Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier: RabYW1joHoGO6R0lFMg/8AFB4mBb96zqRj4nycVQQgE=
Subject key identifier: BE:8A:25:C9:48:F4:10:24:AF:EC:31:ED:19:97:8D:E5:42:BA:C0:D5
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 019CABDA08C0ECBA9BA1FB11B5884320081E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number: 17E9
Signing time: Mon 02 Mar 2026 00:01:58 +0000
Manifest this update: Mon 02 Mar 2026 00:01:58 +0000
Manifest next update: Tue 03 Mar 2026 00:01:58 +0000
Files and hashes: 1: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: sdCQFLakEnhclnX0S2UDTZRON+XoBlBs1L1Sj5qQpx8=)
2: s7RCJecrkvhO4O8n4hnHhMn63mI.roa (hash: RMUboypqGxzOTuEkOaIhesKwecXYlREEbxutxlq+fCs=)
3: yhoQSW5m0HxnhBThODAYvKmDatA.roa (hash: Zj3xva8IbUjYyCWlM9IRCPCWul21ZtyOBPZl0zgZK3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:08:c0:ec:ba:9b:a1:fb:11:b5:88:43:20:08:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Mar 2 00:01:58 2026 GMT
Not After : Mar 3 00:01:58 2026 GMT
Subject: CN=be8a25c948f41024afec31ed19978de542bac0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:d0:fc:27:d7:6e:60:2c:aa:8a:5a:92:58:
12:42:1f:00:63:14:cf:fe:e1:2e:dc:33:f9:a9:82:
45:88:3c:82:26:ca:38:34:66:60:ee:d4:d8:97:a2:
d2:67:83:2a:4c:24:13:ba:72:7e:30:9c:8c:ca:ca:
77:09:61:2c:cf:b7:64:ca:5f:03:6c:55:bf:87:86:
70:af:c7:df:5f:94:33:c8:20:3f:33:8b:2f:ed:a4:
f1:85:6e:b6:89:af:8e:bc:b7:66:e6:4f:fc:e2:52:
c8:68:8f:ef:95:a6:fb:05:26:de:90:ca:bd:47:2b:
6b:aa:1f:ff:9c:94:84:cb:f8:d4:34:f5:9a:8d:a7:
39:c2:22:09:91:7c:2a:0e:1f:36:1e:b2:1b:ed:9c:
80:0d:7b:da:74:d4:c5:c8:9d:96:f1:9a:a1:da:bf:
84:2b:31:d3:4f:3a:31:b2:db:6c:33:fd:ce:30:de:
6c:ca:89:11:9f:4c:d3:d0:28:b2:62:d2:20:de:a1:
cc:56:e4:a1:13:4d:a7:0c:8d:5c:8f:28:25:23:b2:
a8:a9:1a:d8:2b:4a:64:ea:f5:22:bd:e1:66:05:2a:
0a:50:e1:ca:60:84:8d:86:b8:5f:ca:2f:bc:46:e3:
bf:7e:d0:97:79:af:46:e0:8b:f4:02:93:f3:0d:29:
c8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8A:25:C9:48:F4:10:24:AF:EC:31:ED:19:97:8D:E5:42:BA:C0:D5
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a5:6b:c2:d9:3f:38:0e:12:fa:07:67:f7:a6:ce:d3:a5:f9:
6e:2f:e3:a3:06:b4:f2:d3:2c:f4:4a:b3:50:dd:2f:e0:45:d6:
2a:41:9e:74:7b:0d:97:4e:3b:ce:c6:f6:9f:d1:d5:53:1d:f1:
56:8c:69:a7:0a:09:1f:10:ac:15:a3:b3:18:2c:71:9a:a0:e3:
9d:69:c8:9a:99:f0:df:c4:fe:48:8b:9e:48:99:ac:13:6d:fb:
0a:b6:bf:36:18:b1:89:41:b5:1e:d4:59:1f:b3:e3:79:af:28:
83:1f:1f:0d:0f:ed:b2:c6:52:be:b8:86:a1:34:64:f5:4a:c6:
dd:58:38:17:74:d1:8e:17:b6:7b:8d:c0:d7:85:90:d0:8a:cb:
4c:00:57:74:00:eb:a2:d3:fc:21:af:64:b7:82:74:8d:fd:d6:
10:1d:51:99:49:df:95:77:86:80:9f:bb:7a:67:09:e9:29:0b:
4c:49:02:54:27:69:9d:fa:58:7b:9d:9e:fd:8f:99:8a:24:10:
1c:37:8c:c7:fd:70:85:3c:88:75:ff:ff:7d:d7:ca:34:d4:b9:
0e:6a:cc:ec:71:6b:13:cb:72:c7:ff:30:e2:98:e0:23:a8:41:
2b:77:5b:a0:ab:2c:33:9a:95:24:61:f8:27:9b:92:56:c5:62:
cf:6a:8e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:33 2026 by rpki-client