:
b1:e6:76:c4:00:76:19:10:35:e8:67:6d:8b:49:05:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:98:E1:0C:4C:C9:F4:71:41:E8:AA:D5:18:8C:32:75:75:2D:41:7A
X509v3 Authority Key Identifier:
keyid:A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:54:9d:e0:68:b9:8e:e2:9d:52:96:0c:3e:74:58:15:a6:07:
9f:b0:63:57:76:7b:b5:8e:cd:f2:28:8b:24:b7:67:ce:79:93:
5c:11:59:54:89:de:0a:86:dc:9c:e8:1a:37:cf:75:49:4b:4b:
37:ce:53:c8:a9:94:c2:4f:20:9b:00:b3:34:8f:8a:a7:82:41:
63:5e:fc:e7:26:90:a2:e7:26:29:89:35:04:74:25:c0:65:39:
b6:d9:ef:e5:b9:2a:75:bb:b9:bb:d8:c8:b2:e6:04:48:6e:9e:
46:4c:bc:40:1f:13:13:34:2f:6a:1d:a5:d0:26:de:5b:2f:eb:
eb:c0:7f:b2:90:67:bb:50:b8:de:7d:d0:b4:5a:23:b9:5d:6a:
6d:5f:8b:8e:fb:1c:4a:2a:10:dd:9c:ac:6a:cb:c4:63:8b:20:
76:35:d8:32:d9:d0:c3:31:af:2b:51:27:4c:f9:20:4f:94:a4:
c4:7e:1f:32:5b:c7:7f:14:3b:c7:18:cd:7c:81:83:24:c7:9c:
6c:4c:7b:97:47:cf:45:1f:15:eb:94:58:17:18:7f:97:2d:3f:
ae:dc:dc:67:a5:9f:b3:52:d7:45:ad:a1:9d:ce:0c:d4:c2:0a:
ef:2f:ea:52:50:39:f9:4e:4a:a7:0e:19:7c:74:af:fe:73:8f:
d6:8d:d0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:13:41 2026 by rpki-client