Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
File: ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json)
Hash identifier: zC6LhQarXa/YLh/sXmSGq8jbgrLHFzoO2MPj1tN0bNM=
Subject key identifier: A0:43:1C:4E:00:FE:32:04:BA:2C:B3:A0:27:50:25:26:3F:ED:A3:1E
Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
Certificate issuer: /CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Certificate serial: 01A08AFAF2A21500964502A1107F584F5796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
Manifest number: 19DA
Signing time: Thu 10 Sep 2026 11:01:36 +0000
Manifest this update: Thu 10 Sep 2026 11:01:36 +0000
Manifest next update: Fri 11 Sep 2026 11:01:36 +0000
Files and hashes: 1: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: 1JxsYNYiuuQo6Y/e/GiGIBvlRonY4VQFfXH8xGyiq5Q=)
2: bIXByjX6LuW26aekk-7LgPK4WBo.roa (hash: YUnrsrT600MTRy40cCZkhQACX77mVDjnM+ubjSZDc0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:f2:a2:15:00:96:45:02:a1:10:7f:58:4f:57:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Validity
Not Before: Sep 10 11:01:36 2026 GMT
Not After : Sep 11 11:01:36 2026 GMT
Subject: CN=a0431c4e00fe3204ba2cb3a0275025263feda31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:9b:3c:e5:58:a3:e2:f5:c7:23:bc:da:27:
a5:37:6a:b8:c7:bd:72:71:05:a8:06:7c:85:13:49:
fd:0c:5f:54:4d:db:63:cf:91:b3:75:80:9d:95:a3:
13:2f:62:bc:82:37:df:92:6c:a2:36:7d:0a:ff:c7:
14:14:ab:e9:58:bd:84:0c:2e:44:e0:55:0b:63:d7:
bc:94:6d:f8:ff:1f:a6:a9:c2:78:eb:60:27:78:a5:
d2:21:9e:95:64:11:da:b9:32:1b:9c:5a:12:76:a4:
26:c9:85:50:3b:6b:fe:bc:4d:15:da:d2:0a:94:84:
ac:38:be:52:93:07:89:6f:0b:1e:37:d9:18:ac:32:
ae:0b:9c:75:96:db:54:38:49:3c:9b:a8:0c:23:04:
c5:af:b7:1d:de:49:61:da:ed:52:8d:9e:bf:80:92:
cc:06:8c:02:3f:10:b6:e3:54:2d:19:48:bd:25:6e:
93:76:b0:57:47:a1:c2:17:f6:2d:f3:77:1a:62:54:
66:64:0b:66:72:ee:3a:f4:a6:93:8d:10:f9:07:da:
1d:f4:4d:2b:3e:69:27:30:9c:56:5c:40:94:ab:bd:
af:68:23:13:f1:d0:53:eb:f0:45:5f:0d:05:49:80:
d5:fc:5e:d5:9b:77:61:d1:70:84:d2:3f:3e:d8:7e:
db:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:43:1C:4E:00:FE:32:04:BA:2C:B3:A0:27:50:25:26:3F:ED:A3:1E
X509v3 Authority Key Identifier:
keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:89:01:be:71:b3:3c:d2:d6:48:5e:03:79:7e:7f:8f:1c:b7:
98:89:19:38:ef:ca:ab:19:5c:58:83:ad:37:25:0a:7a:3e:f3:
ab:1c:44:22:73:7f:a5:10:4f:56:fa:2e:66:6f:ea:f5:80:dc:
fa:74:5e:29:79:21:75:f0:83:c3:ef:7e:93:5c:8f:9f:55:3c:
72:09:d9:b7:95:31:0e:46:e5:2c:8f:27:09:45:16:d6:4f:5a:
ac:aa:9d:d3:64:d2:06:8a:a8:c6:e1:d4:f2:0e:6f:3c:2d:a2:
07:3d:bb:fc:93:1a:d3:5d:45:b4:29:ab:1b:c7:85:f8:9f:38:
bf:e7:af:19:85:79:c7:e9:30:e7:77:63:98:21:ed:8b:42:7c:
cb:e6:9b:74:09:17:f7:0e:49:0a:ae:d5:59:27:14:9c:95:41:
ed:5f:08:1f:47:dd:13:89:94:e9:05:f3:e2:a7:72:95:1b:7b:
c9:3b:21:81:ec:f4:d2:29:df:0b:7d:c6:b3:a4:9d:6a:bd:cc:
a8:a0:65:0d:b0:37:fd:ef:f5:91:1f:ed:e0:c8:50:31:9a:1f:
82:ed:51:e8:20:a6:7e:3b:8a:9a:38:3e:af:0c:d6:94:6e:8c:
ef:20:ac:74:8d:88:fc:cf:90:02:a4:2b:5c:b7:d4:cb:2a:66:
ce:b4:47:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:20:05 2026 by rpki-client