Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
File: orO6gtodtcGUN6wzeDhG8vK_9GI.mft (raw, json)
Hash identifier: K51xW12HiEewQJ3nlAKPdaoNbvFOOOCaNLJhiEWHMsA=
Subject key identifier: DF:39:85:64:C8:AE:56:85:5C:85:8D:E4:0C:AF:97:FE:E0:52:A0:1C
Authority key identifier: A2:B3:BA:82:DA:1D:B5:C1:94:37:AC:33:78:38:46:F2:F2:BF:F4:62
Certificate issuer: /CN=a2b3ba82da1db5c19437ac33783846f2f2bff462
Certificate serial: 019D9AE268AA5FCE12AED8E52B69BDC968E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orO6gtodtcGUN6wzeDhG8vK_9GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
Manifest number: 0662
Signing time: Fri 17 Apr 2026 10:00:22 +0000
Manifest this update: Fri 17 Apr 2026 10:00:22 +0000
Manifest next update: Sat 18 Apr 2026 10:00:22 +0000
Files and hashes: 1: orO6gtodtcGUN6wzeDhG8vK_9GI.crl (hash: Y+eIGdLy2tiqRyzkmSf1yJZCz6YJJuyT0kljSSavMm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/orO6gtodtcGUN6wzeDhG8vK_9GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:68:aa:5f:ce:12:ae:d8:e5:2b:69:bd:c9:68:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b3ba82da1db5c19437ac33783846f2f2bff462
Validity
Not Before: Apr 17 10:00:22 2026 GMT
Not After : Apr 18 10:00:22 2026 GMT
Subject: CN=df398564c8ae56855c858de40caf97fee052a01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:13:12:60:95:f3:cc:8c:6e:45:57:ac:88:52:
93:8e:20:9b:fa:68:e3:1f:64:14:cf:49:41:61:7a:
3d:47:36:47:a2:8b:1f:d6:68:7d:12:42:c0:1d:ad:
b7:b9:5e:96:38:31:c7:78:2d:50:b3:76:85:fa:95:
b2:24:17:84:33:fd:61:4f:bd:2b:4c:a1:e5:e0:c8:
3b:0f:e8:e1:21:ef:f8:73:f3:12:fc:78:9f:85:63:
b5:3e:6b:d5:e8:51:b1:03:f6:e9:d0:61:da:f7:c9:
26:0d:98:10:a3:1e:da:7f:2b:1c:00:4b:03:c4:9c:
61:d7:f9:94:36:d4:c8:12:e6:b3:84:be:12:da:70:
61:34:21:2d:69:d1:77:a3:47:a5:5f:37:33:e2:71:
92:d2:07:64:23:4a:e5:e7:5a:b1:d6:e5:d2:77:56:
f3:00:38:6b:a3:4b:54:50:6c:c8:3c:62:d5:70:22:
06:fc:ac:b3:f6:27:fd:18:92:36:6c:cf:e5:3d:96:
6c:a1:e7:e2:d6:58:ab:c8:05:4c:28:bd:75:78:6a:
a8:1a:01:a8:0a:ac:a9:c4:ec:00:6a:61:09:92:5a:
21:a6:e6:d0:cd:3d:10:90:71:81:0b:b8:f8:8d:75:
2a:73:31:25:cc:92:02:29:36:38:21:d5:01:1a:c6:
b2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:39:85:64:C8:AE:56:85:5C:85:8D:E4:0C:AF:97:FE:E0:52:A0:1C
X509v3 Authority Key Identifier:
keyid:A2:B3:BA:82:DA:1D:B5:C1:94:37:AC:33:78:38:46:F2:F2:BF:F4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orO6gtodtcGUN6wzeDhG8vK_9GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f7:62:b0:ae:39:d5:c2:5f:5b:4a:9c:bd:23:bf:24:8f:c3:
c2:ff:3e:72:1d:e5:93:0b:80:37:62:68:4d:14:ce:6a:06:de:
13:c0:9d:7b:44:cb:b0:d8:74:36:fb:23:f8:cc:14:71:86:a5:
42:ce:9e:cc:78:a1:e9:66:37:04:f1:59:49:e0:6f:ff:e5:fc:
93:6e:17:88:eb:7d:f4:0f:e6:2f:3d:dc:5f:b3:1c:74:bf:c3:
08:7d:15:0a:02:10:07:31:fa:18:a3:f1:da:49:d2:a6:e0:91:
1b:93:4b:5a:bc:8d:a4:fb:67:aa:98:7d:de:5c:3c:58:05:d7:
8b:84:47:91:04:3c:fb:00:fd:3f:54:1c:3f:9b:38:c3:01:17:
72:80:a6:a1:3c:91:13:4f:36:33:77:81:d7:42:99:78:a7:2b:
af:1a:ab:56:01:ba:ae:94:75:33:ec:d9:b8:eb:7c:a3:3e:be:
e7:2b:87:5b:d6:84:7e:20:26:77:e6:3f:b5:5f:32:de:c7:00:
db:92:b2:20:9a:22:68:02:38:79:26:36:73:22:ed:fc:29:cb:
40:6f:6b:90:3a:ef:be:60:11:4c:81:08:9e:3b:cf:5f:69:13:
59:0f:29:47:49:a0:ae:0e:e8:86:32:a1:f5:47:a9:fd:53:c8:
3b:4d:ab:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4miqX84SrtjlK2m9yWjpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYjNiYTgyZGExZGI1YzE5NDM3YWMzMzc4Mzg0NmYyZjJi
ZmY0NjIwHhcNMjYwNDE3MTAwMDIyWhcNMjYwNDE4MTAwMDIyWjAzMTEwLwYDVQQD
EyhkZjM5ODU2NGM4YWU1Njg1NWM4NThkZTQwY2FmOTdmZWUwNTJhMDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xMSYJXzzIxuRVesiFKTjiCb+mjj
H2QUz0lBYXo9RzZHoosf1mh9EkLAHa23uV6WODHHeC1Qs3aF+pWyJBeEM/1hT70r
TKHl4Mg7D+jhIe/4c/MS/HifhWO1PmvV6FGxA/bp0GHa98kmDZgQox7afyscAEsD
xJxh1/mUNtTIEuazhL4S2nBhNCEtadF3o0elXzcz4nGS0gdkI0rl51qx1uXSd1bz
ADhro0tUUGzIPGLVcCIG/Kyz9if9GJI2bM/lPZZsoefi1liryAVMKL11eGqoGgGo
CqypxOwAamEJklohpubQzT0QkHGBC7j4jXUqczElzJICKTY4IdUBGsaycQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN85hWTIrlaFXIWN5Ayvl/7gUqAcMB8GA1UdIwQY
MBaAFKKzuoLaHbXBlDesM3g4RvLyv/RiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3JPNmd0b2R0Y0dVTjZ3emVEaEc4dktfOUdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80NDk4MWMtOTZmOC00ODY2LWI3ZmUt
Zjg5OGQyMDRlYjRlLzEvb3JPNmd0b2R0Y0dVTjZ3emVEaEc4dktfOUdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS80NDk4MWMtOTZmOC00ODY2LWI3ZmUtZjg5OGQyMDRlYjRl
LzEvb3JPNmd0b2R0Y0dVTjZ3emVEaEc4dktfOUdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPdisK45
1cJfW0qcvSO/JI/Dwv8+ch3lkwuAN2JoTRTOagbeE8Cde0TLsNh0Nvsj+MwUcYal
Qs6ezHih6WY3BPFZSeBv/+X8k24XiOt99A/mLz3cX7McdL/DCH0VCgIQBzH6GKPx
2knSpuCRG5NLWryNpPtnqph93lw8WAXXi4RHkQQ8+wD9P1QcP5s4wwEXcoCmoTyR
E082M3eB10KZeKcrrxqrVgG6rpR1M+zZuOt8oz6+5yuHW9aEfiAmd+Y/tV8y3scA
25KyIJoiaAI4eSY2cyLt/CnLQG9rkDrvvmARTIEInjvPX2kTWQ8pR0mgrg7ohjKh
9Uep/VPIO02rdA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:44:06 2026 by rpki-client