Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
File: _ORf1v09kyaEwMW8J_T6YVoQkOA.mft (raw, json)
Hash identifier: jrV1YyfnG5petrRqkHkr6Ds+4zVtY7mCmzqThRRUWSU=
Subject key identifier: 27:95:43:C6:2A:E4:46:A3:69:D3:B1:26:F7:0C:3E:32:B7:2F:80:9C
Authority key identifier: FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
Certificate issuer: /CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Certificate serial: 01A12C8DE4FCACAF88DBEE341BCB8057CB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
Manifest number: 111F
Signing time: Sun 11 Oct 2026 20:00:59 +0000
Manifest this update: Sun 11 Oct 2026 20:00:59 +0000
Manifest next update: Mon 12 Oct 2026 20:00:59 +0000
Files and hashes: 1: _ORf1v09kyaEwMW8J_T6YVoQkOA.crl (hash: 3nNj7l5DYjatGE7KIcxsvf9DKOcrv0J0VBDxwc+uDF8=)
2: abxz-YS2pIcWJysLZsLURj3wFjE.roa (hash: v8u8I3KyfjrBtGFxRTuhA7B6RHsn+uH/zjkzCl303+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:8d:e4:fc:ac:af:88:db:ee:34:1b:cb:80:57:cb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Validity
Not Before: Oct 11 20:00:59 2026 GMT
Not After : Oct 12 20:00:59 2026 GMT
Subject: CN=279543c62ae446a369d3b126f70c3e32b72f809c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:59:64:a0:7a:e2:5c:15:b1:22:1f:d0:dd:
0b:07:d2:f2:6c:0c:92:7b:ec:63:ec:5a:c6:27:8d:
ea:c9:d8:79:79:2b:21:00:19:df:52:14:8c:7d:ca:
00:82:93:39:94:80:88:f9:c5:76:c0:ae:db:70:50:
61:79:a6:1b:61:73:ce:8e:77:0b:98:bc:34:e5:4c:
09:29:49:72:c5:26:98:ca:4d:64:03:05:b4:7b:41:
57:e3:fb:c7:97:96:2e:eb:ff:61:47:5a:59:cc:89:
6c:c3:99:8f:ca:e3:3d:a8:02:08:7a:3a:a6:5c:55:
66:d3:9f:e3:a1:32:02:8a:f3:88:2a:9d:ed:06:26:
4d:02:8c:df:ae:85:05:d5:2b:74:d2:26:2f:24:35:
ce:32:15:7f:8b:ea:7b:fa:97:ca:fa:15:84:6a:74:
c6:06:47:41:39:6f:1b:67:32:97:1c:ce:c8:9f:f4:
5f:ad:1b:85:ec:92:2e:b6:13:82:d3:4b:d7:42:ec:
1b:ab:a9:75:72:06:b8:c8:1a:3d:1c:88:16:c4:0b:
c5:d4:32:5d:b3:49:52:57:13:41:2f:83:e1:0d:32:
85:84:26:2f:c6:ba:bb:c5:ae:f0:13:8c:eb:98:5b:
81:4f:3d:aa:ab:51:77:57:32:90:4d:67:e5:54:ab:
c6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:95:43:C6:2A:E4:46:A3:69:D3:B1:26:F7:0C:3E:32:B7:2F:80:9C
X509v3 Authority Key Identifier:
keyid:FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cb:f5:57:0d:40:ff:9b:3d:59:de:f1:f8:97:47:11:42:f2:
f0:a4:ff:34:0d:5c:d7:23:62:d7:90:b2:c8:c0:30:3a:11:17:
63:73:1a:7a:b0:01:40:18:ed:19:c3:92:41:33:26:06:47:03:
3e:fb:46:db:de:9f:17:b9:31:3d:b9:d6:68:71:bb:e3:f3:03:
17:7c:20:fb:c6:ba:17:5b:fb:e6:67:60:bf:a9:ea:c6:27:18:
37:67:df:d8:64:4a:52:f7:ff:da:3b:88:4e:31:13:56:a3:f9:
1d:cd:13:e3:fc:bb:d1:fa:f5:c0:eb:b6:e6:f3:2e:ad:6f:a1:
4f:15:1a:3b:ef:60:76:a9:7a:52:3b:36:40:a0:3d:ad:5d:19:
ab:80:da:b8:78:1d:fb:e8:d5:c8:2a:d0:71:7b:4d:02:fd:e8:
ec:0f:44:07:a8:3e:61:c6:3a:99:36:30:ef:08:7d:f2:89:49:
7d:c6:4d:81:06:c8:50:38:38:58:0f:b0:af:b9:67:40:72:a7:
fe:1c:46:f1:26:62:de:31:ab:aa:7c:3c:cf:69:5e:98:60:dd:
8a:e1:ae:4b:63:15:ed:d8:d5:ab:7c:ce:52:fc:fb:40:16:27:
36:45:90:9f:92:78:cc:80:15:7e:a0:e9:44:5a:d5:bd:84:2a:
d1:30:91:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEsjeT8rK+I2+40G8uAV8uBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZTQ1ZmQ2ZmQzZDkzMjY4NGMwYzViYzI3ZjRmYTYxNWEx
MDkwZTAwHhcNMjYxMDExMjAwMDU5WhcNMjYxMDEyMjAwMDU5WjAzMTEwLwYDVQQD
EygyNzk1NDNjNjJhZTQ0NmEzNjlkM2IxMjZmNzBjM2UzMmI3MmY4MDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz9ZZKB64lwVsSIf0N0LB9LybAyS
e+xj7FrGJ43qydh5eSshABnfUhSMfcoAgpM5lICI+cV2wK7bcFBheaYbYXPOjncL
mLw05UwJKUlyxSaYyk1kAwW0e0FX4/vHl5Yu6/9hR1pZzIlsw5mPyuM9qAIIejqm
XFVm05/joTICivOIKp3tBiZNAozfroUF1St00iYvJDXOMhV/i+p7+pfK+hWEanTG
BkdBOW8bZzKXHM7In/RfrRuF7JIuthOC00vXQuwbq6l1cga4yBo9HIgWxAvF1DJd
s0lSVxNBL4PhDTKFhCYvxrq7xa7wE4zrmFuBTz2qq1F3VzKQTWflVKvGYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeVQ8Yq5EajadOxJvcMPjK3L4CcMB8GA1UdIwQY
MBaAFPzkX9b9PZMmhMDFvCf0+mFaEJDgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX09SZjF2MDlreWFFd01XOEpfVDZZVm9Ra09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iZjVhNjQtOGFhZi00NGE4LWJhY2Ut
MzY4NTBkZjRlOTk3LzEvX09SZjF2MDlreWFFd01XOEpfVDZZVm9Ra09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9iZjVhNjQtOGFhZi00NGE4LWJhY2UtMzY4NTBkZjRlOTk3
LzEvX09SZjF2MDlreWFFd01XOEpfVDZZVm9Ra09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmsv1Vw1A
/5s9Wd7x+JdHEULy8KT/NA1c1yNi15CyyMAwOhEXY3MaerABQBjtGcOSQTMmBkcD
PvtG296fF7kxPbnWaHG74/MDF3wg+8a6F1v75mdgv6nqxicYN2ff2GRKUvf/2juI
TjETVqP5Hc0T4/y70fr1wOu25vMurW+hTxUaO+9gdql6Ujs2QKA9rV0Zq4DauHgd
++jVyCrQcXtNAv3o7A9EB6g+YcY6mTYw7wh98olJfcZNgQbIUDg4WA+wr7lnQHKn
/hxG8SZi3jGrqnw8z2lemGDdiuGuS2MV7djVq3zOUvz7QBYnNkWQn5J4zIAVfqDp
RFrVvYQq0TCR+A==
-----END CERTIFICATE-----
Generated at Mon Oct 12 03:26:07 2026 by rpki-client