Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier: EbYtzInRABtJhd5hvzJWT4FNwhIhqbmHA6Ez8Y1CRYM=
Subject key identifier: C7:77:B9:2F:FC:18:87:E8:BD:B8:99:ED:BB:BD:F8:98:6C:16:8A:A9
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 019FAC766D3920E2364D16B9458E2A6045A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number: 1977
Signing time: Wed 29 Jul 2026 06:01:10 +0000
Manifest this update: Wed 29 Jul 2026 06:01:10 +0000
Manifest next update: Thu 30 Jul 2026 06:01:10 +0000
Files and hashes: 1: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: r9QP9T4qbX98Qdk35p2oudPbivHaY+SrLVSg3+0nVL4=)
2: s7RCJecrkvhO4O8n4hnHhMn63mI.roa (hash: RMUboypqGxzOTuEkOaIhesKwecXYlREEbxutxlq+fCs=)
3: yhoQSW5m0HxnhBThODAYvKmDatA.roa (hash: Zj3xva8IbUjYyCWlM9IRCPCWul21ZtyOBPZl0zgZK3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:6d:39:20:e2:36:4d:16:b9:45:8e:2a:60:45:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Jul 29 06:01:10 2026 GMT
Not After : Jul 30 06:01:10 2026 GMT
Subject: CN=c777b92ffc1887e8bdb899edbbbdf8986c168aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:d1:6d:65:25:0a:29:bc:67:a1:48:ed:4e:
ba:70:28:4d:28:5c:7f:bb:c1:96:96:3a:08:1f:7c:
f1:d8:03:65:55:46:8d:42:33:64:fa:3a:d4:0e:cc:
23:00:54:ea:b7:f7:94:73:19:ae:1a:01:87:88:28:
1c:80:e9:d6:a4:19:f8:64:e1:77:a7:a1:e8:7a:fa:
48:be:dc:af:6b:64:6c:8d:e4:a8:19:ba:2f:eb:bd:
ed:c7:14:0a:ec:9d:6c:a7:e0:5e:ba:52:52:bf:e7:
64:06:02:b4:0b:b3:6d:94:84:05:1c:44:fe:9a:d4:
a4:bd:37:85:27:86:b6:7e:67:cb:fa:7f:04:c0:87:
a8:f8:f7:6a:99:e0:63:18:d8:03:c6:76:c4:e3:1b:
51:bd:2d:49:12:cc:35:57:de:70:c0:32:df:d0:89:
65:bb:3c:4d:64:2b:a1:94:95:94:17:b1:c4:c3:c8:
e8:b1:e0:0f:b0:3d:e7:b9:9c:e3:97:df:03:de:77:
51:3e:96:e3:5e:44:91:fa:cb:7d:10:1b:04:81:66:
18:1f:f8:89:94:53:e8:ff:bf:e2:27:a7:fb:0e:03:
f2:f1:64:01:f8:67:da:8b:2a:73:e5:1c:9f:3b:58:
9a:bf:b7:f1:0c:84:08:b8:4f:f5:c3:47:5b:67:ea:
3b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:77:B9:2F:FC:18:87:E8:BD:B8:99:ED:BB:BD:F8:98:6C:16:8A:A9
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c4:87:2f:71:30:2c:6c:12:bb:f9:c9:cc:31:b4:0a:90:7c:
ae:43:10:81:75:66:0e:4f:27:2b:b9:5a:7f:36:7f:d5:3f:f0:
95:c0:08:a9:d8:28:75:7f:4f:40:fc:b4:04:c0:8a:88:54:96:
8b:bb:79:a2:e4:67:95:69:f9:4f:fe:6b:29:cf:b6:3d:e1:b2:
10:e1:dd:99:d7:56:b0:95:62:c9:55:23:52:f1:73:09:53:63:
f0:e4:87:60:ee:7f:b5:12:86:60:d6:5f:17:4c:05:72:2f:a4:
ba:8e:54:f5:40:6f:e7:2f:c8:11:9b:e4:c4:44:f8:4b:e4:cb:
a0:23:d0:40:23:63:0f:25:7c:06:a9:15:64:0b:70:81:63:64:
1b:57:ec:1a:a0:d3:a5:eb:5c:23:e0:63:5e:14:0f:0d:47:8c:
8a:6d:5a:c4:48:6b:7f:36:ee:7a:7d:5f:ab:fc:06:55:da:9b:
08:03:37:dc:50:ec:a1:fb:f2:e6:44:1b:89:46:3f:99:b4:19:
36:81:11:04:40:14:45:6d:52:cb:c8:88:4a:01:18:ee:c0:8f:
43:b4:69:1a:4a:25:7b:34:7c:a4:49:72:dd:82:cc:6b:8a:eb:
60:20:1a:9a:78:7f:0a:4e:e9:6b:8d:e5:0c:e8:07:0d:a7:b8:
5f:0a:c8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:26:28 2026 by rpki-client