Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier: HvLROg1RpqqOsNJ4aCIaFQvCzVRmoH4rNB/Gr7Hk8V8=
Subject key identifier: 9D:EC:5F:AD:DF:0F:20:8E:88:EF:D7:70:6B:48:60:87:BA:B1:DA:78
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 019D9961E1434CD4FCAE3D53698B8F733D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number: 1864
Signing time: Fri 17 Apr 2026 03:00:21 +0000
Manifest this update: Fri 17 Apr 2026 03:00:21 +0000
Manifest next update: Sat 18 Apr 2026 03:00:21 +0000
Files and hashes: 1: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: FL7J/eGoKhWFCX8wVTDwundWqrdWe4JKE2mtP9c7ycs=)
2: s7RCJecrkvhO4O8n4hnHhMn63mI.roa (hash: RMUboypqGxzOTuEkOaIhesKwecXYlREEbxutxlq+fCs=)
3: yhoQSW5m0HxnhBThODAYvKmDatA.roa (hash: Zj3xva8IbUjYyCWlM9IRCPCWul21ZtyOBPZl0zgZK3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:e1:43:4c:d4:fc:ae:3d:53:69:8b:8f:73:3d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Apr 17 03:00:21 2026 GMT
Not After : Apr 18 03:00:21 2026 GMT
Subject: CN=9dec5faddf0f208e88efd7706b486087bab1da78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:30:e3:a0:73:6f:2a:a0:56:a6:7e:e6:03:00:
d8:aa:96:d5:54:9d:b9:11:81:e8:67:32:de:f4:f8:
b7:43:fc:cd:ce:3a:fb:3d:ca:58:cb:4f:7a:4d:9a:
d0:17:89:4a:7b:e5:24:d6:e6:9b:42:63:f8:3d:de:
3d:5d:e5:8c:7b:0a:3a:3b:3d:82:96:c3:b5:e3:39:
f9:be:71:7c:0c:44:44:71:d1:a1:94:76:aa:37:12:
96:a2:7a:3e:97:c1:c9:f7:76:69:e0:24:09:ef:ef:
c2:b6:d4:2e:e8:e9:a8:7f:e3:ea:61:3f:60:32:85:
e9:cd:c0:fe:4f:0b:25:be:7d:31:cc:9d:42:d8:58:
95:60:f7:4e:71:b9:39:2d:63:41:e3:c2:5e:e2:16:
a6:cd:c7:7c:21:28:24:a8:21:04:e7:4d:ce:0f:09:
08:d0:d1:ee:89:b3:46:8b:44:78:98:48:b3:f0:d5:
88:d2:5f:7d:00:14:15:b1:c5:fe:e2:b2:5b:26:fa:
04:89:92:fc:d9:ba:de:8b:ed:54:69:aa:e9:8b:df:
ab:4f:43:6f:80:5a:f1:41:e4:86:1a:59:ec:0b:77:
67:75:c5:b1:91:87:13:4e:9e:04:75:f8:48:b8:6d:
2c:44:22:3b:f5:29:a7:4d:6f:ec:d2:cc:3e:c2:ae:
e4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EC:5F:AD:DF:0F:20:8E:88:EF:D7:70:6B:48:60:87:BA:B1:DA:78
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:00:7f:4c:ec:b3:17:63:c8:16:a0:60:93:d9:db:8a:03:42:
6f:91:47:e9:23:20:24:c5:d3:11:62:6b:43:01:97:75:88:bc:
31:50:c3:5b:fa:8f:90:8a:06:89:13:bc:2a:a9:42:a1:e9:a9:
9b:db:95:49:75:ff:16:5c:31:af:6d:0b:4e:a8:23:53:e1:31:
1c:5f:b6:8a:1f:5c:69:35:8f:bc:c3:fe:16:88:82:39:74:a1:
ea:96:01:63:a9:89:77:e1:c8:ea:14:26:53:8a:e7:92:7a:a7:
dd:9e:ec:cf:a5:43:f3:48:44:a0:64:64:63:f2:b5:ea:1c:23:
24:ac:a5:22:d7:e3:ef:e8:b6:3e:40:23:f6:85:2b:80:95:3d:
b3:3c:2c:8c:b4:16:37:ff:06:df:19:a4:eb:d4:fe:1b:90:03:
65:e0:7b:c5:80:97:08:17:40:36:64:50:18:c9:26:b2:45:43:
37:51:dc:5b:81:5f:04:d9:7a:39:20:bd:73:ae:3a:50:0e:9a:
6c:5c:20:06:4b:7c:3e:6c:f7:45:1c:71:a9:7d:23:41:4c:93:
a8:5e:92:9e:32:5f:36:90:c7:a7:af:60:d1:be:f3:e3:71:02:
e6:42:0e:73:bd:49:32:60:a0:ae:0e:22:ed:a5:29:38:69:91:
b7:e2:7f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:21 2026 by rpki-client