Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier: yezyUdhAw4u/XXbZ+tcSraFoUuCMl3sZ6dy7Je2JUhA=
Subject key identifier: F9:8A:C8:AB:F0:59:D3:7C:C0:D6:62:0E:D9:50:33:35:67:40:0B:74
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 01A12AD640739E9358E42AA7F20806B1D4EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number: 1A3D
Signing time: Sun 11 Oct 2026 12:00:46 +0000
Manifest this update: Sun 11 Oct 2026 12:00:46 +0000
Manifest next update: Mon 12 Oct 2026 12:00:46 +0000
Files and hashes: 1: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: NDqwczIK/rv+tqRHa2wXBh2o9zPoV8yEA1Q2ZwwHXTQ=)
2: s7RCJecrkvhO4O8n4hnHhMn63mI.roa (hash: RMUboypqGxzOTuEkOaIhesKwecXYlREEbxutxlq+fCs=)
3: yhoQSW5m0HxnhBThODAYvKmDatA.roa (hash: Zj3xva8IbUjYyCWlM9IRCPCWul21ZtyOBPZl0zgZK3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:40:73:9e:93:58:e4:2a:a7:f2:08:06:b1:d4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Oct 11 12:00:46 2026 GMT
Not After : Oct 12 12:00:46 2026 GMT
Subject: CN=f98ac8abf059d37cc0d6620ed950333567400b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:d6:af:f5:cb:d1:22:13:a8:7b:7d:b1:d6:
cc:23:b8:7d:ec:60:0b:33:09:58:9a:cf:f3:fc:77:
e9:82:05:5a:fa:a1:61:52:f6:0a:78:d1:b3:3d:b3:
7d:fd:9a:b1:c6:82:ec:62:cf:f8:77:84:ec:32:b0:
ba:b3:ef:57:26:10:71:45:68:db:bf:c0:48:ef:22:
70:67:75:e5:db:46:ed:b9:c8:7a:48:38:eb:19:51:
bd:38:0c:c3:3b:50:59:5d:6c:90:6e:a3:51:35:a4:
5b:b4:a2:40:ab:9a:45:a8:ff:bd:75:2f:19:b2:31:
6b:1f:de:9b:86:6d:44:77:7b:ae:cd:e5:b1:0e:ac:
c7:be:fa:ee:82:35:af:ff:85:b6:8e:63:52:fe:54:
15:d7:cb:44:de:30:fb:1f:98:48:66:8e:04:24:28:
48:55:86:69:c7:f2:76:62:37:d9:60:ee:9b:df:5f:
b6:c1:e8:78:53:85:81:f2:7f:38:39:a6:0c:b5:ab:
c7:2c:70:39:f1:e5:6c:92:21:b3:2b:ce:12:f2:dd:
f9:7d:0d:7b:2b:ce:fb:6d:6d:02:e0:b7:6f:bc:51:
2c:f2:1f:0d:5a:04:73:ef:27:0f:70:b4:f5:bf:23:
24:2f:ea:5f:e9:57:0c:39:8a:d6:7d:ec:93:dd:41:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8A:C8:AB:F0:59:D3:7C:C0:D6:62:0E:D9:50:33:35:67:40:0B:74
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:dc:15:99:bd:23:9b:a1:1c:3f:29:1a:89:1a:e8:bc:30:f9:
09:bc:54:99:ce:6b:51:cf:57:4c:09:df:0f:05:81:49:9b:5a:
35:2d:43:57:98:65:b1:a1:67:fa:77:89:60:3e:75:ba:ce:b2:
0d:df:0a:95:3f:93:d3:ba:d8:3c:90:17:51:3d:6e:48:91:de:
2d:bd:3f:38:8a:9a:5f:30:8f:1c:dd:a2:df:a1:22:bb:63:d6:
59:7e:60:2d:8a:ef:e7:5c:8e:b4:da:0c:f9:c6:34:87:a1:0a:
cb:65:e8:ba:9e:1f:97:fe:fc:f1:d1:35:bb:a4:71:06:c6:86:
ab:b5:13:55:1c:29:8c:4d:6a:23:7d:9a:8e:a4:58:85:4c:63:
5f:87:e6:90:89:97:c1:65:8d:35:61:e1:fc:f4:eb:31:a6:d1:
7a:ac:ce:bd:26:02:97:1b:30:24:5f:d3:a3:6c:b6:60:bc:2f:
ce:90:7d:09:a3:63:b2:a2:8b:bc:16:0e:f1:29:e6:1c:23:07:
8b:b7:33:50:35:83:7e:d0:a6:83:73:af:f7:24:96:7c:25:37:
79:48:89:af:27:45:ca:97:c4:4b:db:e3:9f:fd:fe:dc:f7:10:
5c:fe:a7:98:bb:29:33:d9:1d:13:22:da:6c:37:8a:c9:b2:6b:
dc:d8:54:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:08:15 2026 by rpki-client