Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier: 78fxH4Oxn+3SR5ZJ9eQiQ4CqzXL0YmLcQFwqnOGYpGk=
Subject key identifier: C9:8A:45:61:39:1B:61:4F:94:F0:69:49:C9:D8:EB:30:0E:15:33:6B
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 019CADC821C973A69398482A07B925AE2335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number: 0563
Signing time: Mon 02 Mar 2026 09:01:40 +0000
Manifest this update: Mon 02 Mar 2026 09:01:40 +0000
Manifest next update: Tue 03 Mar 2026 09:01:40 +0000
Files and hashes: 1: 6ztTDGBSEjfUz5YPUm3xJqrFtBQ.roa (hash: NaCtdBF9yWOeFeahp2D+pL4fXJjohl4aTNmTP8dCNsQ=)
2: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: WtrdmVIgTpcncaXRM6YFO4YiSYOQxga7vl77tdC4dZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:21:c9:73:a6:93:98:48:2a:07:b9:25:ae:23:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: Mar 2 09:01:40 2026 GMT
Not After : Mar 3 09:01:40 2026 GMT
Subject: CN=c98a4561391b614f94f06949c9d8eb300e15336b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:78:a9:45:f0:56:3c:6b:cf:5d:ab:85:d0:ed:
32:36:59:7c:4a:6c:1d:f7:1e:8c:7b:5e:66:e3:e4:
90:4f:81:1f:99:b0:8a:4c:08:84:87:c3:ab:d8:db:
c1:8b:10:94:97:f9:54:2d:1d:cf:c3:f6:bc:32:be:
7f:f9:ba:0e:86:b3:89:74:7c:16:b8:11:28:74:3d:
70:ae:d5:74:51:68:c2:6a:ee:b9:3a:22:0a:3f:c5:
12:31:91:b1:ec:9f:5b:d6:50:11:35:e5:c6:4a:0a:
50:e3:e3:fd:80:44:4e:34:5c:58:8d:5e:71:2e:6f:
b9:72:c7:29:f0:e6:02:a6:0a:6a:1d:7b:74:4e:21:
f4:37:0c:3f:8e:c0:79:91:63:a2:53:5d:d3:cb:dd:
37:8e:dd:e4:69:6c:31:f0:7e:f3:bf:09:c0:2c:8e:
40:02:0c:c8:96:e4:9a:65:eb:d9:58:ca:0e:63:77:
db:3f:b4:c1:d4:91:24:29:cd:53:47:a4:00:14:d1:
77:91:e9:90:3a:76:ee:2f:e8:ee:eb:38:cd:f3:09:
91:da:d7:14:d0:85:e0:41:b6:23:33:72:5e:c1:43:
59:81:ab:2e:1e:68:64:16:9d:b1:85:ee:a8:a8:d3:
9d:04:95:a9:e5:c5:da:c3:36:e0:ee:39:78:0e:53:
60:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8A:45:61:39:1B:61:4F:94:F0:69:49:C9:D8:EB:30:0E:15:33:6B
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ff:ef:83:9c:d1:e2:47:21:d0:d3:62:27:b5:31:93:84:a1:
b4:9b:db:a4:62:2b:25:b8:c3:2a:af:fa:93:42:db:fd:16:0f:
e8:0e:9b:8f:4c:da:48:62:7d:89:f2:e7:47:56:ef:19:42:91:
6e:a7:52:07:35:3c:73:c0:a3:83:19:23:30:f4:bf:2c:58:b4:
3e:b6:ba:58:ae:32:73:91:11:e0:18:c5:48:ab:89:c1:d4:cc:
85:1a:f0:1c:24:98:0f:4b:7b:c8:7b:40:43:40:16:b5:a4:fc:
d3:3e:c6:71:92:62:47:a3:18:bd:e5:df:ca:25:8b:96:77:08:
ea:31:13:a0:7c:32:2e:11:d9:59:af:bd:2a:fa:cb:49:e2:d5:
6f:cd:8a:dd:fd:ef:b6:ad:14:c1:fc:a5:f9:a3:f4:d4:af:f6:
d2:c6:81:b6:66:0c:f0:53:32:17:3e:44:fd:28:c9:ab:25:ef:
54:5d:40:a6:bb:0e:bf:ab:9a:3f:b8:eb:16:8a:d3:92:fa:95:
3d:a2:09:f6:62:e5:d2:38:a0:ce:90:c5:96:5a:4b:0d:30:dd:
66:4b:00:c2:81:57:4a:ea:17:89:3b:cb:a2:ed:1d:be:06:bd:
fb:33:26:ad:de:b2:97:6d:6e:2b:f3:d0:18:7d:a2:6d:9f:e2:
6f:11:27:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:32 2026 by rpki-client