Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
File: ORhwDqnHvi31aIr_vt2KTlU5LeY.mft (raw, json)
Hash identifier: l9f+8a72R4BpTFSo43egsbiy3lL37be2v4lynJxtY4E=
Subject key identifier: 14:F1:DC:66:46:9F:B4:D1:00:0F:94:CE:1B:5E:70:B8:B5:F5:22:9F
Authority key identifier: 39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
Certificate issuer: /CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Certificate serial: 019D99D070D691DB46AC19AE6C22713C044D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
Manifest number: 09AA
Signing time: Fri 17 Apr 2026 05:01:07 +0000
Manifest this update: Fri 17 Apr 2026 05:01:07 +0000
Manifest next update: Sat 18 Apr 2026 05:01:07 +0000
Files and hashes: 1: DKhVHpk7iZz_01UXRjCn1_OlprQ.roa (hash: wsHOQQguXdPejumCbMkMQ0ogcO61399D5EWcawmOeUw=)
2: ORhwDqnHvi31aIr_vt2KTlU5LeY.crl (hash: TgJMQLhU3ymf7LsNzeko9n64cSKQYi4Cr08H5UJ123E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:70:d6:91:db:46:ac:19:ae:6c:22:71:3c:04:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Validity
Not Before: Apr 17 05:01:07 2026 GMT
Not After : Apr 18 05:01:07 2026 GMT
Subject: CN=14f1dc66469fb4d1000f94ce1b5e70b8b5f5229f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:37:85:96:6b:46:d4:a9:f7:a6:9f:34:3e:
1b:50:19:38:49:d1:22:f7:12:1a:8e:5f:b8:85:4d:
df:e2:2e:98:d4:d0:5b:05:4d:97:63:af:a2:fc:0f:
34:00:b4:56:2e:ad:b2:71:1d:2f:08:60:39:9b:1e:
96:35:3d:11:1f:34:8b:b0:26:f2:9e:d6:ee:73:73:
71:ad:63:ec:d6:f0:e7:74:cc:e9:5a:c3:8c:6b:59:
33:4f:7f:57:41:ee:24:dd:ea:d2:9b:3a:91:04:94:
31:59:eb:a9:6d:6a:9f:71:60:de:ef:4c:7a:cd:44:
ea:30:5c:42:25:28:c5:36:18:c2:44:51:21:0f:eb:
57:de:96:b3:df:83:e2:e8:6b:e6:28:0c:25:d3:ba:
3a:a6:8f:11:f0:4f:64:a2:1e:f2:b7:1d:f7:08:67:
29:26:73:41:76:57:c7:91:1f:74:30:ea:ff:8e:5a:
84:cd:df:4f:6c:8f:8d:e7:48:fb:29:bf:8d:91:a3:
ff:b0:44:ba:fb:34:20:91:3b:6c:9a:92:9f:00:f8:
32:c7:c5:db:a5:93:a9:37:c1:02:6d:3d:b6:b9:c0:
8a:fc:57:8f:a2:71:06:f4:d8:c6:67:ab:43:40:6d:
51:89:f8:21:17:44:23:dc:7d:b1:81:c1:b4:ac:b4:
4e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F1:DC:66:46:9F:B4:D1:00:0F:94:CE:1B:5E:70:B8:B5:F5:22:9F
X509v3 Authority Key Identifier:
keyid:39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ef:31:4d:a0:bd:6b:69:e3:cd:4d:76:06:cb:c2:8d:26:de:
37:13:fb:3e:41:21:23:6e:c9:fa:a7:11:00:59:a8:72:75:1d:
c1:5d:7f:d9:2d:b6:af:a0:6f:c1:b0:a9:83:85:26:2b:2c:2c:
2d:aa:3d:87:ec:ea:b0:ea:9e:19:66:fa:ce:e4:25:3e:7d:68:
22:8e:be:21:7f:ff:4c:56:26:95:32:cd:fa:4d:01:fa:20:6b:
3a:32:a2:92:12:87:b8:f0:64:db:f1:70:35:2c:22:9c:75:2f:
63:57:0b:75:0e:c9:79:9c:40:e9:db:06:17:dc:e9:d5:c6:29:
bd:67:ca:2e:e5:81:ed:38:64:4e:fe:ec:5d:5e:55:9d:8b:27:
01:61:a6:09:4a:9e:22:38:c4:30:ca:08:9a:47:f8:8a:75:d0:
3c:a8:3d:c4:b3:0a:14:55:35:8a:f7:f0:e2:41:99:4a:15:49:
e9:38:28:24:a4:c9:a1:3e:73:b7:b6:05:63:01:80:69:b2:c2:
dc:33:e0:2e:84:11:db:ea:da:75:1e:15:55:3a:6d:a1:9a:fe:
cb:59:84:46:88:f8:a2:56:c3:20:6a:d9:d4:b3:3e:5d:b2:dc:
db:20:2c:61:73:1e:0c:92:62:54:65:6a:c2:ba:5c:29:2f:10:
0d:b2:9c:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0HDWkdtGrBmubCJxPARNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MTg3MDBlYTljN2JlMmRmNTY4OGFmZmJlZGQ4YTRlNTUz
OTJkZTYwHhcNMjYwNDE3MDUwMTA3WhcNMjYwNDE4MDUwMTA3WjAzMTEwLwYDVQQD
EygxNGYxZGM2NjQ2OWZiNGQxMDAwZjk0Y2UxYjVlNzBiOGI1ZjUyMjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7Q3hZZrRtSp96afND4bUBk4SdEi
9xIajl+4hU3f4i6Y1NBbBU2XY6+i/A80ALRWLq2ycR0vCGA5mx6WNT0RHzSLsCby
ntbuc3NxrWPs1vDndMzpWsOMa1kzT39XQe4k3erSmzqRBJQxWeupbWqfcWDe70x6
zUTqMFxCJSjFNhjCRFEhD+tX3paz34Pi6GvmKAwl07o6po8R8E9koh7ytx33CGcp
JnNBdlfHkR90MOr/jlqEzd9PbI+N50j7Kb+NkaP/sES6+zQgkTtsmpKfAPgyx8Xb
pZOpN8ECbT22ucCK/FePonEG9NjGZ6tDQG1RifghF0Qj3H2xgcG0rLRO4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTx3GZGn7TRAA+UzhtecLi19SKfMB8GA1UdIwQY
MBaAFDkYcA6px74t9WiK/77dik5VOS3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1Jod0Rxbkh2aTMxYUlyX3Z0MktUbFU1TGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85ZDQyNzQtZmIxMC00MmE0LWJmOWIt
MWM4YmUyNWViNjg2LzEvT1Jod0Rxbkh2aTMxYUlyX3Z0MktUbFU1TGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85ZDQyNzQtZmIxMC00MmE0LWJmOWItMWM4YmUyNWViNjg2
LzEvT1Jod0Rxbkh2aTMxYUlyX3Z0MktUbFU1TGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvu8xTaC9
a2njzU12BsvCjSbeNxP7PkEhI27J+qcRAFmocnUdwV1/2S22r6BvwbCpg4UmKyws
Lao9h+zqsOqeGWb6zuQlPn1oIo6+IX//TFYmlTLN+k0B+iBrOjKikhKHuPBk2/Fw
NSwinHUvY1cLdQ7JeZxA6dsGF9zp1cYpvWfKLuWB7ThkTv7sXV5VnYsnAWGmCUqe
IjjEMMoImkf4inXQPKg9xLMKFFU1ivfw4kGZShVJ6TgoJKTJoT5zt7YFYwGAabLC
3DPgLoQR2+radR4VVTptoZr+y1mERoj4olbDIGrZ1LM+XbLc2yAsYXMeDJJiVGVq
wrpcKS8QDbKc2A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:26 2026 by rpki-client