Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
File: orYtO_awxSR-3fRJjCzOYMDR5Qg.mft (raw, json)
Hash identifier: t2l4UiuQvV74eRCOfpU1LZHujLutpxJPOfRVwszlUV0=
Subject key identifier: FA:7D:6F:C3:B4:DB:1A:BE:E2:FF:07:33:76:5C:CD:55:F1:DD:A2:82
Authority key identifier: A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
Certificate issuer: /CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Certificate serial: 019EC30022EF8BC2A1AA9949283A994BB1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
Manifest number: 02C5
Signing time: Sat 13 Jun 2026 22:00:26 +0000
Manifest this update: Sat 13 Jun 2026 22:00:26 +0000
Manifest next update: Sun 14 Jun 2026 22:00:26 +0000
Files and hashes: 1: kXoK6s5aaaUzOJxxUcmmhqIaSLQ.asa (hash: 59NmHjBSvzipBM//GfVuJezWtnTbIsL21l5xvXSlCcM=)
2: mEVvhwiNz6QqGLc9f-BWMr-sDwM.roa (hash: h1jacdxfF70jEn15fnToAbzAGwIESAy79zZWfqs5+II=)
3: orYtO_awxSR-3fRJjCzOYMDR5Qg.crl (hash: iGPQ8+qRqPq79/P32CtNaLufy0VnFAsvd3Q7DjjR/Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:22:ef:8b:c2:a1:aa:99:49:28:3a:99:4b:b1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Validity
Not Before: Jun 13 22:00:26 2026 GMT
Not After : Jun 14 22:00:26 2026 GMT
Subject: CN=fa7d6fc3b4db1abee2ff0733765ccd55f1dda282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:54:e9:f0:57:28:ac:9b:a1:72:fc:2b:fa:6e:
c2:88:a3:a2:c5:8a:96:ab:59:78:88:fa:07:7e:9c:
82:ff:16:b4:3b:7e:c9:36:a2:b2:e7:ea:49:8b:a1:
df:bf:ba:7b:d2:b1:24:b7:06:90:22:ea:c0:3d:5e:
23:49:43:8d:ce:e2:4b:ed:d7:85:c8:56:28:33:91:
ee:60:b2:ac:f4:44:f2:af:5c:92:b6:e5:2c:fc:a6:
89:6b:77:a4:2c:a6:1d:c8:bd:ec:20:08:b1:3d:0e:
ae:ce:28:4d:f7:47:d7:fa:51:64:0b:5a:9f:4e:25:
5f:3e:93:e5:11:92:ef:24:ac:18:7a:dc:70:d4:26:
52:1b:a0:ea:1b:02:99:9e:d7:59:0d:d2:43:b6:a2:
90:27:6a:3b:b2:af:90:24:ae:5c:33:7a:68:57:7b:
ea:86:09:2f:3c:34:c5:6c:ac:05:63:04:c7:2d:76:
96:6d:42:59:2f:b1:d7:56:4d:61:d2:74:ec:9d:f7:
6a:ab:e6:10:6a:11:6b:30:8e:ab:e9:60:38:67:a1:
7c:fa:43:53:b2:46:78:5f:d9:09:74:b0:2c:1d:72:
ec:06:67:e3:c7:d5:05:16:88:ae:41:34:04:e3:f3:
25:c2:ae:d3:5e:22:fe:81:e9:47:38:85:e8:50:60:
02:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7D:6F:C3:B4:DB:1A:BE:E2:FF:07:33:76:5C:CD:55:F1:DD:A2:82
X509v3 Authority Key Identifier:
keyid:A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:00:ce:d8:ca:a7:47:19:68:ac:69:09:54:32:6a:05:39:e9:
6e:c5:6a:6a:d4:fc:d3:a6:ac:34:d2:79:d4:40:05:ef:06:04:
ea:bf:4f:c4:e5:73:25:a1:98:41:a1:75:04:63:cd:05:21:33:
05:05:1d:a5:c0:55:84:1b:5b:69:23:62:88:d5:1d:ad:43:f2:
e3:87:02:5b:1e:74:74:98:13:dd:9e:ea:c4:5c:e4:44:e7:3d:
66:44:04:0c:c2:ed:a9:c3:31:88:05:b5:2c:e9:ae:99:4b:86:
1e:8f:b6:8c:a2:0d:54:fd:22:88:26:7a:c7:06:0d:69:b8:fb:
dc:c7:81:79:60:62:52:5d:e7:6b:eb:b3:f2:25:8c:32:89:7c:
f8:58:69:b6:78:ad:9b:a2:02:17:66:e5:45:94:52:ad:39:ae:
cd:83:3e:79:09:c4:81:12:ac:75:c2:a4:e8:90:91:fe:33:5a:
53:19:02:3b:c0:4a:fd:a1:ce:ea:05:bf:70:af:be:bb:00:0c:
e4:ee:b4:d3:ed:af:92:a8:ea:f2:2d:56:5b:18:76:7d:5d:4c:
90:1b:f2:90:5c:f7:e8:5c:76:82:dc:c8:45:52:f2:9d:19:a5:
61:36:87:9e:ef:38:b6:dc:8b:9f:ae:40:fc:b3:cc:da:b9:d6:
ca:3c:38:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DACLvi8KhqplJKDqZS7HWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYjYyZDNiZjZiMGM1MjQ3ZWRkZjQ0OThjMmNjZTYwYzBk
MWU1MDgwHhcNMjYwNjEzMjIwMDI2WhcNMjYwNjE0MjIwMDI2WjAzMTEwLwYDVQQD
EyhmYTdkNmZjM2I0ZGIxYWJlZTJmZjA3MzM3NjVjY2Q1NWYxZGRhMjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VTp8FcorJuhcvwr+m7CiKOixYqW
q1l4iPoHfpyC/xa0O37JNqKy5+pJi6Hfv7p70rEktwaQIurAPV4jSUONzuJL7deF
yFYoM5HuYLKs9ETyr1yStuUs/KaJa3ekLKYdyL3sIAixPQ6uzihN90fX+lFkC1qf
TiVfPpPlEZLvJKwYetxw1CZSG6DqGwKZntdZDdJDtqKQJ2o7sq+QJK5cM3poV3vq
hgkvPDTFbKwFYwTHLXaWbUJZL7HXVk1h0nTsnfdqq+YQahFrMI6r6WA4Z6F8+kNT
skZ4X9kJdLAsHXLsBmfjx9UFFoiuQTQE4/Mlwq7TXiL+gelHOIXoUGACKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPp9b8O02xq+4v8HM3ZczVXx3aKCMB8GA1UdIwQY
MBaAFKK2LTv2sMUkft30SYwszmDA0eUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS84M2RjMmQtNTMxMS00NWE2LWEwOGEt
NjJiZjE1YzQ2NzRhLzEvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS84M2RjMmQtNTMxMS00NWE2LWEwOGEtNjJiZjE1YzQ2NzRh
LzEvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQDO2Mqn
RxlorGkJVDJqBTnpbsVqatT806asNNJ51EAF7wYE6r9PxOVzJaGYQaF1BGPNBSEz
BQUdpcBVhBtbaSNiiNUdrUPy44cCWx50dJgT3Z7qxFzkROc9ZkQEDMLtqcMxiAW1
LOmumUuGHo+2jKINVP0iiCZ6xwYNabj73MeBeWBiUl3na+uz8iWMMol8+Fhptnit
m6ICF2blRZRSrTmuzYM+eQnEgRKsdcKk6JCR/jNaUxkCO8BK/aHO6gW/cK++uwAM
5O600+2vkqjq8i1WWxh2fV1MkBvykFz36Fx2gtzIRVLynRmlYTaHnu84ttyLn65A
/LPM2rnWyjw4vw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:35:03 2026 by rpki-client