Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
File: Or4W6uZkLTO7wPuQzeI0_QITRwk.mft (raw, json)
Hash identifier: oSqpAhT8H5oUmmsRdLxbHXjllzXfIL+nmrC+6WF8T54=
Subject key identifier: E0:91:71:28:D5:62:59:AF:E1:16:3F:14:31:48:C6:87:51:9B:EA:0C
Authority key identifier: 3A:BE:16:EA:E6:64:2D:33:BB:C0:FB:90:CD:E2:34:FD:02:13:47:09
Certificate issuer: /CN=3abe16eae6642d33bbc0fb90cde234fd02134709
Certificate serial: 01A0CB907F0E95D01F0278E6909487AF5B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
Manifest number: 012D
Signing time: Wed 23 Sep 2026 00:00:39 +0000
Manifest this update: Wed 23 Sep 2026 00:00:39 +0000
Manifest next update: Thu 24 Sep 2026 00:00:39 +0000
Files and hashes: 1: Or4W6uZkLTO7wPuQzeI0_QITRwk.crl (hash: TpmC8yNVuNzOCOAfzIYwlt5hv5HGnHEry4ny4ZpX9UU=)
2: P-NUTyH2nVmRcyECHCRmEz-xvik.roa (hash: qicAikWH5uUaAqp5U7Os+UidSM1o4zOBz4zwJdo3kRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:7f:0e:95:d0:1f:02:78:e6:90:94:87:af:5b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3abe16eae6642d33bbc0fb90cde234fd02134709
Validity
Not Before: Sep 23 00:00:39 2026 GMT
Not After : Sep 24 00:00:39 2026 GMT
Subject: CN=e0917128d56259afe1163f143148c687519bea0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:d4:9c:fd:28:72:e2:a7:87:ca:f4:fe:ef:
b3:a4:3e:d6:43:17:57:79:85:2f:bb:98:b4:86:ef:
41:ae:ba:4e:3f:60:ea:0f:9a:a8:4b:39:0b:89:62:
f0:4c:06:0d:db:3b:28:a5:0f:5f:fc:aa:8f:da:22:
77:11:fa:c8:af:6a:29:e6:95:4f:d9:4e:6d:dc:e7:
e8:46:65:ad:94:1b:95:ff:4f:fa:89:97:ed:96:85:
8b:54:30:13:ea:7d:27:03:5f:88:0d:2c:28:74:70:
00:8c:4c:90:1e:07:30:66:8c:11:73:12:a0:1d:42:
ad:5e:ba:91:2d:76:ad:db:21:63:66:67:91:bb:9e:
1a:61:1d:52:41:f7:db:27:df:a8:b4:c8:23:a3:b0:
83:28:8e:5a:83:40:a9:67:42:90:1f:98:53:ab:16:
24:08:ca:bb:2e:20:5b:ff:4f:65:43:8f:4e:d5:f8:
33:49:3e:e4:e0:27:74:7b:de:11:52:09:85:aa:79:
bb:f0:ec:d7:2c:63:c8:aa:9a:c8:57:aa:23:03:78:
67:e2:b0:7e:c1:54:c2:3f:cf:7d:1f:d8:91:d1:0c:
c5:68:eb:d3:8e:25:08:ae:14:55:ee:00:e1:c9:ec:
95:06:12:b9:1d:6d:95:96:6b:e8:f9:fa:20:e3:c1:
89:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:91:71:28:D5:62:59:AF:E1:16:3F:14:31:48:C6:87:51:9B:EA:0C
X509v3 Authority Key Identifier:
keyid:3A:BE:16:EA:E6:64:2D:33:BB:C0:FB:90:CD:E2:34:FD:02:13:47:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:be:05:b5:df:bb:0e:6e:27:fb:b4:38:fd:0d:37:73:8e:8e:
50:11:af:b9:db:8b:89:ef:50:97:72:0a:75:13:cb:9d:d7:86:
c4:40:9f:d7:4a:b4:9b:1a:bf:7c:94:f2:1c:73:dd:54:82:6e:
d6:29:b5:1a:21:82:31:a5:6b:c8:56:2a:ca:19:d2:48:26:98:
b6:74:81:93:d3:93:ed:2b:d6:7d:71:2b:67:37:30:c5:c6:58:
75:b7:5e:31:82:9b:bc:ad:46:da:0e:48:2b:9b:b2:b5:9c:6e:
53:25:cf:22:29:a9:71:1d:83:51:aa:f1:22:85:aa:50:32:52:
e1:c9:0a:5b:f6:1e:54:3d:b1:af:18:58:b8:9f:95:93:0a:64:
26:6e:da:ba:2c:3e:a3:41:f7:21:65:00:3e:d9:85:22:53:28:
67:02:a6:ca:f1:22:91:8f:a2:66:a8:34:b1:89:91:e9:da:05:
42:50:e7:93:2c:86:dd:47:4b:92:58:8d:15:02:a9:97:6a:68:
c0:47:47:be:95:24:bc:75:4d:45:2a:63:bd:ae:39:ff:35:29:
3d:05:b4:94:6c:79:19:11:d5:ef:fd:75:7d:00:4a:f5:c4:c6:
62:53:a3:4a:60:22:45:f2:4e:02:12:8f:f4:00:c1:01:f8:8b:
06:89:ac:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:42:23 2026 by rpki-client