Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
File: ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json)
Hash identifier: qacE/YILVCd5CH85p3oVeUCCKvRPT8AnXRYUOfhs27c=
Subject key identifier: A7:AE:E4:19:45:32:79:34:C4:89:C2:C9:67:CD:27:E5:B3:AD:8B:F2
Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
Certificate issuer: /CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Certificate serial: 019FA14D34124FFCACB494BA010714282C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
Manifest number: 1961
Signing time: Mon 27 Jul 2026 02:00:19 +0000
Manifest this update: Mon 27 Jul 2026 02:00:19 +0000
Manifest next update: Tue 28 Jul 2026 02:00:19 +0000
Files and hashes: 1: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: HVnKBxB7j+finybb+PL6GVTeEV6MrHrT0c0ks1dUwJ4=)
2: bIXByjX6LuW26aekk-7LgPK4WBo.roa (hash: YUnrsrT600MTRy40cCZkhQACX77mVDjnM+ubjSZDc0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:34:12:4f:fc:ac:b4:94:ba:01:07:14:28:2c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Validity
Not Before: Jul 27 02:00:19 2026 GMT
Not After : Jul 28 02:00:19 2026 GMT
Subject: CN=a7aee41945327934c489c2c967cd27e5b3ad8bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6b:d6:6d:32:6d:0b:8c:fb:44:7d:6c:5f:32:
56:3c:60:cc:a7:9d:e3:54:63:8a:14:0a:ad:3d:b6:
7c:50:e1:4b:c5:d1:b4:a9:32:68:84:68:82:a6:be:
90:19:db:c9:d8:03:74:23:fe:7a:5d:81:76:0a:13:
e1:46:ef:9b:db:1f:59:17:50:40:8c:b5:eb:52:dd:
59:10:88:42:32:95:0c:e8:3f:94:56:a6:c6:ee:36:
a2:e6:a6:ca:ff:11:c0:45:40:de:93:97:6f:3e:25:
20:69:f5:98:74:7f:ba:35:ad:17:34:4c:7e:36:ee:
cc:36:be:7c:27:5b:7f:e8:14:04:5a:91:76:39:13:
73:ea:3b:dd:74:44:cb:4d:f9:35:fa:03:16:ab:3a:
9b:ae:39:1b:da:94:aa:1b:28:14:23:9c:24:49:05:
90:03:44:b2:ea:fd:3a:86:e6:bd:2e:c0:eb:00:22:
15:ad:b8:0a:76:d7:bb:65:81:d3:4c:51:37:1b:7b:
9d:40:b1:dc:5d:3b:c7:58:cd:29:b3:f0:ca:a9:ac:
6d:83:93:a1:77:c2:3a:0b:8c:29:d5:1f:54:d0:55:
77:b6:93:4e:a0:42:ab:24:ba:5c:ab:92:30:cc:69:
fd:2d:08:20:05:fd:fe:a4:aa:23:68:5d:64:d8:ce:
0f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AE:E4:19:45:32:79:34:C4:89:C2:C9:67:CD:27:E5:B3:AD:8B:F2
X509v3 Authority Key Identifier:
keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ac:a8:b9:3f:30:7c:44:c7:84:00:80:0a:97:a4:b5:ea:09:
1a:79:88:4c:70:43:18:dc:9a:e3:b2:48:ee:3d:20:41:33:30:
ae:6a:15:78:20:66:14:f1:ae:d5:a9:39:20:70:56:93:ca:a2:
da:9c:89:f0:37:d0:72:f9:e5:64:c1:7a:8e:99:af:62:3b:91:
db:0e:f6:ac:21:34:16:64:3c:60:b5:d1:76:67:c3:ef:50:11:
ce:75:cf:e0:07:47:97:79:70:31:8b:3f:19:a9:97:0b:c9:53:
d9:43:f7:05:9c:b4:12:5c:e4:8f:14:83:7f:e4:7f:51:87:ea:
38:7a:8d:35:61:ee:b4:59:0e:8f:e3:ec:67:64:7c:61:b3:9f:
48:1e:bf:2c:a8:00:ba:95:5a:82:b2:fa:0f:b2:50:c3:5e:6a:
94:5b:e2:fa:77:50:2e:58:77:9f:36:f4:23:31:82:a7:8a:e7:
05:e3:9f:f8:4f:0e:e0:69:80:f9:9b:30:f4:b2:74:f2:6c:9f:
16:9d:2e:87:6e:82:95:3e:f5:34:ac:b8:48:c5:ed:bd:60:1f:
a7:9f:bc:12:27:ba:bf:10:b5:ed:f7:53:0f:93:aa:79:b2:3c:
b1:6e:34:a0:cb:be:27:9f:f7:15:86:a2:e6:2d:5b:58:7f:51:
e7:d6:38:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:37:38 2026 by rpki-client