Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier: Wlr3hft7m4RY+AYWSfnX7bVaXWGxCwGRJ0ssxTbly3M=
Subject key identifier: 92:1B:C2:F4:DB:77:26:9C:7D:B9:91:9A:C3:69:E8:6A:67:B5:9A:18
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 019D9962E48459E41889F2FC7D963D5C73F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number: 05DD
Signing time: Fri 17 Apr 2026 03:01:28 +0000
Manifest this update: Fri 17 Apr 2026 03:01:28 +0000
Manifest next update: Sat 18 Apr 2026 03:01:28 +0000
Files and hashes: 1: 6ztTDGBSEjfUz5YPUm3xJqrFtBQ.roa (hash: NaCtdBF9yWOeFeahp2D+pL4fXJjohl4aTNmTP8dCNsQ=)
2: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: H3EDHVtjLW9/TSaPO37xzMjVgVNiIaB7B3C2XAgYJFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:e4:84:59:e4:18:89:f2:fc:7d:96:3d:5c:73:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: Apr 17 03:01:28 2026 GMT
Not After : Apr 18 03:01:28 2026 GMT
Subject: CN=921bc2f4db77269c7db9919ac369e86a67b59a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:da:43:3e:7e:c6:86:65:0b:68:ae:92:44:
59:6a:e1:d5:f8:ae:08:04:2e:f7:38:91:37:c5:d0:
bc:24:05:40:e8:29:c0:6e:0e:e2:f2:8f:d9:46:28:
07:38:b5:59:96:a7:cd:98:6c:b0:df:5f:6c:20:41:
22:bd:01:69:d5:a0:8a:a7:2d:47:fb:4a:82:42:01:
9f:14:31:14:71:17:51:8a:fc:9a:65:ea:8b:f5:e1:
15:5d:fe:c3:5e:d7:2e:b6:d8:2c:91:ec:a3:e9:4b:
2a:57:2d:0d:34:f0:a9:94:f9:02:93:94:54:0f:8a:
77:b9:45:10:01:da:74:29:af:79:42:73:6c:70:93:
d5:94:23:61:40:fe:49:8d:7f:9a:4e:1c:00:9f:e0:
bd:47:06:72:6d:27:72:a0:9e:61:9d:3d:b6:e4:6c:
d3:be:42:87:be:93:8c:e8:94:c9:bc:6a:3d:3f:11:
ce:48:ab:72:54:34:f3:13:7b:1d:46:a8:4e:f6:2d:
05:8d:fb:1c:ab:85:94:7c:05:4d:3e:29:88:c3:72:
e6:31:1c:86:9e:d1:ea:5b:5f:0b:f4:bc:96:3d:be:
5f:58:c8:e3:66:54:f2:07:37:6d:de:90:ad:ee:dd:
44:cc:b9:c4:36:29:b3:2e:0d:20:f0:4a:e4:18:df:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1B:C2:F4:DB:77:26:9C:7D:B9:91:9A:C3:69:E8:6A:67:B5:9A:18
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:40:b8:61:91:7a:e2:15:20:78:b0:32:46:1a:4d:c9:b9:b5:
93:18:fd:e4:5e:7a:36:eb:86:a8:7e:34:b6:d1:b2:06:71:ba:
81:79:44:69:e4:8c:08:d0:2d:05:a7:3d:c4:1c:55:c0:9d:23:
0d:e2:28:ed:99:1f:11:29:40:32:41:05:a3:c4:a1:28:78:c9:
53:b8:3b:c5:f9:6b:99:d0:f1:3b:ce:b0:53:ae:10:58:0f:0d:
de:a9:ab:06:8f:b0:6c:c5:38:89:21:44:bf:f9:89:e0:12:f3:
ba:ab:80:b1:02:82:2e:68:bd:b4:4a:72:b4:aa:22:99:37:7d:
89:59:04:bf:b0:10:24:7c:ed:90:40:25:1c:0c:7e:eb:81:ea:
91:f8:93:7f:a1:32:f6:8d:3c:56:03:a3:20:87:b7:84:e5:94:
19:a6:73:50:47:5c:13:f7:bb:5c:33:ab:56:87:c4:9a:d7:eb:
e6:47:a1:a9:70:35:67:ab:4b:51:48:8a:df:58:09:97:65:b0:
ef:0f:3f:67:00:35:70:eb:ed:12:9b:f1:02:a0:77:73:43:51:
54:c7:3b:7f:b5:36:c5:25:1c:7c:52:09:5c:6b:8f:61:ed:c9:
c7:49:a2:cf:58:44:1a:a0:97:e1:bb:25:d1:c8:e2:2b:13:b9:
71:35:1e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:11 2026 by rpki-client