Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.mft
File: OrxiR-4MrsNlqAIvX4xv7MylcQ0.mft (raw, json)
Hash identifier: SZ7oq8O4ZsewOH3thf/zoeTRnmlagLh+6Ox67x6G5u4=
Subject key identifier: 3E:92:F0:BC:42:83:71:88:04:81:06:B3:6E:70:34:CF:4E:B3:37:57
Authority key identifier: 3A:BC:62:47:EE:0C:AE:C3:65:A8:02:2F:5F:8C:6F:EC:CC:A5:71:0D
Certificate issuer: /CN=3abc6247ee0caec365a8022f5f8c6feccca5710d
Certificate serial: 019D3865E03F74CB20DAF9927165C0DB39D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OrxiR-4MrsNlqAIvX4xv7MylcQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.mft
Manifest number: 116D
Signing time: Sun 29 Mar 2026 07:01:33 +0000
Manifest this update: Sun 29 Mar 2026 07:01:33 +0000
Manifest next update: Mon 30 Mar 2026 07:01:33 +0000
Files and hashes: 1: OrxiR-4MrsNlqAIvX4xv7MylcQ0.crl (hash: Zjfft9/V2C8NUG77puv2mSlQzN3ckHjR1hQkDKXs+YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OrxiR-4MrsNlqAIvX4xv7MylcQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e0:3f:74:cb:20:da:f9:92:71:65:c0:db:39:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3abc6247ee0caec365a8022f5f8c6feccca5710d
Validity
Not Before: Mar 29 07:01:33 2026 GMT
Not After : Mar 30 07:01:33 2026 GMT
Subject: CN=3e92f0bc42837188048106b36e7034cf4eb33757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:fe:bf:85:64:58:20:bc:3b:6e:f8:b5:6a:
ab:d5:f1:57:7c:65:b0:43:49:61:e6:d8:16:9a:c3:
ea:c8:8c:93:2a:6d:e0:b9:c4:82:8d:b4:b0:ea:bf:
3b:13:25:1e:85:d7:f3:e6:fa:75:c0:89:7d:3f:c2:
78:5c:6d:b8:e8:1a:7d:11:fe:d5:25:a8:02:e3:f2:
24:46:46:b6:f0:dd:98:ab:1a:d5:e6:b9:05:f3:2f:
f6:d0:e4:4a:07:80:63:f5:75:2a:83:55:5a:fb:57:
cb:75:81:80:5d:09:3c:9c:23:f0:a9:72:dc:cb:b4:
7a:a8:4d:82:80:36:51:67:a5:45:75:98:01:6f:1a:
8e:ef:9a:df:52:55:46:5a:d6:24:41:ec:54:9f:75:
15:fb:66:b8:f9:a8:66:90:62:c6:ba:98:83:7a:09:
40:70:89:82:d4:d0:47:69:29:af:09:7c:7e:7b:df:
2b:32:ce:bb:bd:2d:0f:31:18:2d:c5:60:6a:1a:49:
c0:c6:67:0c:e6:83:96:8a:ea:93:e1:4f:96:f5:66:
9e:17:ad:99:ca:8e:65:1c:17:fc:8e:39:95:82:85:
82:d0:49:99:76:44:58:a0:65:33:ee:79:85:04:89:
82:97:e3:95:28:7c:37:83:d7:5d:4f:ed:06:34:99:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:92:F0:BC:42:83:71:88:04:81:06:B3:6E:70:34:CF:4E:B3:37:57
X509v3 Authority Key Identifier:
keyid:3A:BC:62:47:EE:0C:AE:C3:65:A8:02:2F:5F:8C:6F:EC:CC:A5:71:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OrxiR-4MrsNlqAIvX4xv7MylcQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:fb:ef:7e:40:72:70:0c:89:84:7b:12:8a:6a:b9:91:80:c8:
45:91:16:8a:ac:e8:bf:d9:8d:c8:f8:d5:90:83:b6:ce:34:3a:
28:7e:06:b8:85:1a:ca:83:11:c4:f3:c0:af:0a:95:03:ad:b5:
d0:09:71:81:b9:d9:c0:0c:20:04:8f:a5:d3:28:06:80:a3:ae:
e9:ae:f2:d5:2f:98:66:d5:fd:5c:34:e0:21:61:b4:91:0a:1e:
e5:67:fa:00:15:28:d0:2d:d5:0c:97:98:f9:d5:70:0b:cd:7a:
40:54:bb:e8:62:70:1f:ca:35:40:fc:07:05:b6:ef:a1:f7:6d:
f6:e4:ed:fb:24:3a:06:88:a5:0b:7a:84:91:9f:3a:0b:d1:70:
bb:a4:ea:32:5b:b9:9e:8b:b6:75:8b:a4:77:01:df:cd:5d:b3:
62:7d:f5:10:57:37:1a:27:de:18:4e:94:ce:0a:cd:94:6a:c4:
38:a4:fe:3c:9e:5e:b9:09:b0:c0:23:76:90:e7:eb:d9:b5:4b:
2c:f9:7e:4e:d3:a3:94:99:9e:42:f7:79:00:fe:c1:3c:e4:02:
ec:3f:17:50:4a:e9:85:50:6a:b1:88:45:54:3f:cc:86:cb:10:
0e:37:f2:22:60:87:9c:e5:5c:61:65:38:b8:bf:f9:bc:34:64:
43:a9:d3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:12 2026 by rpki-client