Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
File: ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json)
Hash identifier: jK9xtzKi2YlFCiKs0CkK2PCMcVR+Pd1sB1vwGIzl7FQ=
Subject key identifier: 41:C8:FF:E1:27:B5:C9:A4:CC:FA:92:76:A2:06:94:46:B8:05:AC:E1
Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
Certificate issuer: /CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Certificate serial: 01A17A71F52EB56D9693A5E3F57AE189A26D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
Manifest number: 1A56
Signing time: Mon 26 Oct 2026 23:00:51 +0000
Manifest this update: Mon 26 Oct 2026 23:00:51 +0000
Manifest next update: Tue 27 Oct 2026 23:00:51 +0000
Files and hashes: 1: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: I0dhmrCv4+XLJE6gKshKYL2QAXYb5jVtPks8yeMa8V4=)
2: bIXByjX6LuW26aekk-7LgPK4WBo.roa (hash: YUnrsrT600MTRy40cCZkhQACX77mVDjnM+ubjSZDc0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:f5:2e:b5:6d:96:93:a5:e3:f5:7a:e1:89:a2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Validity
Not Before: Oct 26 23:00:51 2026 GMT
Not After : Oct 27 23:00:51 2026 GMT
Subject: CN=41c8ffe127b5c9a4ccfa9276a2069446b805ace1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:37:9d:39:c1:16:24:c7:9b:35:c5:06:9d:80:
e9:87:a8:14:d7:9f:1f:bb:9b:f9:af:10:76:cb:fc:
2f:09:93:e1:e8:03:d6:65:e8:14:7c:df:e5:6b:0b:
8e:79:40:08:0f:a7:67:6f:5b:e4:ee:29:60:13:c7:
50:44:9b:ed:55:63:28:86:c7:b8:e0:58:ad:c9:e9:
1d:7c:80:10:34:8b:29:2f:01:03:65:78:3a:90:18:
a2:1b:66:aa:12:ca:df:77:2e:a0:84:bc:86:22:f8:
ff:5a:73:5c:87:57:6a:8f:b0:72:a9:29:f8:d7:9d:
dd:76:ec:b4:30:01:0d:6a:c8:25:a8:17:2a:e9:ef:
de:f8:09:7d:a2:0f:47:54:80:6c:12:94:93:de:91:
ef:8d:9c:ca:1f:7d:4d:8c:4f:9e:51:91:13:52:37:
45:fc:cf:d5:fb:ac:81:06:fd:54:c2:1b:c7:23:51:
0f:cf:7d:04:70:55:db:d2:a3:a9:eb:4c:6e:33:33:
60:8d:9c:2e:28:77:44:e8:60:70:52:35:4a:90:9f:
fd:19:84:7e:41:60:60:d2:e9:07:e6:5e:48:8d:8d:
81:38:fd:2a:28:4c:be:0f:fc:6a:ba:88:a3:de:9f:
3d:36:61:b6:4f:2c:c4:c4:7b:d6:fd:dd:15:18:cb:
71:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C8:FF:E1:27:B5:C9:A4:CC:FA:92:76:A2:06:94:46:B8:05:AC:E1
X509v3 Authority Key Identifier:
keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2e:ec:d1:9b:ce:56:25:44:26:60:36:9d:1c:59:4b:54:35:
b0:21:b2:af:ab:2f:f8:d1:40:0e:02:eb:ac:af:9e:8f:82:0e:
eb:c8:45:c9:77:2f:a2:c3:d2:66:a7:41:63:ff:00:76:c2:84:
c6:91:5f:56:80:30:e6:78:a1:66:41:21:76:b4:4e:c8:48:9a:
90:55:29:1a:b9:34:54:02:c3:71:df:49:fb:ac:b1:96:d1:79:
0d:2c:e2:36:7e:9b:16:02:d0:fa:f1:e6:7f:e5:3e:2a:79:6d:
b9:59:d5:33:f0:cc:a5:ac:0e:d0:b7:cc:04:33:2c:f7:cd:03:
5a:63:3b:c9:86:4e:62:2c:17:bf:3e:49:a1:fb:5c:50:8c:f8:
ba:84:4b:ca:aa:24:58:34:1a:74:30:c2:16:32:cc:a8:6c:66:
5b:52:9b:b6:a9:79:6e:80:12:c1:7b:2c:5b:fd:7f:7b:bf:91:
34:9d:cb:7a:30:6c:6d:35:c4:fc:25:17:0c:d5:64:c6:f6:4e:
b0:a4:1f:a1:a3:62:e9:c9:58:4e:03:ab:d0:18:f0:ce:4d:4d:
4a:c6:ee:25:92:84:12:16:ad:c5:6f:c4:a5:c2:1b:3d:1f:69:
d5:55:81:1a:33:52:eb:5d:e2:63:2d:a6:e4:af:61:fa:e0:75:
95:a0:5a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:35:26 2026 by rpki-client