Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
File: ORhwDqnHvi31aIr_vt2KTlU5LeY.mft (raw, json)
Hash identifier: VzxpgF+sFjSlXPBzjGCdS5NGCelFJbohOpLvwB73OzA=
Subject key identifier: 55:84:68:11:56:BB:E8:B8:E4:E2:E5:73:F2:00:23:7A:77:7E:87:10
Authority key identifier: 39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
Certificate issuer: /CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Certificate serial: 019CAA5839D02319290A1EF8249B2A3C1746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
Manifest number: 092E
Signing time: Sun 01 Mar 2026 17:00:34 +0000
Manifest this update: Sun 01 Mar 2026 17:00:34 +0000
Manifest next update: Mon 02 Mar 2026 17:00:34 +0000
Files and hashes: 1: DKhVHpk7iZz_01UXRjCn1_OlprQ.roa (hash: wsHOQQguXdPejumCbMkMQ0ogcO61399D5EWcawmOeUw=)
2: ORhwDqnHvi31aIr_vt2KTlU5LeY.crl (hash: k5WK2Ao5iYxZdfgrXp8IDZVTzb120Tt7V5NyvQjTDq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:39:d0:23:19:29:0a:1e:f8:24:9b:2a:3c:17:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Validity
Not Before: Mar 1 17:00:34 2026 GMT
Not After : Mar 2 17:00:34 2026 GMT
Subject: CN=5584681156bbe8b8e4e2e573f200237a777e8710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:24:ec:e5:c3:b9:cd:5b:13:ce:30:a6:80:
42:22:00:fc:70:42:6e:3d:e9:52:95:21:59:87:1f:
2d:9d:74:c3:3d:7d:da:c8:9d:8d:85:c1:9e:a9:7b:
6e:89:57:41:32:4c:dd:af:13:2e:84:bb:cf:37:a7:
9b:c6:80:1f:5e:b2:e7:bf:43:25:97:22:6e:79:78:
c7:02:3e:cb:32:5a:d3:96:20:82:00:ba:e0:ef:a6:
7c:66:d4:8f:56:aa:51:2b:b0:46:8b:0b:a0:d9:cd:
2d:51:d6:cf:c6:76:df:90:bc:72:a5:c4:29:c6:e7:
81:96:de:bb:87:ee:41:b0:6d:09:9e:cf:86:49:49:
0f:5e:aa:10:ad:c0:42:2e:6e:b7:40:4c:dc:b6:33:
4d:ae:02:35:36:93:00:48:52:3b:e8:e4:d6:8f:2e:
62:74:2a:aa:da:f1:a3:5d:43:d2:8f:a5:50:49:8d:
0f:24:aa:cb:fb:1e:3b:87:77:40:a7:42:4b:78:5d:
10:ea:b9:93:0a:bb:10:38:58:1d:78:97:8d:c9:de:
05:2e:61:65:f5:0c:19:ad:71:b6:d4:60:15:05:cd:
e6:cb:a7:c8:4a:ea:d3:a3:a4:ba:a8:87:bc:c2:99:
a4:ba:ad:fc:90:94:56:37:79:2f:da:ac:e9:41:df:
0a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:84:68:11:56:BB:E8:B8:E4:E2:E5:73:F2:00:23:7A:77:7E:87:10
X509v3 Authority Key Identifier:
keyid:39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d6:05:74:47:de:eb:42:52:fe:74:35:c0:55:5b:0b:2e:a1:
f9:9b:ce:3b:00:b5:48:06:1d:11:ed:87:c3:a6:8c:a4:8f:d5:
04:25:48:bc:1b:e8:ce:5c:6c:20:60:6b:f7:03:07:62:23:d2:
a0:a7:dc:e5:7d:51:c9:95:62:f3:2e:54:73:3e:25:be:d0:d4:
85:e6:56:cb:ff:a5:ee:a8:e5:0f:8a:37:a9:4a:c8:0a:cb:a4:
ea:84:2b:db:e2:b7:82:14:77:9b:eb:ba:90:9d:ec:81:f2:7b:
91:6f:43:29:c2:53:f5:89:ef:13:b2:45:25:9c:9e:ee:62:84:
55:13:9e:e4:b9:f6:25:6c:e1:f7:1d:51:58:ad:4f:14:38:f6:
03:3d:10:a7:be:b1:82:c8:bc:e8:8e:65:fe:02:37:bf:c3:7f:
48:c3:5a:4d:a1:4a:1c:75:88:f4:c7:b0:32:3f:2b:07:80:47:
8d:9d:c4:62:fd:83:72:5c:e0:71:25:4d:08:6c:f5:e2:90:86:
96:d9:61:c4:2d:15:4d:fd:a0:90:d3:ef:94:c6:8b:1f:a3:d6:
18:4b:e9:4c:c1:cb:a3:0c:54:95:6c:bb:2d:60:21:17:5c:d0:
b1:aa:4b:f3:c7:3f:b3:77:fc:e4:d9:e6:77:23:ec:7c:d9:72:
9c:ad:66:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:37 2026 by rpki-client