Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier: LZ9rOumf2il2sz8mc9+aZ1L4GhQ2fcEz9BxahVByEyg=
Subject key identifier: 14:DB:DC:AD:82:56:75:2E:29:5E:B1:78:C7:C8:04:CE:56:0B:19:5A
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial: 019D9962FBCC3FD2A2DCDA6B34651F97FA30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:01:34 +0000
Manifest this update: Fri 17 Apr 2026 03:01:34 +0000
Manifest next update: Sat 18 Apr 2026 03:01:34 +0000
Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: LWRfvIVOQiyGwM8vrzE5svJ7/tURS9qOBuKqE/zxm8A=)
2: l_5sj0n83h1j-KNddGTmHYrghYs.roa (hash: lWD+ja9YbtyG1MA96ufKgRHVHut4712gK2auViaR/PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:fb:cc:3f:d2:a2:dc:da:6b:34:65:1f:97:fa:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Validity
Not Before: Apr 17 03:01:34 2026 GMT
Not After : Apr 18 03:01:34 2026 GMT
Subject: CN=14dbdcad8256752e295eb178c7c804ce560b195a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:65:7d:8c:30:e6:78:78:4d:1a:30:c5:1e:42:
71:50:ee:09:fa:25:68:fd:de:f0:fc:f5:a0:30:d4:
30:5c:95:db:03:d9:3d:28:e7:6f:64:88:dd:7b:d9:
86:95:3f:9d:a2:6e:c3:6a:71:ec:03:30:59:b5:4f:
3a:19:c5:27:ab:f7:9f:76:15:42:66:6e:9b:d0:bc:
a0:ec:00:1f:08:9c:d9:56:59:96:fc:9b:41:e3:18:
5c:3e:cc:94:f2:11:1f:ef:ee:3a:96:5a:dd:4c:0e:
e2:d1:56:15:fc:ec:85:5a:84:ef:e5:94:45:70:1a:
1f:b6:c8:e5:0e:ae:86:8d:90:1c:97:d8:de:23:4a:
59:09:98:42:3d:49:cc:2c:56:bc:a8:fc:3c:59:ed:
db:41:81:54:cb:2f:f9:05:58:a0:87:aa:25:db:f5:
0f:b0:0b:09:ce:d0:0d:41:c4:36:a2:75:8d:fe:47:
42:66:6b:3c:fd:bd:fc:5e:54:0a:cb:e6:2e:50:b1:
79:51:fc:a2:ef:6c:91:39:78:ed:c6:07:81:ba:6e:
46:e6:b8:07:93:f3:a3:97:f0:e5:7f:7b:cf:7d:35:
3f:b4:34:be:8b:18:dd:c9:18:94:74:9a:f2:be:22:
5f:b9:d2:97:4a:48:a5:6e:9f:36:be:4b:7e:6b:5e:
30:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DB:DC:AD:82:56:75:2E:29:5E:B1:78:C7:C8:04:CE:56:0B:19:5A
X509v3 Authority Key Identifier:
keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:50:6e:b9:1d:fa:bc:71:d5:c5:7e:1b:81:22:02:aa:e1:8d:
ad:a1:ab:53:ca:eb:14:8a:9c:b8:4a:4e:92:06:1e:f2:5c:c5:
eb:92:e7:1e:96:24:80:fc:40:e2:fc:a1:db:ad:65:42:81:45:
4a:25:da:aa:45:40:e3:c9:68:0d:04:14:bc:5a:d5:1e:b0:5e:
25:97:c9:57:cd:8e:58:55:d0:94:9a:8c:70:1a:75:b7:00:e6:
1f:05:28:ed:aa:8f:b3:d1:89:77:99:ee:84:54:6e:2e:f2:e4:
95:88:42:1f:0c:28:1e:4b:3d:f1:26:0b:33:80:5d:33:44:b9:
80:ca:5b:2c:b3:77:09:db:50:01:ed:67:b6:16:32:43:0a:0b:
02:1c:d7:9e:5b:ab:fb:c9:d7:c9:b9:eb:f2:f7:11:65:b2:9b:
8a:d8:8f:6c:7e:9d:4b:61:0e:f9:a3:5c:58:e4:c7:c0:66:a6:
1b:14:9a:15:2f:7b:cf:1f:9d:2a:ab:0f:54:85:34:05:12:11:
f7:a6:5f:c8:cb:12:04:a4:b1:bc:5d:26:04:38:00:fc:65:6f:
dd:bf:5c:28:11:5c:53:60:5e:27:86:b8:ba:1e:04:61:12:cc:
5d:bf:3e:7e:b4:61:b4:31:ac:b0:8f:6e:bb:57:7c:6c:9b:d2:
e7:34:51:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:28 2026 by rpki-client