Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier: Omlok/LQrjfacsTwmVq5zn36VxKaBIBm5N4ZaE9f7kY=
Subject key identifier: BA:D6:F7:1F:9A:CF:C3:88:F7:30:52:7D:54:8B:42:B8:15:02:01:D3
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 01A0BEB0C10D895507727CE8DAA28BCCFD6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number: 077E
Signing time: Sun 20 Sep 2026 12:00:49 +0000
Manifest this update: Sun 20 Sep 2026 12:00:49 +0000
Manifest next update: Mon 21 Sep 2026 12:00:49 +0000
Files and hashes: 1: 6ztTDGBSEjfUz5YPUm3xJqrFtBQ.roa (hash: NaCtdBF9yWOeFeahp2D+pL4fXJjohl4aTNmTP8dCNsQ=)
2: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: xauagMIRsKdyMSGs56G/fnjxMmgWEOQDw/+OsT+UMeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:c1:0d:89:55:07:72:7c:e8:da:a2:8b:cc:fd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: Sep 20 12:00:49 2026 GMT
Not After : Sep 21 12:00:49 2026 GMT
Subject: CN=bad6f71f9acfc388f730527d548b42b8150201d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:08:a6:b7:36:ea:12:59:0a:77:1e:79:6a:
38:60:fa:67:d4:6c:5e:cb:73:6b:84:de:ff:f1:85:
56:64:d5:f6:2e:4a:ba:b1:cf:23:da:20:6c:cd:ad:
39:e6:58:4b:56:eb:27:15:03:4d:1f:3c:a9:a2:9b:
a3:76:f8:03:e5:15:f3:fb:90:bb:34:e5:c9:c6:a6:
83:31:18:dc:ce:a4:de:aa:6e:7a:5d:fd:bb:81:3f:
e5:fb:5b:b5:26:a0:82:97:57:60:68:c4:46:05:82:
c2:75:2a:02:71:6f:61:ee:45:b1:7e:e0:a2:c1:16:
3e:73:e4:6f:7f:50:c4:db:c2:ea:9e:3a:96:70:8e:
25:b4:07:66:8f:c7:eb:44:a6:4c:07:e2:33:ad:97:
f7:74:03:47:01:f5:5c:5a:6e:91:17:16:88:f3:98:
a5:a7:11:ea:07:fb:ab:0d:56:39:90:48:85:23:4d:
64:6b:a3:d7:5a:d8:8c:f3:44:7c:51:00:9b:5b:9d:
3e:69:0c:6d:87:f5:4f:33:e2:a6:18:5c:94:4d:ec:
13:42:24:cd:2f:4d:45:7e:53:6d:58:50:04:3f:7f:
fb:ed:07:b0:bb:7e:b0:64:63:72:17:d5:f8:af:f8:
17:ee:52:23:b7:9e:31:ac:79:18:46:3f:b4:9b:4e:
ec:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D6:F7:1F:9A:CF:C3:88:F7:30:52:7D:54:8B:42:B8:15:02:01:D3
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:61:ad:f2:51:78:a5:0c:75:44:6d:df:27:a9:58:9f:13:6d:
03:09:84:ba:2b:90:3f:88:c1:c1:43:f5:ed:4b:fc:b5:ad:a2:
5b:8f:00:12:42:d9:b2:db:7e:1c:00:ab:de:cf:d1:f1:06:4a:
d0:ee:14:6d:d2:35:5a:cd:bc:00:b4:59:d4:6b:b9:da:07:ad:
f3:8f:91:84:ef:56:52:ac:15:61:36:2b:86:ca:9f:73:c4:c8:
c5:59:fe:71:dd:87:e2:5b:66:64:13:8b:3a:75:d7:18:7f:80:
3a:46:8f:01:6f:34:36:3d:a1:d0:98:45:4f:bb:cd:2e:d8:9d:
f5:a3:f6:14:64:d8:06:55:88:2b:09:60:20:db:d3:73:45:8f:
72:dd:da:43:a1:76:eb:ea:ef:f5:01:aa:1d:1a:3f:f0:78:24:
c2:6d:33:62:ab:5d:ba:b5:f1:01:02:31:9b:be:06:12:27:4d:
c1:fd:87:9d:b6:15:f2:2b:5b:e4:cc:1e:d8:8d:ea:31:12:6b:
18:92:fc:28:2b:d1:75:ef:d6:ce:92:b5:3a:6a:d8:19:80:b7:
e9:5e:81:45:dd:72:e6:c4:35:67:db:af:4e:a5:a0:1e:e5:1f:
71:cf:95:f1:d0:65:e6:83:6b:53:3d:e6:06:16:d4:04:ea:0c:
57:17:b0:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+sMENiVUHcnzo2qKLzP1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYjYyMzcxZWM2MmVmZDBmNDM4NWZhMDQ3MzA1NmYwODgx
OGRlNzMwHhcNMjYwOTIwMTIwMDQ5WhcNMjYwOTIxMTIwMDQ5WjAzMTEwLwYDVQQD
EyhiYWQ2ZjcxZjlhY2ZjMzg4ZjczMDUyN2Q1NDhiNDJiODE1MDIwMWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKQIprc26hJZCnceeWo4YPpn1Gxe
y3NrhN7/8YVWZNX2Lkq6sc8j2iBsza055lhLVusnFQNNHzypopujdvgD5RXz+5C7
NOXJxqaDMRjczqTeqm56Xf27gT/l+1u1JqCCl1dgaMRGBYLCdSoCcW9h7kWxfuCi
wRY+c+Rvf1DE28LqnjqWcI4ltAdmj8frRKZMB+IzrZf3dANHAfVcWm6RFxaI85il
pxHqB/urDVY5kEiFI01ka6PXWtiM80R8UQCbW50+aQxth/VPM+KmGFyUTewTQiTN
L01FflNtWFAEP3/77Qewu36wZGNyF9X4r/gX7lIjt54xrHkYRj+0m07s9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrW9x+az8OI9zBSfVSLQrgVAgHTMB8GA1UdIwQY
MBaAFKK2I3HsYu/Q9DhfoEcwVvCIGN5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8wYmU1NTEtZDYwZC00OWJiLThjYWQt
Njc1ZTA3MjM1NjU3LzEvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8wYmU1NTEtZDYwZC00OWJiLThjYWQtNjc1ZTA3MjM1NjU3
LzEvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmGt8lF4
pQx1RG3fJ6lYnxNtAwmEuiuQP4jBwUP17Uv8ta2iW48AEkLZstt+HACr3s/R8QZK
0O4UbdI1Ws28ALRZ1Gu52get84+RhO9WUqwVYTYrhsqfc8TIxVn+cd2H4ltmZBOL
OnXXGH+AOkaPAW80Nj2h0JhFT7vNLtid9aP2FGTYBlWIKwlgINvTc0WPct3aQ6F2
6+rv9QGqHRo/8Hgkwm0zYqtdurXxAQIxm74GEidNwf2HnbYV8itb5Mwe2I3qMRJr
GJL8KCvRde/WzpK1OmrYGYC36V6BRd1y5sQ1Z9uvTqWgHuUfcc+V8dBl5oNrUz3m
BhbUBOoMVxewJw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:21:09 2026 by rpki-client