
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier: FB0XbGdRKoaLgTncWU7d+Zi3/W6y5txX0LFECvt/S0g=
Subject key identifier: AF:8B:8F:7A:0E:C3:FD:19:0F:56:4D:DD:EF:98:DA:D6:2B:37:8B:59
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 019EC2C95C0E3D98B10588014F728E3162DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number: 18FE
Signing time: Sat 13 Jun 2026 21:00:36 +0000
Manifest this update: Sat 13 Jun 2026 21:00:36 +0000
Manifest next update: Sun 14 Jun 2026 21:00:36 +0000
Files and hashes: 1: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: BHQz1A7Ke9VZnBbVs0rhsz1WG95e+vLikeJg6FmBNd8=)
2: s7RCJecrkvhO4O8n4hnHhMn63mI.roa (hash: RMUboypqGxzOTuEkOaIhesKwecXYlREEbxutxlq+fCs=)
3: yhoQSW5m0HxnhBThODAYvKmDatA.roa (hash: Zj3xva8IbUjYyCWlM9IRCPCWul21ZtyOBPZl0zgZK3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:5c:0e:3d:98:b1:05:88:01:4f:72:8e:31:62:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Jun 13 21:00:36 2026 GMT
Not After : Jun 14 21:00:36 2026 GMT
Subject: CN=af8b8f7a0ec3fd190f564dddef98dad62b378b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0b:4c:f1:2b:fd:4a:17:23:99:0d:2d:15:c7:
d0:5a:f5:31:42:72:df:94:af:1f:4a:dc:93:ec:8a:
97:e3:c4:39:86:30:07:6b:8c:4a:4f:93:59:04:a7:
c8:6c:70:22:8f:a4:7a:82:4d:a0:11:4d:2a:75:a8:
ee:ae:3d:cf:8b:1e:4a:2e:0a:8d:6a:3e:9c:96:fc:
e4:e6:0a:10:b1:14:9f:ca:fc:4b:1e:94:d8:36:d6:
41:0b:3e:a5:ad:7f:ec:27:7f:d4:81:5a:a6:9b:eb:
b1:60:c6:12:ac:c0:53:ba:a0:dd:cd:b3:bc:06:de:
93:76:e7:c2:d7:b1:c3:c1:46:1c:76:07:06:73:62:
f5:9e:6b:b9:5f:33:20:d3:51:ed:67:c7:10:64:b4:
77:ae:b1:21:a7:83:f7:95:22:99:53:30:7c:a9:6d:
4c:ce:80:42:49:96:21:09:64:bb:f7:71:76:46:e6:
6e:8a:60:ef:3f:e2:74:51:72:84:57:7b:ef:a9:b9:
bc:86:30:34:9d:83:63:5b:2c:10:4f:a3:6d:d1:b0:
9e:f8:2e:91:4b:87:87:75:36:31:d3:b0:ee:9d:c0:
f1:4a:10:52:28:0b:54:62:fd:cb:d0:d2:c4:4d:cf:
12:13:34:4a:69:4b:3d:34:b3:04:5c:16:2e:d4:4f:
0a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8B:8F:7A:0E:C3:FD:19:0F:56:4D:DD:EF:98:DA:D6:2B:37:8B:59
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:7d:9b:8d:b7:d7:0a:1e:64:62:28:c2:b1:1c:65:28:23:0f:
53:b0:49:5c:55:57:03:98:9f:2e:c8:52:78:4c:4b:37:5d:5e:
b2:15:00:ea:dc:1d:b8:ac:40:0e:73:5b:9f:bb:38:b6:64:aa:
55:1f:6f:9e:99:dd:dd:9b:f2:e4:29:7e:e5:de:27:0f:af:48:
f5:5b:1d:8f:dd:33:8b:dd:25:93:89:4d:01:51:a7:13:ad:bc:
0c:cf:2f:98:95:5a:6e:d0:23:fe:1a:46:11:76:61:1e:f0:e4:
bc:d1:75:ec:ce:a5:3b:e7:06:e0:74:f7:f7:8a:06:f5:0a:bc:
02:2b:01:53:a0:05:69:3a:a1:94:8d:fd:9d:c3:51:82:25:3c:
cf:7d:f5:b9:e1:d4:d6:d5:4a:db:96:bd:6c:f6:06:47:51:9c:
62:07:60:91:ac:33:f0:9f:69:37:54:32:f4:91:17:5f:30:2e:
0f:d9:5c:b9:57:65:8b:d8:7e:f0:22:e9:36:f1:bc:82:7c:9f:
20:29:07:ca:61:ee:b4:73:5b:2a:56:5e:a6:1c:0b:cd:34:38:
d6:1f:0e:9e:d3:5b:eb:f8:82:1e:4b:a8:8f:7c:94:a9:70:fb:
e7:d5:18:87:35:f2:e4:d4:55:ae:10:4b:42:e1:14:76:47:50:
46:80:6a:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyVwOPZixBYgBT3KOMWLdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MWEwZWNjMmI5YmVhYmE5ZWI3NmQ1NTE5ZmU3ODdiNDAz
M2ZjMTIwHhcNMjYwNjEzMjEwMDM2WhcNMjYwNjE0MjEwMDM2WjAzMTEwLwYDVQQD
EyhhZjhiOGY3YTBlYzNmZDE5MGY1NjRkZGRlZjk4ZGFkNjJiMzc4YjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wtM8Sv9ShcjmQ0tFcfQWvUxQnLf
lK8fStyT7IqX48Q5hjAHa4xKT5NZBKfIbHAij6R6gk2gEU0qdajurj3Pix5KLgqN
aj6clvzk5goQsRSfyvxLHpTYNtZBCz6lrX/sJ3/UgVqmm+uxYMYSrMBTuqDdzbO8
Bt6TdufC17HDwUYcdgcGc2L1nmu5XzMg01HtZ8cQZLR3rrEhp4P3lSKZUzB8qW1M
zoBCSZYhCWS793F2RuZuimDvP+J0UXKEV3vvqbm8hjA0nYNjWywQT6Nt0bCe+C6R
S4eHdTYx07DuncDxShBSKAtUYv3L0NLETc8SEzRKaUs9NLMEXBYu1E8KmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+Lj3oOw/0ZD1ZN3e+Y2tYrN4tZMB8GA1UdIwQY
MBaAFDkaDswrm+q6nrdtVRn+eHtAM/wSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jMjdjZDEtNTcwYi00N2QxLWIyNTYt
MTgxNDIyM2Q5MmNlLzEvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9jMjdjZDEtNTcwYi00N2QxLWIyNTYtMTgxNDIyM2Q5MmNl
LzEvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsX2bjbfX
Ch5kYijCsRxlKCMPU7BJXFVXA5ifLshSeExLN11eshUA6twduKxADnNbn7s4tmSq
VR9vnpnd3Zvy5Cl+5d4nD69I9Vsdj90zi90lk4lNAVGnE628DM8vmJVabtAj/hpG
EXZhHvDkvNF17M6lO+cG4HT394oG9Qq8AisBU6AFaTqhlI39ncNRgiU8z331ueHU
1tVK25a9bPYGR1GcYgdgkawz8J9pN1Qy9JEXXzAuD9lcuVdli9h+8CLpNvG8gnyf
ICkHymHutHNbKlZephwLzTQ41h8OntNb6/iCHkuoj3yUqXD759UYhzXy5NRVrhBL
QuEUdkdQRoBqGQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:44:02 2026 by rpki-client