Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
File: _ORf1v09kyaEwMW8J_T6YVoQkOA.mft (raw, json)
Hash identifier: jT1AyfE/xk8++5PURaaD80ynTvkUB/otHh9NscOVp5M=
Subject key identifier: CD:E1:19:1E:4E:9C:DB:44:28:BC:AD:05:48:46:00:61:37:09:E8:F9
Authority key identifier: FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
Certificate issuer: /CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Certificate serial: 019EC2925163DF4B4695005145F1F55DDC05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
Manifest number: 0FDF
Signing time: Sat 13 Jun 2026 20:00:29 +0000
Manifest this update: Sat 13 Jun 2026 20:00:29 +0000
Manifest next update: Sun 14 Jun 2026 20:00:29 +0000
Files and hashes: 1: _ORf1v09kyaEwMW8J_T6YVoQkOA.crl (hash: yTozPG1Ynh79YytNu9l2rtLgrLqCm+N39r3bcvqxpMY=)
2: abxz-YS2pIcWJysLZsLURj3wFjE.roa (hash: v8u8I3KyfjrBtGFxRTuhA7B6RHsn+uH/zjkzCl303+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:51:63:df:4b:46:95:00:51:45:f1:f5:5d:dc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Validity
Not Before: Jun 13 20:00:29 2026 GMT
Not After : Jun 14 20:00:29 2026 GMT
Subject: CN=cde1191e4e9cdb4428bcad05484600613709e8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:96:37:38:4d:11:f4:a4:32:61:77:5d:4d:43:
42:a1:f8:99:5f:01:09:5c:b2:11:b7:41:44:95:10:
62:ad:1d:39:ff:a0:d3:ea:7e:8f:08:c7:5c:48:43:
f1:71:d5:9d:5b:51:eb:54:6b:39:c6:db:e2:ac:f9:
5d:30:da:ef:68:fe:5b:20:b1:55:20:b8:5f:43:44:
59:60:7f:e2:4e:17:0c:30:8d:2c:a8:fa:2b:7b:7d:
98:f0:84:6d:21:97:f7:0d:dd:c2:58:d7:38:14:1a:
cc:b6:6e:52:5e:1c:25:22:25:05:1f:de:d2:40:f7:
b4:58:1c:3b:66:78:be:91:36:eb:ca:d1:c7:ec:a7:
90:15:29:cf:20:7c:15:3e:1e:3f:0e:7b:ad:d7:7f:
98:e3:11:fa:56:32:50:20:ab:10:1c:06:c0:da:85:
5e:f4:cc:e6:38:08:73:1c:18:56:d2:17:0b:ed:0e:
82:ff:97:d1:e8:ed:18:f5:6f:51:1b:04:77:eb:90:
e5:30:ce:03:f6:e8:23:a3:4a:3c:5c:0b:30:96:0c:
5c:c2:7e:c2:ee:d5:78:de:0b:aa:61:79:fb:8d:b2:
61:52:98:9f:3e:7d:23:4e:62:13:7e:a2:fc:37:73:
c4:34:ec:6a:de:34:5b:8f:35:2c:ea:f0:25:60:29:
51:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E1:19:1E:4E:9C:DB:44:28:BC:AD:05:48:46:00:61:37:09:E8:F9
X509v3 Authority Key Identifier:
keyid:FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:82:18:57:98:93:36:36:b4:83:3a:1d:5c:f3:63:59:af:f2:
98:b2:57:06:b9:37:f1:9a:01:8f:43:fb:8a:3f:a4:b3:8b:d3:
40:c4:a8:2e:d7:11:0b:ef:08:d5:14:17:2f:5b:aa:f0:01:de:
e3:2e:39:83:72:ba:55:d4:bb:e0:33:97:08:da:64:22:b2:a3:
08:ba:44:6d:62:33:ee:56:d6:61:61:90:d4:58:a4:cb:96:b4:
ce:7e:4c:17:25:69:62:51:a0:44:68:ff:fc:6d:c8:21:d0:67:
23:fe:4d:69:67:f0:8b:45:cf:4d:8c:b5:45:04:a4:fc:92:88:
4c:46:da:a5:e4:75:c2:5c:5a:74:ff:2a:09:2c:94:6f:aa:d5:
1e:3d:0f:e8:2a:79:ea:df:26:e2:c1:cf:eb:2a:b2:44:8d:59:
ba:92:15:47:8f:cc:7f:4e:b6:85:08:b2:fe:82:1e:3c:ba:7f:
14:fe:6e:60:f8:a9:52:f7:a2:51:36:34:6c:69:65:a6:08:16:
19:9f:3e:72:c7:df:d0:fe:21:a9:b9:fb:fd:cd:07:91:de:29:
b9:fa:c5:39:55:8f:d2:8e:ec:78:79:23:bd:8c:06:f1:cf:1f:
4c:2e:ae:e6:53:84:41:f1:c2:c6:63:ec:1f:d4:1e:37:62:39:
8a:b9:2f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:43:31 2026 by rpki-client