Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
File: orO6gtodtcGUN6wzeDhG8vK_9GI.mft (raw, json)
Hash identifier: vqTJkDiufcWz5mIFtN5G/y5c2Hcs6n7aOdQ3JYo51Ew=
Subject key identifier: BC:C7:96:3E:83:35:86:5C:3A:92:EF:1C:00:AD:75:9D:78:A1:73:BB
Authority key identifier: A2:B3:BA:82:DA:1D:B5:C1:94:37:AC:33:78:38:46:F2:F2:BF:F4:62
Certificate issuer: /CN=a2b3ba82da1db5c19437ac33783846f2f2bff462
Certificate serial: 019CAD59E2EABBD9292934169A0DE08EA785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orO6gtodtcGUN6wzeDhG8vK_9GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
Manifest number: 05E7
Signing time: Mon 02 Mar 2026 07:01:14 +0000
Manifest this update: Mon 02 Mar 2026 07:01:14 +0000
Manifest next update: Tue 03 Mar 2026 07:01:14 +0000
Files and hashes: 1: orO6gtodtcGUN6wzeDhG8vK_9GI.crl (hash: zJcRfsCJMyF+cQwaCfHEiiskTSHbjQXOBLlsf2sE6mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/orO6gtodtcGUN6wzeDhG8vK_9GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:e2:ea:bb:d9:29:29:34:16:9a:0d:e0:8e:a7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b3ba82da1db5c19437ac33783846f2f2bff462
Validity
Not Before: Mar 2 07:01:14 2026 GMT
Not After : Mar 3 07:01:14 2026 GMT
Subject: CN=bcc7963e8335865c3a92ef1c00ad759d78a173bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:6e:11:dd:cb:c0:0b:86:56:2d:97:26:bf:
e9:7a:6a:12:17:35:79:4e:e2:52:45:9f:1b:c0:12:
52:ed:e8:c1:3c:ce:8f:f4:d6:94:80:11:96:f8:23:
a5:2e:55:96:31:6e:1c:da:64:d2:09:2e:43:5b:f4:
29:9c:ab:7f:2a:1b:0e:71:8d:e3:41:b2:4a:f2:af:
de:6a:ec:ca:7e:6c:d6:80:75:75:d9:4c:7c:95:64:
5e:13:d6:99:7e:f0:a7:c3:e3:6b:e3:03:9c:41:37:
a9:1e:d2:6c:04:c9:ab:60:a6:d7:c6:2d:d7:d0:68:
a6:c3:a3:67:d9:05:d7:9f:23:c3:fb:db:52:60:fe:
36:22:7c:78:c1:c3:a2:fd:fc:04:28:ae:b3:21:a4:
3d:30:c2:62:e5:60:85:4f:fc:ab:eb:ab:f8:00:b5:
a3:3c:56:78:ee:cf:a6:b0:77:cd:78:8b:95:ab:7d:
bb:5a:00:77:3f:c2:eb:12:ed:14:1c:80:05:23:83:
fc:88:54:0f:17:85:bd:1b:36:62:f5:d1:e4:03:bb:
ff:bf:bd:b9:ac:3a:d0:25:d2:f5:8b:a2:72:ef:c7:
28:dd:73:42:ac:ed:f8:a7:9a:63:70:90:05:30:a0:
e8:73:32:0b:7d:44:ce:16:eb:c5:80:e0:3e:ef:5f:
3a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C7:96:3E:83:35:86:5C:3A:92:EF:1C:00:AD:75:9D:78:A1:73:BB
X509v3 Authority Key Identifier:
keyid:A2:B3:BA:82:DA:1D:B5:C1:94:37:AC:33:78:38:46:F2:F2:BF:F4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orO6gtodtcGUN6wzeDhG8vK_9GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c5:57:e1:00:40:3c:fb:50:ee:b2:2c:ce:d8:a3:a9:34:f3:
3a:be:d0:d0:65:65:7e:33:ad:f1:87:e8:bc:1c:2c:7b:9b:fd:
03:2c:04:d2:02:5c:33:60:2f:f0:04:72:0d:72:75:71:05:8a:
14:bc:00:87:e7:9d:4a:28:fa:4b:9e:4f:13:0e:1a:36:46:49:
74:7f:7d:17:21:48:5b:ba:c0:89:9a:20:a1:fb:f5:94:6a:ce:
6b:e9:a0:fc:5c:81:46:1a:70:81:94:6b:d7:c3:ed:24:46:c0:
48:4e:25:8d:44:6c:35:4f:83:22:3d:23:82:d1:2a:b8:ea:f9:
3c:af:85:9a:c7:c8:9f:a4:ac:f0:d9:5c:0f:dc:8e:27:48:74:
57:9e:d1:81:b7:1a:ee:07:e6:a8:a6:d1:25:5a:20:e2:9c:5c:
e0:c3:f6:77:24:83:85:78:69:78:cd:56:0f:63:ab:2f:dc:64:
62:88:e5:2a:0c:56:f0:13:c8:a1:3b:b6:ce:34:47:09:5b:9d:
1f:da:77:82:6c:db:95:a1:53:b5:b4:89:57:fb:6e:cf:1c:39:
7d:81:e5:a1:b4:ee:39:e2:89:fa:33:dc:92:37:bf:d0:fa:ad:
08:83:fb:f5:5c:f1:e6:00:41:71:05:4a:0b:12:c7:ca:88:d7:
42:8a:d4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:23 2026 by rpki-client