Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
File: ORhwDqnHvi31aIr_vt2KTlU5LeY.mft (raw, json)
Hash identifier: imoqs5P/12FcrRfeKMf3lG6c2TQMgDheeSihbrJo5mI=
Subject key identifier: DC:A6:BC:BD:06:C8:1B:5E:C5:A1:6C:DA:01:B6:C4:94:14:3A:E1:86
Authority key identifier: 39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
Certificate issuer: /CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Certificate serial: 019D394097DC09963FC932B0C7FCF5D8D82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
Manifest number: 0978
Signing time: Sun 29 Mar 2026 11:00:27 +0000
Manifest this update: Sun 29 Mar 2026 11:00:27 +0000
Manifest next update: Mon 30 Mar 2026 11:00:27 +0000
Files and hashes: 1: DKhVHpk7iZz_01UXRjCn1_OlprQ.roa (hash: wsHOQQguXdPejumCbMkMQ0ogcO61399D5EWcawmOeUw=)
2: ORhwDqnHvi31aIr_vt2KTlU5LeY.crl (hash: rCtIbSoj6CtRwGDC83iSRRCWbyU0Fw+/+Aa6WTDGwk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:97:dc:09:96:3f:c9:32:b0:c7:fc:f5:d8:d8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Validity
Not Before: Mar 29 11:00:27 2026 GMT
Not After : Mar 30 11:00:27 2026 GMT
Subject: CN=dca6bcbd06c81b5ec5a16cda01b6c494143ae186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:35:8d:ae:c9:d3:ad:95:49:ef:50:94:d1:
57:8d:67:ca:dd:9c:5c:40:70:81:97:27:67:13:c6:
21:82:b9:ca:1a:b6:c4:cc:be:54:12:27:2f:44:0e:
ed:2c:5a:03:36:85:49:da:1d:04:03:de:f8:38:f2:
a4:d1:48:1e:0b:65:ed:2c:43:93:0c:fb:99:21:b1:
4a:4a:3b:c4:a1:29:cf:ca:28:9c:f0:64:a3:a6:bd:
75:39:24:5c:60:d1:e0:04:3c:95:aa:5e:92:92:4c:
79:aa:86:33:b3:e1:ca:b9:28:03:8a:e0:df:d3:09:
fc:85:62:1b:f3:24:3b:c6:9f:7e:8c:6c:7a:e6:f7:
40:81:dc:9e:ff:43:45:f2:d9:a5:8d:01:b3:7f:53:
fd:a5:2c:ed:7c:0b:6c:98:f2:ba:70:e1:81:e8:a5:
1f:d0:80:37:0e:cb:95:b0:9c:b0:0b:c4:07:73:dd:
0c:6c:5b:09:ac:a1:a5:d7:97:6c:68:f6:ec:fa:c6:
4f:49:94:b1:0e:77:75:c1:43:10:3d:1a:41:a0:ed:
9d:38:9b:5e:b0:59:8d:db:b1:cf:27:42:fe:0f:5e:
cc:b6:02:75:61:15:d8:a6:fa:ba:cf:d6:4e:b7:39:
88:b5:2e:92:84:8b:09:aa:b4:e3:d7:1d:95:a0:51:
9e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A6:BC:BD:06:C8:1B:5E:C5:A1:6C:DA:01:B6:C4:94:14:3A:E1:86
X509v3 Authority Key Identifier:
keyid:39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ea:ab:39:a2:2b:ae:b9:e1:94:78:b4:8c:52:bc:c8:9e:bd:
1c:99:0c:d8:9b:48:ea:50:a6:06:16:b9:6d:7d:4f:4d:26:50:
5c:24:71:c3:2f:8f:a7:5f:fe:72:75:83:e0:45:92:9d:34:90:
b7:b0:47:3e:1d:2b:5f:57:9c:39:82:a3:43:5d:6f:96:7e:3f:
9f:3a:05:23:66:3a:d2:97:8d:ac:f8:51:d3:23:13:61:05:33:
8d:d2:f7:f9:4e:38:be:63:f4:04:dd:b6:90:5d:82:ff:53:b2:
dd:e7:3b:e9:ef:11:a4:7e:d5:53:49:57:47:a3:cf:72:b1:5b:
b0:5a:bb:ba:db:e4:19:5c:bf:11:85:a5:33:06:e1:f6:d5:7e:
f1:e6:81:75:51:e4:2e:77:8f:ca:98:e8:91:1e:dc:f1:23:65:
b2:10:5f:1f:ef:4e:3e:f7:3f:e6:8f:3a:37:3d:65:7e:b3:2d:
09:50:a0:e2:20:d5:4f:37:70:04:47:0f:ce:01:95:9a:3e:71:
26:8f:02:e7:ac:66:97:0c:cc:43:7b:b5:53:95:af:2f:22:6d:
5a:4e:0c:84:30:19:13:4f:ee:8c:80:85:b7:c6:44:ae:12:de:
ee:3f:1b:f3:f0:77:da:90:12:4d:bf:c2:08:1f:db:12:d9:31:
fa:b3:90:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:24 2026 by rpki-client