Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
File: orYtO_awxSR-3fRJjCzOYMDR5Qg.mft (raw, json)
Hash identifier: fbzjYYd2xzOGz1HYBgjG/z+xLdKtrZ82t+OuO//weiw=
Subject key identifier: AF:83:0D:24:EE:00:48:08:91:2D:6B:EC:62:7A:9E:C0:4F:1F:77:C2
Authority key identifier: A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
Certificate issuer: /CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Certificate serial: 019E2882254855D39F563AD3BE580DD82205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
Manifest number: 0275
Signing time: Thu 14 May 2026 22:01:18 +0000
Manifest this update: Thu 14 May 2026 22:01:18 +0000
Manifest next update: Fri 15 May 2026 22:01:18 +0000
Files and hashes: 1: kXoK6s5aaaUzOJxxUcmmhqIaSLQ.asa (hash: 59NmHjBSvzipBM//GfVuJezWtnTbIsL21l5xvXSlCcM=)
2: mEVvhwiNz6QqGLc9f-BWMr-sDwM.roa (hash: h1jacdxfF70jEn15fnToAbzAGwIESAy79zZWfqs5+II=)
3: orYtO_awxSR-3fRJjCzOYMDR5Qg.crl (hash: yP2ZNZuobPNtXUfjMCaaoc4KQbZtXkHkjnMTazAcsLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:82:25:48:55:d3:9f:56:3a:d3:be:58:0d:d8:22:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Validity
Not Before: May 14 22:01:18 2026 GMT
Not After : May 15 22:01:18 2026 GMT
Subject: CN=af830d24ee004808912d6bec627a9ec04f1f77c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:85:d7:98:73:cd:b1:1e:2b:6a:d9:d3:7b:ac:
7e:31:a7:47:1c:9a:1f:6c:4c:cd:7f:0a:92:f5:aa:
4c:26:83:83:46:f2:28:49:66:e5:d3:b0:be:4c:91:
31:fb:50:18:37:c7:dd:69:9e:c7:0e:6a:10:fa:f9:
01:81:ff:70:79:c9:50:8b:9a:3c:bb:52:12:16:24:
08:3f:20:76:c2:fd:f1:85:78:0b:00:23:51:b7:9c:
a3:49:43:42:f4:c4:28:8e:03:9a:96:ec:cb:14:72:
01:41:22:b3:51:78:93:5c:31:29:4b:09:5e:7f:b1:
ba:4f:19:18:b2:4c:eb:cb:b7:5a:cb:03:7d:2b:74:
ba:07:96:e9:75:75:c4:56:67:4a:8a:2d:3c:95:40:
d2:61:59:1c:f4:fb:27:a2:dc:aa:6f:9d:97:8d:53:
a2:8e:d2:09:5e:64:ce:b1:2e:0f:a2:33:59:13:28:
7b:03:23:8d:2c:46:a2:31:e2:d6:9a:4e:0c:de:ce:
93:1a:11:63:dd:fa:20:7a:c0:9e:0a:40:cc:8e:dc:
a1:1d:d1:42:60:a4:87:08:80:57:87:10:af:bb:e6:
37:41:8a:43:1a:31:c1:a6:fd:45:fd:02:81:1d:fc:
c3:09:eb:0d:7f:08:ad:a3:ad:d6:50:ed:87:4a:61:
1c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:83:0D:24:EE:00:48:08:91:2D:6B:EC:62:7A:9E:C0:4F:1F:77:C2
X509v3 Authority Key Identifier:
keyid:A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f7:de:75:64:5c:b1:82:a0:33:b4:1a:01:ec:31:1f:24:2a:
8d:ae:6c:7a:36:2b:d2:87:5a:b9:58:49:2f:ba:d4:cb:24:59:
8e:90:2b:b2:89:7e:d8:f3:cc:2f:8b:ca:9b:f9:c3:67:7b:f4:
3a:1a:54:54:0b:46:10:ed:41:22:80:b4:33:1f:db:18:33:1d:
b2:01:3f:aa:a2:9c:4e:76:b6:c2:62:15:22:d4:4c:ab:5e:50:
14:85:6f:b7:6d:68:a4:9d:72:b0:e1:c6:06:f4:ee:be:38:bd:
0e:93:6a:1a:12:77:fa:dc:b3:6a:ce:46:1c:b2:87:11:c0:9b:
e3:99:59:5d:6a:2d:53:48:68:a3:40:32:a0:02:01:27:54:d8:
c5:1c:bd:ed:fb:20:6a:01:1a:75:59:bf:74:1e:85:4c:2a:29:
d2:61:24:d8:80:24:1c:84:59:3b:2d:79:0d:dd:1d:63:fb:b1:
33:8e:ae:48:c6:6d:41:23:23:36:ee:2f:d6:09:c9:e5:b6:a3:
6f:36:4a:0a:f7:73:bf:28:81:47:bf:8b:18:03:63:6d:f9:63:
43:60:64:77:cc:cd:7b:da:a8:0f:ab:b0:5a:19:02:92:c2:24:
a9:a4:d5:43:4f:5a:d0:23:df:20:8a:15:f0:64:3e:12:34:22:
2d:80:e2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:23:04 2026 by rpki-client