Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
File: orYtO_awxSR-3fRJjCzOYMDR5Qg.mft (raw, json)
Hash identifier: JQ4qcSWvhXrud0zZ5MlG/iTEjcV+fbzlvtFuC9T2IHY=
Subject key identifier: 90:75:D3:38:3B:24:6D:C4:16:EF:8B:A4:7E:BA:BD:C8:15:66:B8:4B
Authority key identifier: A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
Certificate issuer: /CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Certificate serial: 019F122EC46BC56512E403FD3F57AB8B5AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
Manifest number: 02EE
Signing time: Mon 29 Jun 2026 07:01:22 +0000
Manifest this update: Mon 29 Jun 2026 07:01:22 +0000
Manifest next update: Tue 30 Jun 2026 07:01:22 +0000
Files and hashes: 1: kXoK6s5aaaUzOJxxUcmmhqIaSLQ.asa (hash: 59NmHjBSvzipBM//GfVuJezWtnTbIsL21l5xvXSlCcM=)
2: mEVvhwiNz6QqGLc9f-BWMr-sDwM.roa (hash: h1jacdxfF70jEn15fnToAbzAGwIESAy79zZWfqs5+II=)
3: orYtO_awxSR-3fRJjCzOYMDR5Qg.crl (hash: 4jFrF/LIUqAw1EJdkrrctx8hAZ9qRWY4iDp77EyWM8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:c4:6b:c5:65:12:e4:03:fd:3f:57:ab:8b:5a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Validity
Not Before: Jun 29 07:01:22 2026 GMT
Not After : Jun 30 07:01:22 2026 GMT
Subject: CN=9075d3383b246dc416ef8ba47ebabdc81566b84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f1:1a:16:75:9b:5b:ea:50:47:95:74:9a:d4:
e4:e9:81:31:03:34:14:a5:ff:5e:5a:bf:5f:fc:e0:
13:72:52:18:e6:48:2e:02:34:e8:8c:0f:29:92:65:
7c:bc:b1:06:69:88:55:1e:bb:39:19:8f:67:3d:e1:
20:4e:34:07:0e:cd:41:10:76:b2:3f:dc:6f:6f:1d:
c2:ef:78:45:e3:e0:82:80:c6:86:c2:2f:2f:6c:b4:
50:3a:66:11:6c:38:4a:e3:a9:97:4d:02:6c:2f:eb:
fc:9b:f3:aa:f0:c6:c9:82:06:18:c3:e8:0a:81:dd:
e6:2a:c4:fc:77:a2:fd:66:92:29:ac:40:1e:98:69:
4c:e2:5f:2b:59:f4:eb:cb:f8:3a:da:75:24:47:e8:
0a:ec:8f:35:96:63:01:f0:7b:22:3f:59:bb:78:4c:
79:15:ef:22:96:5d:b5:8c:56:6a:12:e0:81:0a:e6:
75:30:3c:51:08:23:6e:41:07:6a:38:77:6f:85:49:
ad:33:01:89:0d:8e:45:04:f3:7c:da:01:cd:87:e1:
9c:e3:24:77:8d:20:a6:87:b0:2d:32:72:d5:c2:cd:
80:53:09:f8:05:69:63:a3:50:13:bc:d9:03:59:0e:
88:4b:26:55:2d:4c:1b:cf:e4:51:12:0e:8e:6d:b4:
4b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:75:D3:38:3B:24:6D:C4:16:EF:8B:A4:7E:BA:BD:C8:15:66:B8:4B
X509v3 Authority Key Identifier:
keyid:A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:58:f0:5d:8e:e0:2f:7f:5a:0c:09:b5:57:f2:8d:1f:d6:23:
93:07:31:4a:6b:c7:ff:d0:00:7b:84:6f:38:c5:c3:b3:bb:b3:
f1:b4:49:4e:1a:ab:67:4e:6f:c3:56:ea:f9:e5:85:12:9b:ad:
06:c3:04:5c:c1:4d:56:30:b0:c6:88:20:8a:b1:47:2b:e0:ce:
a7:35:be:74:53:c5:be:81:76:3c:be:88:84:be:58:52:b8:d4:
06:30:fa:21:aa:dd:78:ec:03:21:74:25:4b:88:39:87:80:c7:
2a:3c:78:53:ab:43:dc:b3:c8:e1:0e:17:a1:14:a9:6d:a2:c1:
a8:41:a4:73:52:70:62:ac:6f:d4:4e:e1:a9:82:e5:1b:b4:db:
6c:c1:b8:aa:f6:7d:ae:c3:13:f7:b6:51:aa:60:40:1f:86:ef:
53:18:46:88:92:a0:01:d5:50:79:26:5a:8a:0d:a8:64:cf:89:
79:0e:40:d2:23:5d:4e:be:46:ec:27:b0:a0:b1:9b:a1:4c:49:
4e:cd:8d:31:29:f4:be:b1:7e:ac:94:5b:67:5f:37:01:ec:ce:
25:e9:37:fe:51:3a:9c:e4:84:d5:20:00:d9:c8:e5:4a:ae:c5:
7a:c8:4f:ce:33:b0:4c:a4:93:b4:73:4b:ea:b3:91:17:26:70:
20:9d:96:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SLsRrxWUS5AP9P1eri1rTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYjYyZDNiZjZiMGM1MjQ3ZWRkZjQ0OThjMmNjZTYwYzBk
MWU1MDgwHhcNMjYwNjI5MDcwMTIyWhcNMjYwNjMwMDcwMTIyWjAzMTEwLwYDVQQD
Eyg5MDc1ZDMzODNiMjQ2ZGM0MTZlZjhiYTQ3ZWJhYmRjODE1NjZiODRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/EaFnWbW+pQR5V0mtTk6YExAzQU
pf9eWr9f/OATclIY5kguAjTojA8pkmV8vLEGaYhVHrs5GY9nPeEgTjQHDs1BEHay
P9xvbx3C73hF4+CCgMaGwi8vbLRQOmYRbDhK46mXTQJsL+v8m/Oq8MbJggYYw+gK
gd3mKsT8d6L9ZpIprEAemGlM4l8rWfTry/g62nUkR+gK7I81lmMB8HsiP1m7eEx5
Fe8ill21jFZqEuCBCuZ1MDxRCCNuQQdqOHdvhUmtMwGJDY5FBPN82gHNh+Gc4yR3
jSCmh7AtMnLVws2AUwn4BWljo1ATvNkDWQ6ISyZVLUwbz+RREg6ObbRLPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJB10zg7JG3EFu+LpH66vcgVZrhLMB8GA1UdIwQY
MBaAFKK2LTv2sMUkft30SYwszmDA0eUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS84M2RjMmQtNTMxMS00NWE2LWEwOGEt
NjJiZjE1YzQ2NzRhLzEvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS84M2RjMmQtNTMxMS00NWE2LWEwOGEtNjJiZjE1YzQ2NzRh
LzEvb3JZdE9fYXd4U1ItM2ZSSmpDek9ZTURSNVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1jwXY7g
L39aDAm1V/KNH9YjkwcxSmvH/9AAe4RvOMXDs7uz8bRJThqrZ05vw1bq+eWFEput
BsMEXMFNVjCwxoggirFHK+DOpzW+dFPFvoF2PL6IhL5YUrjUBjD6IardeOwDIXQl
S4g5h4DHKjx4U6tD3LPI4Q4XoRSpbaLBqEGkc1JwYqxv1E7hqYLlG7TbbMG4qvZ9
rsMT97ZRqmBAH4bvUxhGiJKgAdVQeSZaig2oZM+JeQ5A0iNdTr5G7CewoLGboUxJ
Ts2NMSn0vrF+rJRbZ183AezOJek3/lE6nOSE1SAA2cjlSq7FeshPzjOwTKSTtHNL
6rORFyZwIJ2Wwg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:43 2026 by rpki-client