Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier: wW4ZHnNSjyDdGKfm7tPuC5hQczF7mRlHbRY+2UOKk/8=
Subject key identifier: 0C:DB:E4:02:BB:14:3F:6F:11:81:19:80:8E:D6:93:7F:56:ED:46:97
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial: 019CA9EB6A2E51BFA5635AC9A31CA8345AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 15:01:43 +0000
Manifest this update: Sun 01 Mar 2026 15:01:43 +0000
Manifest next update: Mon 02 Mar 2026 15:01:43 +0000
Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: UHORd6ZY48lz0qhnXPfJHqfdTEUwP0MlAWSqCHW4p7A=)
2: l_5sj0n83h1j-KNddGTmHYrghYs.roa (hash: lWD+ja9YbtyG1MA96ufKgRHVHut4712gK2auViaR/PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:6a:2e:51:bf:a5:63:5a:c9:a3:1c:a8:34:5a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Validity
Not Before: Mar 1 15:01:43 2026 GMT
Not After : Mar 2 15:01:43 2026 GMT
Subject: CN=0cdbe402bb143f6f118119808ed6937f56ed4697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6e:3b:16:13:3b:91:c1:26:a0:53:ab:78:ad:
df:a3:b8:db:45:85:6d:56:c4:49:fb:3e:e8:29:3b:
95:ba:55:a9:76:34:4c:b7:75:68:21:ea:3d:09:90:
ec:a7:45:01:24:e3:fb:39:fe:32:36:d9:07:8f:e4:
89:1a:b2:4b:7e:27:d4:00:8e:0f:88:04:c6:e5:0a:
00:a0:8a:db:54:65:77:8a:57:9b:65:a3:8a:6d:91:
6d:4e:43:0d:e1:f8:c7:e5:2d:82:e1:6b:10:4f:59:
3e:76:b6:4f:15:3b:d4:25:a0:ec:23:82:f5:3d:22:
3c:ec:de:55:84:eb:e5:23:40:29:29:40:f6:b6:f3:
8a:cf:8b:a9:b5:80:28:18:16:0e:42:b8:02:7c:a5:
d4:25:9a:a5:07:61:65:ba:22:7d:cc:b8:54:75:de:
cd:fe:23:ea:44:c8:6d:17:c3:e5:44:3a:5a:45:05:
9c:c9:bf:3e:38:e5:94:5a:33:92:8f:d9:e6:93:60:
11:c5:33:db:85:cf:bd:09:ec:b2:84:3b:5f:69:c9:
4b:d3:5e:b2:40:b1:57:61:8c:5c:0e:a5:94:23:13:
ab:4d:e4:81:b5:c7:07:18:95:ba:0d:17:04:e1:8e:
1a:c6:11:a1:11:fb:a4:1c:44:3f:3a:46:5b:eb:b3:
2b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DB:E4:02:BB:14:3F:6F:11:81:19:80:8E:D6:93:7F:56:ED:46:97
X509v3 Authority Key Identifier:
keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:79:a4:a7:4f:76:e9:d3:d0:50:22:8d:c4:99:0e:62:07:5f:
0a:7d:e4:1c:80:a3:5c:0a:43:40:68:85:29:59:be:61:bd:f0:
30:19:08:8e:fb:06:5d:42:01:5b:c1:07:36:55:e5:77:a8:2d:
7d:b0:a5:fa:45:19:4b:19:8e:f0:32:26:7f:36:16:73:82:f2:
a8:78:56:e1:77:96:02:4a:de:20:7f:36:93:6b:9e:cf:7c:27:
6a:3a:60:7e:d6:f0:07:45:4f:3b:27:ce:3b:20:e5:25:ce:5d:
4c:68:c4:e2:81:18:80:fc:db:ef:fa:5c:5c:38:a1:2d:fa:11:
bb:89:8c:0a:9c:32:0b:a5:3a:29:4e:16:ba:97:2c:e3:9d:aa:
2f:07:24:d0:40:ba:80:55:6a:e7:67:4c:74:4d:b5:4f:a1:30:
95:dd:38:65:48:23:92:57:6c:c9:be:8d:21:0c:1e:0b:fe:71:
81:63:b0:42:4e:3a:b6:40:1c:13:59:7c:6b:50:6a:55:30:ed:
d2:a3:7c:c1:e2:a9:a3:ce:68:9e:df:8e:32:a6:77:21:2e:fe:
e2:34:e2:11:27:5a:74:7a:25:da:0e:e9:5a:da:73:ab:33:06:
2d:6d:f9:ab:ab:b3:6b:be:e6:db:58:2c:81:ac:4d:bf:12:c1:
23:17:ac:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:51:46 2026 by rpki-client