Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier: 26UPis7cA9kDvEIyagJXHSA116uBF6HZaCNSlxP10p0=
Subject key identifier: 16:5C:FD:50:81:20:97:DA:8B:08:6F:94:98:88:B4:D3:18:8A:06:58
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial: 01A128E8FCF7765CF22FF88AE4B43370115C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number: 1A9A
Signing time: Sun 11 Oct 2026 03:02:00 +0000
Manifest this update: Sun 11 Oct 2026 03:02:00 +0000
Manifest next update: Mon 12 Oct 2026 03:02:00 +0000
Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: Vuy6h8LG+hVTZblc0Lu2BFPFgPcXW4TOCVytlO0/XWc=)
2: l_5sj0n83h1j-KNddGTmHYrghYs.roa (hash: lWD+ja9YbtyG1MA96ufKgRHVHut4712gK2auViaR/PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:fc:f7:76:5c:f2:2f:f8:8a:e4:b4:33:70:11:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Validity
Not Before: Oct 11 03:02:00 2026 GMT
Not After : Oct 12 03:02:00 2026 GMT
Subject: CN=165cfd50812097da8b086f949888b4d3188a0658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:c5:6f:e2:ef:19:60:c2:99:b2:03:0e:50:
88:48:12:a4:0f:b8:22:18:d4:c3:3c:9b:23:83:2e:
78:72:83:82:4b:f1:ea:4d:f5:d9:28:3a:dd:19:54:
41:ac:83:d1:3b:fb:14:89:a5:5c:a3:9d:0a:8b:77:
45:99:fe:91:3e:3b:4d:8b:b5:8f:99:cc:17:1d:84:
e7:b2:06:1a:a4:6c:a9:0b:7d:08:36:96:3e:fd:8c:
70:8c:1e:b3:82:35:b6:a5:83:53:16:83:6d:82:66:
7b:b6:fe:e5:94:27:64:5c:d6:aa:c7:11:4c:9a:10:
5d:e1:d5:81:2b:5f:70:a4:15:ea:eb:b1:a3:d5:70:
28:bb:fd:a2:1e:fc:5b:49:de:e2:5e:84:d8:5e:48:
3a:cf:05:72:4b:ab:45:e3:05:b5:43:47:2d:9b:08:
35:7e:97:56:24:2f:34:8e:c6:8e:2b:40:30:14:39:
06:14:18:1e:ed:12:1f:01:11:cc:b7:b3:52:db:d9:
44:37:89:0b:10:e6:1b:2b:12:48:12:19:89:20:78:
ac:69:49:7c:35:d2:60:f5:83:7c:f4:88:9d:f2:58:
d2:d5:0d:83:66:37:08:78:6f:c8:eb:73:8e:43:a5:
01:41:ae:73:ef:c7:23:f8:ae:e5:53:8f:14:3d:56:
eb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5C:FD:50:81:20:97:DA:8B:08:6F:94:98:88:B4:D3:18:8A:06:58
X509v3 Authority Key Identifier:
keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3c:bb:d8:19:b1:7b:31:10:53:d8:cb:a3:90:65:fb:1a:bb:
d8:fd:c2:5c:8a:12:ed:58:fa:f5:a7:ff:5c:bd:96:7d:dc:5f:
0b:78:22:ae:a3:85:75:c3:2e:de:23:74:eb:38:c9:0d:dc:f7:
9e:32:44:2c:b5:67:69:cf:17:bf:7a:e5:b6:9a:5f:b0:83:a8:
cc:5a:39:1a:a2:55:4e:f6:02:10:93:9c:f7:78:e5:b4:74:1c:
82:24:ef:d1:10:a2:e0:63:a5:9c:39:22:05:fd:36:8f:d2:ea:
01:a5:5b:0f:5c:37:61:f9:08:a5:a8:a9:96:1d:70:16:d7:b8:
35:03:16:86:7a:39:cd:b5:af:43:56:b7:b9:d2:56:a5:41:ed:
ab:0d:8f:33:c7:1c:bb:86:f3:06:6a:4b:28:bc:b5:0f:47:5b:
44:91:1c:ed:1b:11:1d:aa:bf:90:b5:8f:48:3d:18:27:ff:28:
d5:99:7b:cc:4b:d0:aa:92:7b:3c:27:27:66:2f:9d:d9:89:12:
26:c8:d9:ed:82:f0:22:5a:b1:ee:f7:04:21:84:59:2e:a4:4a:
f1:d6:38:f7:4e:66:4e:2c:65:80:06:de:63:1e:87:b5:d1:af:
18:8d:a0:58:93:27:4a:c3:81:4a:f0:a7:ea:b0:49:ab:39:90:
b8:4f:d6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:25:20 2026 by rpki-client