Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
File: orYtO_awxSR-3fRJjCzOYMDR5Qg.mft (raw, json)
Hash identifier: CzZ9T5p42vunuN0YG7xKoEa1rnc0YbiBaja73nxqSLA=
Subject key identifier: 78:87:4A:FB:58:96:63:1D:0A:2F:B9:BF:AB:6E:32:5A:6E:D5:9F:A2
Authority key identifier: A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
Certificate issuer: /CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Certificate serial: 019CA832DC68FA4530BE3285E15C8C1FFA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
Manifest number: 01AE
Signing time: Sun 01 Mar 2026 07:00:31 +0000
Manifest this update: Sun 01 Mar 2026 07:00:31 +0000
Manifest next update: Mon 02 Mar 2026 07:00:31 +0000
Files and hashes: 1: kXoK6s5aaaUzOJxxUcmmhqIaSLQ.asa (hash: 59NmHjBSvzipBM//GfVuJezWtnTbIsL21l5xvXSlCcM=)
2: mEVvhwiNz6QqGLc9f-BWMr-sDwM.roa (hash: h1jacdxfF70jEn15fnToAbzAGwIESAy79zZWfqs5+II=)
3: orYtO_awxSR-3fRJjCzOYMDR5Qg.crl (hash: 1LDkpC1o2liOy3RWM5IrQEeJsRnNdhYDGGz5DJJTXCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:32:dc:68:fa:45:30:be:32:85:e1:5c:8c:1f:fa:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Validity
Not Before: Mar 1 07:00:31 2026 GMT
Not After : Mar 2 07:00:31 2026 GMT
Subject: CN=78874afb5896631d0a2fb9bfab6e325a6ed59fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:27:99:53:de:0c:cc:34:b4:67:aa:eb:4f:8e:
3b:4c:2b:f6:94:05:cd:0c:66:ae:ec:87:e0:70:b3:
28:9a:59:5b:79:ab:9b:0a:41:9f:89:ae:2f:16:80:
82:78:7c:87:bf:81:26:36:e9:ae:ee:76:b5:23:f2:
fb:42:87:06:8b:c6:b5:0b:2c:40:91:9e:84:e2:f9:
38:96:6f:55:e5:42:5b:6c:00:d3:fc:5a:12:a6:e6:
af:bf:e5:bb:c9:cd:ae:91:03:f3:98:1b:c5:a9:a7:
78:50:32:d0:72:40:b4:20:09:ea:88:e1:a8:a1:c4:
81:2b:8a:af:3a:03:9d:17:81:33:03:90:6a:01:ce:
93:c6:ea:d6:fe:01:a0:df:ba:ad:79:4d:87:fd:4c:
db:73:88:d0:88:94:47:8c:51:0e:e0:30:bb:94:da:
14:92:17:ab:13:b6:b3:95:82:cf:90:cb:e6:a7:19:
46:93:db:07:23:ca:92:c7:4c:8c:66:bf:16:ca:b6:
9a:74:31:ab:e9:35:bb:95:52:92:ae:c9:40:86:5c:
6e:0d:ec:27:c6:de:ec:68:32:aa:3b:14:01:ce:c4:
00:2b:00:75:eb:3c:1e:43:d7:27:5b:aa:f5:04:3a:
4e:af:2d:fa:58:26:d5:cf:44:7d:79:e8:97:90:17:
ab:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:87:4A:FB:58:96:63:1D:0A:2F:B9:BF:AB:6E:32:5A:6E:D5:9F:A2
X509v3 Authority Key Identifier:
keyid:A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:21:68:a3:40:fe:74:e6:2b:bc:c2:bf:a0:eb:3f:3a:9a:62:
a8:4e:cf:98:a6:da:a6:74:dc:5f:1d:13:bc:77:23:d9:63:30:
e2:57:91:51:50:5b:e0:00:b3:49:3a:6a:1c:28:0f:99:0f:97:
ba:60:b5:c5:b8:f3:5a:cc:22:73:cc:70:a2:38:ad:39:f2:3d:
f7:90:c2:c8:f2:99:b9:33:f1:34:4a:88:99:eb:56:25:ac:50:
59:50:af:21:bb:3e:b2:08:bd:12:b0:bf:82:7c:64:18:54:99:
4d:8c:e7:12:04:21:f2:c6:c0:ec:de:07:4d:dc:6b:e0:30:c1:
97:cc:a8:e6:54:40:a2:2b:af:83:4c:bf:b8:2e:5d:5b:59:47:
d5:bc:84:6e:2f:db:89:7d:35:12:1e:dd:87:f3:b9:34:39:89:
76:89:46:51:39:02:3f:41:bb:61:7d:4c:db:58:f2:55:de:91:
57:69:4a:a9:98:ec:50:19:34:23:12:82:13:4c:aa:33:f8:62:
6d:5c:af:5d:c0:fc:9a:01:ea:83:63:58:81:2c:eb:82:c5:5a:
96:aa:74:a9:ea:18:7d:37:6e:b9:d2:bc:d5:ae:dd:c0:b8:c6:
58:78:61:54:d7:e3:27:77:20:d3:56:02:1b:51:3a:1b:fd:b3:
7c:88:b6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:52:17 2026 by rpki-client