Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
File: ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json)
Hash identifier: 0jxXiZH5zcD+p4zjwQjx7rq2wol3YApMJJ+pg3CQnNU=
Subject key identifier: 10:BA:DF:93:C6:17:4F:A0:45:60:9C:21:1F:F0:92:AB:08:23:1B:02
Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
Certificate issuer: /CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Certificate serial: 019CAA587467CAF4E1CC88A9ACF1EC3BB5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
Manifest number: 17D8
Signing time: Sun 01 Mar 2026 17:00:49 +0000
Manifest this update: Sun 01 Mar 2026 17:00:49 +0000
Manifest next update: Mon 02 Mar 2026 17:00:49 +0000
Files and hashes: 1: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: e7PcRFfzlIsdKdE27rPkd4rNBg0LyuS8osAjIhEmIhA=)
2: bIXByjX6LuW26aekk-7LgPK4WBo.roa (hash: YUnrsrT600MTRy40cCZkhQACX77mVDjnM+ubjSZDc0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:74:67:ca:f4:e1:cc:88:a9:ac:f1:ec:3b:b5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Validity
Not Before: Mar 1 17:00:49 2026 GMT
Not After : Mar 2 17:00:49 2026 GMT
Subject: CN=10badf93c6174fa045609c211ff092ab08231b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:eb:d0:ee:15:4f:74:54:e8:77:ad:00:5a:
2f:a3:31:39:b2:dd:bc:c9:75:62:1b:5e:de:c5:95:
b5:54:1b:65:8e:87:dc:03:92:19:b9:fe:3b:ed:97:
02:37:64:43:be:3b:5a:3c:58:ad:4f:c8:5f:be:fb:
e4:41:52:d8:bb:fd:da:7e:35:cc:c3:d1:c2:a3:f1:
fb:18:4b:6a:12:32:59:41:16:2b:6d:8b:30:9f:01:
04:dc:7f:0c:0d:25:77:a3:53:60:b5:bb:69:b0:c8:
2f:19:c9:d5:6b:1f:e1:e0:7b:1f:c3:53:f0:0c:54:
86:18:7e:7b:9f:68:4d:67:41:f5:f9:6a:ab:f6:65:
c3:28:64:d6:50:ec:dc:c2:4f:2c:59:e4:35:aa:67:
11:1b:3c:e0:0a:08:b7:34:1c:64:63:9e:36:77:71:
c6:eb:ce:9d:51:6d:d3:36:40:9a:f9:4a:fa:d3:e6:
4d:ba:2a:d6:6d:9b:81:a0:6a:84:ef:de:06:77:83:
db:7b:f6:04:9d:c9:96:5a:3a:b2:13:dc:6d:04:00:
59:d9:40:02:d6:13:1a:7f:88:93:98:c9:92:94:cf:
a2:54:89:68:2d:ff:7c:3b:4b:af:a7:a3:97:23:8b:
ef:8e:91:58:9d:e6:ab:5c:70:6b:01:ee:c3:57:76:
3f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BA:DF:93:C6:17:4F:A0:45:60:9C:21:1F:F0:92:AB:08:23:1B:02
X509v3 Authority Key Identifier:
keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c1:ed:c6:98:5c:b2:fb:83:af:e8:07:a3:ed:61:79:f7:ec:
fe:f3:c3:3c:82:49:0c:56:2c:4b:2f:52:83:19:ac:4a:7f:10:
5a:cc:96:15:c6:af:da:da:4b:22:28:a8:50:f3:45:63:a1:90:
e9:69:90:2d:48:be:f9:f2:41:69:f4:cc:11:2d:12:d2:69:5e:
fd:f4:98:70:f3:04:fd:d2:fd:e5:8c:d8:b6:3e:ba:de:f1:58:
6d:e2:8d:d2:e3:98:00:22:af:26:9e:a7:b8:9f:9a:90:1d:5d:
bd:cb:04:41:89:6a:49:78:c2:a8:8d:31:c3:40:f8:cb:bd:ab:
5e:48:7a:24:e2:24:81:41:3e:fe:b0:d2:4b:8e:75:ce:78:b6:
b1:7a:cd:d6:19:f7:81:bb:d0:f8:7f:d8:7e:70:a8:88:61:76:
10:09:66:c1:ab:18:6b:c8:bc:ed:06:ad:3f:64:a0:80:f9:43:
57:cf:8c:8f:ec:66:66:54:aa:cc:4b:b0:50:02:e1:a2:ae:7e:
b5:30:e0:4d:51:e8:54:16:d4:70:a2:a1:18:a7:15:d1:cd:84:
a6:a3:85:ef:d8:da:a3:59:91:b2:c1:70:01:66:17:35:8e:e5:
65:4b:8c:1e:1c:e8:dc:99:4c:81:c1:33:2d:87:77:25:93:2a:
ad:88:32:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWHRnyvThzIiprPHsO7XOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MTQ2MjM2NGVkNDVmNjc2YWQ1MGE5ZWFlMmQzNDJkOGNm
ZDc0NDEwHhcNMjYwMzAxMTcwMDQ5WhcNMjYwMzAyMTcwMDQ5WjAzMTEwLwYDVQQD
EygxMGJhZGY5M2M2MTc0ZmEwNDU2MDljMjExZmYwOTJhYjA4MjMxYjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+zr0O4VT3RU6HetAFovozE5st28
yXViG17exZW1VBtljofcA5IZuf477ZcCN2RDvjtaPFitT8hfvvvkQVLYu/3afjXM
w9HCo/H7GEtqEjJZQRYrbYswnwEE3H8MDSV3o1NgtbtpsMgvGcnVax/h4Hsfw1Pw
DFSGGH57n2hNZ0H1+Wqr9mXDKGTWUOzcwk8sWeQ1qmcRGzzgCgi3NBxkY542d3HG
686dUW3TNkCa+Ur60+ZNuirWbZuBoGqE794Gd4Pbe/YEncmWWjqyE9xtBABZ2UAC
1hMaf4iTmMmSlM+iVIloLf98O0uvp6OXI4vvjpFYnearXHBrAe7DV3Y/rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBC635PGF0+gRWCcIR/wkqsIIxsCMB8GA1UdIwQY
MBaAFDkUYjZO1F9natUKnq4tNC2M/XRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZGFlMmYtZDIzNi00MWY3LWIxYmMt
ODQ0OGRjZmIyN2FhLzEvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83ZGFlMmYtZDIzNi00MWY3LWIxYmMtODQ0OGRjZmIyN2Fh
LzEvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsHtxphc
svuDr+gHo+1heffs/vPDPIJJDFYsSy9SgxmsSn8QWsyWFcav2tpLIiioUPNFY6GQ
6WmQLUi++fJBafTMES0S0mle/fSYcPME/dL95YzYtj663vFYbeKN0uOYACKvJp6n
uJ+akB1dvcsEQYlqSXjCqI0xw0D4y72rXkh6JOIkgUE+/rDSS451zni2sXrN1hn3
gbvQ+H/YfnCoiGF2EAlmwasYa8i87QatP2SggPlDV8+Mj+xmZlSqzEuwUALhoq5+
tTDgTVHoVBbUcKKhGKcV0c2EpqOF79jao1mRssFwAWYXNY7lZUuMHhzo3JlMgcEz
LYd3JZMqrYgybA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:51 2026 by rpki-client