Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
File: orYtO_awxSR-3fRJjCzOYMDR5Qg.mft (raw, json)
Hash identifier: ILFCLLVmziLMi8fg1AyFj2ZESF6t7pjI07wvvAMrah0=
Subject key identifier: B2:2F:35:47:F5:C6:41:A2:8B:E1:1B:48:3A:DE:44:F4:10:D9:81:5B
Authority key identifier: A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
Certificate issuer: /CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Certificate serial: 01A03F720F0DCA0507E49EB86905E9ADCA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
Manifest number: 038A
Signing time: Wed 26 Aug 2026 19:00:34 +0000
Manifest this update: Wed 26 Aug 2026 19:00:34 +0000
Manifest next update: Thu 27 Aug 2026 19:00:34 +0000
Files and hashes: 1: kXoK6s5aaaUzOJxxUcmmhqIaSLQ.asa (hash: 59NmHjBSvzipBM//GfVuJezWtnTbIsL21l5xvXSlCcM=)
2: mEVvhwiNz6QqGLc9f-BWMr-sDwM.roa (hash: h1jacdxfF70jEn15fnToAbzAGwIESAy79zZWfqs5+II=)
3: orYtO_awxSR-3fRJjCzOYMDR5Qg.crl (hash: RVg4MrkdOVZDp9XBDj0zbrQcxQUb4t3to9LqU51NcEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:72:0f:0d:ca:05:07:e4:9e:b8:69:05:e9:ad:ca:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Validity
Not Before: Aug 26 19:00:34 2026 GMT
Not After : Aug 27 19:00:34 2026 GMT
Subject: CN=b22f3547f5c641a28be11b483ade44f410d9815b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:14:b0:bc:a6:8f:80:85:9e:f9:f6:ab:47:0a:
a7:66:b7:aa:69:18:90:13:7b:b7:95:7c:7b:61:ab:
6c:45:e4:c5:29:43:ce:1c:86:cf:3d:3c:0b:c3:6e:
14:aa:31:a1:df:0b:5f:e6:ce:ea:5f:65:ef:46:c5:
fd:60:d4:dc:44:98:1a:70:98:fa:0d:82:f9:79:fe:
ac:96:c3:11:36:49:d4:01:b0:68:02:db:d3:61:29:
ef:85:f5:f1:fd:62:3c:36:ad:65:0e:f1:39:76:fb:
34:cb:45:21:1e:90:07:71:ab:ec:ac:f9:04:bd:74:
42:cb:f5:1a:db:6a:30:07:56:a0:83:e6:0a:f7:5f:
ef:b7:a6:13:26:c6:08:68:a7:8c:c6:2b:da:57:40:
38:af:95:4c:30:f9:97:a4:e9:1d:cb:94:7c:83:62:
1e:e9:a8:54:ca:27:c7:95:a8:42:2c:7b:c3:fb:1b:
f2:85:af:9a:e6:3e:5e:2e:a7:c2:4f:73:62:df:f7:
41:50:1a:d9:10:a0:a1:98:77:85:b2:0d:4b:f7:60:
8e:d6:c8:cd:bf:fa:ec:78:5e:da:ce:1a:a5:56:33:
e5:f4:3e:a5:52:e9:d8:1f:23:9a:bf:c0:e1:e3:b9:
27:e9:70:d8:4f:eb:31:48:fe:56:fd:98:64:92:b0:
58:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2F:35:47:F5:C6:41:A2:8B:E1:1B:48:3A:DE:44:F4:10:D9:81:5B
X509v3 Authority Key Identifier:
keyid:A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:3e:a2:68:ca:01:23:5b:80:f2:9e:91:38:98:c9:55:e4:95:
d5:f8:86:a2:a4:f3:ed:c6:0e:13:6e:27:84:7b:c8:99:fe:eb:
5f:eb:d0:ac:d9:a6:65:75:df:56:69:47:ea:34:2f:2f:a3:0b:
61:43:92:39:ab:87:d7:0a:47:74:60:78:57:85:b2:5d:70:b3:
22:93:55:ac:86:7d:ff:22:3a:87:c4:5b:1b:14:41:34:9b:2f:
5e:11:b2:f2:9f:d7:44:fb:f4:fd:be:76:e4:68:e9:be:3b:5b:
c2:1e:5b:0f:3c:4f:6c:5c:bb:53:d2:86:72:34:a5:07:c9:87:
6c:16:32:80:c6:c5:d8:ce:1c:e6:dc:f3:23:0d:46:80:33:4a:
84:87:9a:93:0c:a2:16:11:de:99:c1:c3:8b:43:d9:95:42:f8:
9f:1c:6a:3e:81:1e:0d:7a:f5:0e:c5:48:b0:ef:89:cf:0b:0f:
76:f9:4a:3f:2a:f7:b3:df:42:8d:2a:e2:df:74:14:4e:4b:84:
8c:7f:92:43:89:cb:ee:d9:7c:05:68:db:fe:99:d9:7b:eb:17:
2d:78:69:d1:62:dd:47:4d:4d:c2:98:7b:ed:bc:d8:5f:1d:f1:
9c:ec:49:df:10:7e:5b:de:92:7a:48:3c:38:4d:cd:ed:b5:3b:
e9:7e:5b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:37:20 2026 by rpki-client