Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
File: ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json)
Hash identifier: UpbMZPKXeuSeix0/ZlkqloD4BpowR66MMWsHDVGpVmM=
Subject key identifier: AA:CD:21:7F:1A:F4:8E:46:2C:5B:A6:DA:FF:FC:68:41:2A:BC:07:23
Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
Certificate issuer: /CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Certificate serial: 019EB7A112D82493CDCD849AECA6346BC084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
Manifest number: 18E8
Signing time: Thu 11 Jun 2026 17:00:46 +0000
Manifest this update: Thu 11 Jun 2026 17:00:46 +0000
Manifest next update: Fri 12 Jun 2026 17:00:46 +0000
Files and hashes: 1: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: 8J1ejO1Ye80S9pp7jBqJ9JDQ5ndrotNcVypNETCtGmc=)
2: bIXByjX6LuW26aekk-7LgPK4WBo.roa (hash: YUnrsrT600MTRy40cCZkhQACX77mVDjnM+ubjSZDc0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:12:d8:24:93:cd:cd:84:9a:ec:a6:34:6b:c0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441
Validity
Not Before: Jun 11 17:00:46 2026 GMT
Not After : Jun 12 17:00:46 2026 GMT
Subject: CN=aacd217f1af48e462c5ba6dafffc68412abc0723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:28:f7:dd:6f:71:a0:49:79:d3:f4:e1:d7:5f:
3f:e8:af:62:db:30:88:3d:7d:bd:6d:06:af:51:21:
15:6a:85:cf:3c:cb:5f:ea:e8:0b:88:f1:3f:ba:3e:
1d:f6:cb:06:55:9b:6d:a5:a2:12:76:ac:1e:38:a0:
b5:e1:b4:60:8a:b9:fc:49:65:15:08:dd:ff:27:21:
05:66:7e:6f:d1:dc:f4:29:02:17:94:db:e2:dd:b4:
bb:f2:e2:47:08:08:f1:7e:9d:8b:7f:b9:10:ec:f7:
f8:d6:a0:57:b8:58:d0:3e:0a:4f:2a:f8:dd:57:90:
7e:53:f1:f7:75:cf:a6:e3:73:3c:f6:6c:47:03:8e:
87:93:8e:fe:10:81:57:92:69:0e:e7:c5:3a:de:38:
fe:86:45:90:c9:77:12:6f:1a:f7:87:e5:85:7a:bd:
62:6b:4a:12:93:f3:12:5b:a9:63:98:41:21:33:7d:
cf:2d:a0:78:e1:5d:8a:13:95:82:b9:25:7b:2f:93:
5f:be:07:e9:82:ee:6d:31:0c:16:26:d9:38:bf:94:
5a:ee:46:07:be:b7:04:52:05:5b:73:45:8e:38:be:
58:62:e4:b9:30:2f:ee:d1:b1:1a:f4:f4:fd:ca:2c:
a1:8a:88:56:c4:a7:75:d1:11:65:b3:18:7d:9e:f7:
a8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CD:21:7F:1A:F4:8E:46:2C:5B:A6:DA:FF:FC:68:41:2A:BC:07:23
X509v3 Authority Key Identifier:
keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:31:a6:5c:08:f5:c0:e4:de:10:c6:09:18:88:e6:f1:b4:01:
0b:08:d4:b2:f9:0c:d3:c5:55:65:52:f1:2c:64:ca:df:1c:8c:
4b:84:d9:f1:8c:aa:35:aa:8c:b4:a0:06:a7:53:05:71:c2:b8:
a2:82:f5:51:d7:8e:45:cd:36:e3:04:97:50:62:31:fb:3a:41:
37:cf:cd:c6:d1:31:31:2f:73:cf:cc:33:d3:dc:c3:98:7b:ed:
f9:87:4b:4a:70:57:9b:7b:da:31:28:8c:c7:08:24:bf:5d:c6:
2b:68:fc:b5:96:1f:d5:a2:42:43:4f:dc:ae:4d:02:68:ee:aa:
9f:ec:42:04:da:53:79:ee:1b:53:74:f6:a4:ee:17:f4:a6:be:
ad:5c:e2:2a:91:df:d3:64:28:8f:0f:d5:bb:df:33:a2:94:03:
f3:0e:60:22:f7:7b:ec:bb:5f:fa:fa:b7:b3:c1:d0:fa:bf:50:
f3:7e:b4:22:5f:92:b2:47:21:d0:94:af:90:fb:99:49:dc:12:
9a:ca:36:da:3c:d4:c8:78:7b:e6:ac:27:5a:00:e9:85:a5:21:
2e:7a:bb:af:32:f4:17:e1:96:10:fe:4d:b3:1f:15:df:76:9d:
ad:51:12:ce:ea:01:0f:92:62:58:a7:bc:7c:64:cc:79:8c:c5:
f3:9f:08:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:54:12 2026 by rpki-client