Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
File: ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json)
Hash identifier: lNoxy0ZJKuZswR3hU4zrgMJUrOsXOsrSVyk6c7BAtu4=
Subject key identifier: 50:7D:F0:47:69:CA:3C:BE:0E:60:1A:F7:96:C2:8D:1C:C3:CA:CE:64
Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
Certificate issuer: /CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Certificate serial: 019D9BBEDBEAAB02D7250E5617822DECE747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
Manifest number: 1855
Signing time: Fri 17 Apr 2026 14:01:09 +0000
Manifest this update: Fri 17 Apr 2026 14:01:09 +0000
Manifest next update: Sat 18 Apr 2026 14:01:09 +0000
Files and hashes: 1: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: tqwuUcU0vXlGLUdIRyi48Q8Btbt/PE3ee2OTa8b5nco=)
2: bIXByjX6LuW26aekk-7LgPK4WBo.roa (hash: YUnrsrT600MTRy40cCZkhQACX77mVDjnM+ubjSZDc0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:db:ea:ab:02:d7:25:0e:56:17:82:2d:ec:e7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Validity
Not Before: Apr 17 14:01:09 2026 GMT
Not After : Apr 18 14:01:09 2026 GMT
Subject: CN=507df04769ca3cbe0e601af796c28d1cc3cace64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:87:70:9f:66:fa:28:ca:3b:58:cb:2f:b6:
38:ba:6d:21:68:4b:3c:b9:dc:9e:9e:e2:83:58:c3:
60:29:79:f5:99:60:3a:8d:1f:d9:10:b6:3a:61:67:
17:f4:30:bb:43:cd:0f:67:02:d3:82:e5:bd:ad:ab:
5d:1d:22:53:16:1e:ae:c2:7e:41:fc:4c:fb:53:f4:
11:59:f7:f5:03:2e:2f:c6:5c:78:05:8c:40:b8:e4:
8a:17:8e:dc:de:63:85:42:27:af:02:ac:c1:f5:e6:
5c:66:0c:92:d4:30:45:c7:ca:8f:38:e5:e3:ac:fe:
24:c2:b3:c5:c6:74:f8:4b:37:2d:7c:a4:19:7b:64:
0b:f0:b2:0f:5c:d0:e1:54:3e:84:12:a3:87:eb:a1:
e3:11:6c:ed:58:a6:03:31:d8:30:cf:ea:06:ef:c7:
4e:83:72:1f:fa:9f:e5:8f:e9:6e:3f:8d:1e:9c:ff:
d9:5d:d1:cf:33:de:b0:27:ab:72:73:6b:00:6a:88:
f7:14:a8:84:e6:98:45:61:f0:50:19:48:bf:19:ed:
27:ac:bd:82:34:39:33:5b:95:fe:a6:51:e8:9e:6f:
a3:ba:92:28:65:f5:68:8b:d1:b5:02:62:a6:b3:70:
29:17:a1:96:8c:8e:10:52:7d:61:bc:75:55:f0:26:
fc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7D:F0:47:69:CA:3C:BE:0E:60:1A:F7:96:C2:8D:1C:C3:CA:CE:64
X509v3 Authority Key Identifier:
keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:cd:25:df:a2:5c:65:42:21:da:fa:5b:90:3d:2a:77:17:d1:
f6:80:2c:02:b1:ca:2d:85:38:b5:4e:c7:70:5a:8d:e3:8b:da:
a7:fb:4d:2a:b1:be:ab:05:71:d0:24:32:66:5a:a3:5b:5b:3a:
76:e6:c7:af:77:40:2b:da:2c:47:b5:39:16:57:02:37:19:62:
f7:a3:fa:11:aa:d3:d6:3b:c3:f0:ed:4c:ad:72:2a:74:33:6c:
27:d7:72:ec:24:9c:c5:a5:78:6f:72:90:c1:99:c0:51:0a:46:
6d:ce:23:63:5e:be:37:76:07:b0:99:bd:93:81:57:17:c9:bf:
7b:16:67:1b:b0:27:9b:a6:b3:b3:09:1f:a8:e8:6a:f7:16:b1:
14:30:e3:be:5e:fa:ae:60:42:89:b2:64:c6:8e:33:5e:e7:ba:
ba:6f:e9:84:8d:92:a3:6e:42:d0:5f:16:9a:e7:d4:c0:ac:b6:
c9:c9:88:a8:b0:1c:11:00:5c:39:ec:60:82:6f:54:f1:e2:fa:
fd:2c:0e:c1:97:22:56:f9:f5:91:5f:66:b4:d9:c0:d8:9a:1a:
71:d7:ef:13:9d:e9:e9:9c:d5:e3:92:4d:dd:61:3d:21:c9:7a:
bc:e8:98:9e:d7:75:50:44:35:f9:db:04:34:08:a7:62:cd:45:
73:0b:c4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:18 2026 by rpki-client