Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
File: ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json)
Hash identifier: ErxQTe0SJ39tL7Fdc48wjWR/gRYxL0miN+vhY41Lfcg=
Subject key identifier: A0:E2:38:E5:AE:1E:FE:E6:B0:9B:58:F0:04:C7:D0:D7:A7:17:8C:D1
Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
Certificate issuer: /CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Certificate serial: 019FAAF5281AB4EEE5947D5DDB94D927D2DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
Manifest number: 1966
Signing time: Tue 28 Jul 2026 23:00:20 +0000
Manifest this update: Tue 28 Jul 2026 23:00:20 +0000
Manifest next update: Wed 29 Jul 2026 23:00:20 +0000
Files and hashes: 1: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: GV1JDGgYCNPEMP87NGPvb2Tcbjc8r+IS1+qk4CLXFD0=)
2: bIXByjX6LuW26aekk-7LgPK4WBo.roa (hash: YUnrsrT600MTRy40cCZkhQACX77mVDjnM+ubjSZDc0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:28:1a:b4:ee:e5:94:7d:5d:db:94:d9:27:d2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Validity
Not Before: Jul 28 23:00:20 2026 GMT
Not After : Jul 29 23:00:20 2026 GMT
Subject: CN=a0e238e5ae1efee6b09b58f004c7d0d7a7178cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:05:73:ec:56:82:c8:f7:f6:ed:c6:4c:09:
ab:74:be:4a:db:a8:30:3e:ff:29:ae:8b:08:45:8f:
5e:17:46:a6:33:a2:b0:ee:60:ed:bb:38:0c:44:dd:
2d:e4:79:21:d1:70:40:b9:2b:99:8a:fd:25:7e:c5:
f4:56:02:1d:57:95:f2:1c:98:69:bd:a1:31:2a:9d:
0a:e5:c8:cc:24:5a:29:73:7b:c4:ac:7a:e6:09:3d:
c6:d1:68:c8:ed:b7:ff:8f:42:93:52:7a:b2:00:dd:
8b:ac:e6:56:2d:8e:78:ba:25:a0:7c:5a:39:68:2c:
ee:fe:d4:2e:a6:72:04:fd:b0:db:57:22:65:b6:55:
10:a4:d5:f9:92:d6:de:4c:8f:ba:99:35:04:82:db:
44:c3:b8:db:13:05:d3:22:94:3a:da:a7:b4:fa:8c:
03:41:76:6a:ad:eb:71:5a:ca:74:fd:b2:be:21:eb:
82:fe:73:e9:8c:d2:e0:61:35:23:4a:a7:51:66:d1:
fd:e3:5e:09:44:37:32:fa:01:cf:18:33:bc:9a:d9:
3d:f4:00:72:81:34:a2:ec:c2:d6:48:13:97:05:f8:
43:71:f8:f8:3e:9e:87:87:ae:2a:c5:df:68:4e:e7:
62:6a:68:ed:d3:48:63:1f:14:cf:43:29:d1:17:56:
30:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E2:38:E5:AE:1E:FE:E6:B0:9B:58:F0:04:C7:D0:D7:A7:17:8C:D1
X509v3 Authority Key Identifier:
keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:82:41:ca:56:1a:2f:d8:59:54:e6:85:a1:66:fb:f4:c2:9c:
81:ae:67:a8:b1:ca:b1:f6:53:24:67:ae:4c:42:ab:3e:27:6a:
fb:49:62:50:70:b5:ca:c4:22:1b:95:1f:6b:bc:4c:4d:87:1d:
a0:0f:18:61:eb:21:61:96:d8:33:41:9d:28:ec:2e:1e:eb:ba:
3c:78:f5:c1:b8:95:23:d6:37:16:3b:40:a2:50:58:36:ab:6a:
10:5f:8f:d4:01:58:b0:ac:e0:24:87:b3:2a:c3:34:5d:71:d9:
ec:e0:5c:90:b8:ea:18:33:0f:95:10:2f:88:75:43:34:c8:57:
e2:17:01:b2:80:46:a4:44:ec:74:19:64:a2:61:d8:92:d8:d4:
2a:c2:3d:8e:35:fa:4c:72:a3:92:9e:43:d4:13:d1:fa:0f:7e:
56:d7:4e:51:ec:bc:94:38:73:35:e2:9f:9c:ad:a4:cc:6c:05:
f8:1e:9a:a9:13:ca:a6:7e:c2:26:5b:dd:16:3d:86:6c:64:42:
2d:13:6b:e3:1a:20:6a:67:ae:43:29:c3:4c:a4:04:dd:cb:da:
4e:6a:f0:86:19:39:6c:da:9a:0c:4b:e9:15:59:52:48:97:f3:
89:4d:7f:9d:ae:82:44:f4:b1:cc:38:1a:91:31:e0:59:26:b2:
44:d9:fb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:14:20 2026 by rpki-client