Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
File: ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json)
Hash identifier: lzFUQnFFeBuM7bw7p/fb7V2eD0Kh8Io4cez4wPYxwmk=
Subject key identifier: 71:8C:FB:C0:20:33:60:60:3C:A0:52:AF:56:EB:68:D7:46:9B:48:FB
Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
Certificate issuer: /CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Certificate serial: 01A0C10D48E7E54A674AF128726E62A4E6D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
Manifest number: 19F6
Signing time: Sun 20 Sep 2026 23:01:08 +0000
Manifest this update: Sun 20 Sep 2026 23:01:08 +0000
Manifest next update: Mon 21 Sep 2026 23:01:08 +0000
Files and hashes: 1: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: Al1tCun8qUd0pN6REcOhWz4RwWbmLvm7EEqOfkVfAis=)
2: bIXByjX6LuW26aekk-7LgPK4WBo.roa (hash: YUnrsrT600MTRy40cCZkhQACX77mVDjnM+ubjSZDc0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0d:48:e7:e5:4a:67:4a:f1:28:72:6e:62:a4:e6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Validity
Not Before: Sep 20 23:01:08 2026 GMT
Not After : Sep 21 23:01:08 2026 GMT
Subject: CN=718cfbc0203360603ca052af56eb68d7469b48fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c1:49:79:50:e2:8d:58:78:ba:7f:a7:f1:25:
2b:f0:b2:01:df:e2:e3:e1:36:c9:aa:2a:50:98:33:
f5:85:c1:b9:23:e5:78:93:45:b0:82:01:8a:2c:ce:
da:a2:1a:2e:86:a2:15:23:7f:85:62:56:6f:9c:a3:
b0:26:c7:4b:2d:fb:57:a2:ef:39:0d:da:07:81:bf:
39:6b:c8:51:e2:9b:23:a3:96:a5:4e:03:18:b3:27:
04:4d:a6:7e:57:a3:fa:1c:e3:cd:0b:eb:d9:48:61:
e9:51:3a:ef:00:4d:d0:c8:df:80:10:cd:3c:4d:74:
9f:35:c4:77:98:d2:78:7c:e7:ae:8b:b2:85:1d:fc:
72:5a:6c:72:a0:d9:6e:17:1f:ae:e2:9e:04:41:13:
03:6d:05:aa:93:a4:f8:35:aa:92:db:3c:0b:b3:a1:
ef:6f:f0:80:48:ec:a1:de:d2:36:5e:87:bc:b7:6f:
5b:9a:fc:ea:3f:c7:06:26:fd:45:3e:c4:f4:5e:4f:
46:68:8b:c9:cb:ef:e8:70:21:0d:19:1a:e0:73:82:
20:19:be:4e:49:dd:5b:bf:5d:0f:2d:2e:50:be:96:
34:c4:41:1c:83:a7:ca:65:62:f1:7a:3e:e2:df:f4:
63:cb:38:59:ab:71:43:d7:5e:1c:e6:d9:37:af:b9:
b0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8C:FB:C0:20:33:60:60:3C:A0:52:AF:56:EB:68:D7:46:9B:48:FB
X509v3 Authority Key Identifier:
keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8b:45:25:65:d8:fc:da:e2:23:42:b9:e9:4e:ec:98:62:26:
fe:98:34:cf:88:22:b8:08:73:d4:44:c2:93:6c:47:7e:28:74:
2b:7e:7f:ca:53:7c:22:fe:ef:da:be:e9:02:97:e6:62:ff:0f:
30:10:92:ee:6f:f8:cf:de:57:6f:83:1e:e1:b1:3c:31:9b:79:
ec:97:46:95:b7:5b:ba:c2:4d:81:7a:b1:f0:76:db:c3:3f:41:
eb:ab:7c:bc:1b:b1:df:0f:c1:38:bf:89:18:d2:16:bd:e1:e8:
33:04:b0:68:5f:a1:81:5a:ae:7a:e0:be:5e:53:99:c3:2a:00:
35:65:54:f1:54:98:32:22:f8:62:95:cf:33:88:fc:fb:fa:4a:
09:b5:e6:f6:40:84:3b:90:31:c9:ed:40:ff:55:2a:83:dc:ea:
f8:5b:f4:15:d3:31:93:5d:2e:da:6e:86:81:ca:8f:01:ef:01:
2a:07:20:a2:1d:89:1e:b5:d8:40:f7:06:30:53:7b:29:07:59:
63:a8:f6:2b:01:32:a0:f8:70:76:bb:e6:97:bf:b9:54:68:40:
98:6f:31:91:db:87:71:de:7c:ea:36:2e:a2:2a:24:23:b8:a6:
f2:c2:50:9c:5c:43:67:a1:6b:49:cc:15:96:83:6d:3a:2a:23:
de:ff:d8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:11:34 2026 by rpki-client