
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier: LlVn4CR67CkWXjwyHKcetXvfmwLLeorGU7S8iA6HQHo=
Subject key identifier: 58:1D:D7:DA:26:6A:0B:B4:60:DA:45:4B:05:4E:2B:EC:75:E7:47:56
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 019EC2C98F325D9C087C7E49D60D050C4C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number: 0677
Signing time: Sat 13 Jun 2026 21:00:49 +0000
Manifest this update: Sat 13 Jun 2026 21:00:49 +0000
Manifest next update: Sun 14 Jun 2026 21:00:49 +0000
Files and hashes: 1: 6ztTDGBSEjfUz5YPUm3xJqrFtBQ.roa (hash: NaCtdBF9yWOeFeahp2D+pL4fXJjohl4aTNmTP8dCNsQ=)
2: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: Uh9r7qzu3EzNm3wKoKNPof7x8L9y3hLgaLPvdeDa6Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:8f:32:5d:9c:08:7c:7e:49:d6:0d:05:0c:4c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: Jun 13 21:00:49 2026 GMT
Not After : Jun 14 21:00:49 2026 GMT
Subject: CN=581dd7da266a0bb460da454b054e2bec75e74756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:2a:e7:e7:ce:71:8e:31:cc:0a:87:f3:50:
4e:06:ca:ac:c6:63:02:0e:12:7d:6f:96:ff:78:8f:
ce:df:45:b8:17:96:e2:23:b4:7b:e6:7a:4f:3b:b7:
57:1c:4d:40:de:e0:4e:8a:04:9d:5e:d6:00:d2:8c:
13:f7:6b:7b:5f:e0:57:0d:60:3d:13:84:6d:1c:83:
36:2a:38:9d:26:c7:04:5e:98:09:0a:90:f3:1e:2d:
70:33:0e:a0:2d:bd:c3:90:84:9e:90:c7:38:40:76:
df:1c:87:39:8a:98:1b:95:9b:2f:a3:83:24:f3:3b:
5e:12:90:9f:e3:ea:94:a3:5d:4c:61:0e:73:67:eb:
db:2f:c6:8b:a3:49:23:65:4d:bf:21:d2:d3:f6:fc:
ba:81:01:e8:8c:41:a7:cd:86:6b:c3:28:4e:46:49:
0b:39:00:c8:06:26:ce:26:0e:4e:5b:09:e5:79:b5:
47:79:6a:4b:bc:c8:27:1f:c2:d4:9a:2c:ed:0c:05:
0b:c1:4e:9f:09:c4:5c:a1:f0:bb:4b:25:47:ee:77:
41:00:35:dd:ed:05:5a:44:bd:08:f5:fa:c1:32:e3:
6a:07:6e:ca:88:33:43:5d:73:37:3d:c2:84:74:14:
6d:10:33:13:97:b9:b3:dc:60:e5:ea:5a:96:99:9f:
4a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1D:D7:DA:26:6A:0B:B4:60:DA:45:4B:05:4E:2B:EC:75:E7:47:56
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:de:a7:bd:45:5a:28:16:db:04:4c:f3:2f:e9:35:fc:b7:d9:
0b:0c:84:57:d2:88:17:8a:c7:de:ab:e7:28:99:e8:e3:d8:32:
2b:5b:67:c9:d2:87:23:2a:b0:e4:ce:a9:6b:1e:09:15:a1:cc:
cb:d3:41:59:0f:49:ed:8e:bd:3d:de:9c:93:d5:cc:60:2e:9a:
d9:90:f2:58:90:48:66:94:08:45:5d:7e:50:70:cf:68:e2:92:
be:a1:94:f5:55:d4:30:ec:09:e4:8f:48:8d:81:85:5b:38:9d:
5b:fa:91:a5:e7:3e:c3:78:05:60:52:d0:76:34:89:b4:6f:0a:
79:f5:59:be:d6:5c:be:40:19:c7:66:c6:d8:a4:89:8e:ad:01:
1e:44:d4:43:a3:11:a7:17:6e:11:89:15:d1:20:14:80:9b:58:
48:5d:90:de:81:0e:89:cf:87:37:a8:be:42:c5:d7:41:94:8f:
55:54:83:a7:93:2a:02:e4:74:9e:07:a5:5d:3e:3c:bf:d6:39:
a7:02:b3:ad:48:ff:24:c5:36:54:bd:22:31:1f:ed:64:51:05:
65:82:62:f2:89:f2:fa:17:14:4d:b4:2e:8a:5f:1e:27:c5:9b:
5f:34:07:05:58:dc:16:bc:56:f8:d4:b5:85:78:b5:39:d0:50:
ee:9f:1b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:09:44 2026 by rpki-client