Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
File: OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft (raw, json)
Hash identifier: GHi5KXTGhvvGCkg8jM5h3jmRpFZ3Ii9pJE/8aredgso=
Subject key identifier: 98:79:C1:E1:94:0A:2D:A1:F2:D5:72:D6:18:D8:04:09:7A:C6:BA:2D
Authority key identifier: 39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
Certificate issuer: /CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Certificate serial: 01A170CA491427F46746C737C5A0F9B1451E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
Manifest number: 1139
Signing time: Sun 25 Oct 2026 02:01:07 +0000
Manifest this update: Sun 25 Oct 2026 02:01:07 +0000
Manifest next update: Mon 26 Oct 2026 02:01:07 +0000
Files and hashes: 1: OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl (hash: Ry5Liab5Z0Afp0xlN2lHVR+xWoXmk5o3pZrAympJbjw=)
2: U_9ae0dR5bvWF_m8_-n5IQjoXho.roa (hash: YhkIXrg11/s9MnoBurHE21hW+DopIbiFzMqganoNxbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:ca:49:14:27:f4:67:46:c7:37:c5:a0:f9:b1:45:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Validity
Not Before: Oct 25 02:01:07 2026 GMT
Not After : Oct 26 02:01:07 2026 GMT
Subject: CN=9879c1e1940a2da1f2d572d618d804097ac6ba2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0e:11:49:3c:24:92:f6:95:c2:7d:00:97:6b:
8d:f0:9a:22:fd:b0:4d:26:f1:62:8b:62:3a:7d:79:
c5:ed:ee:12:98:af:5d:83:72:19:3f:7e:06:9d:bf:
bf:b5:e3:10:4c:8e:3a:b3:9f:6b:29:3b:b6:f0:02:
2f:9b:51:b8:df:67:a4:26:27:c2:4f:17:5f:97:07:
6d:fe:4b:60:a7:37:68:a2:a3:c0:4d:2a:1d:8b:9a:
d5:1d:de:08:8d:96:ac:90:b7:5f:1a:f7:e0:0b:dd:
48:a8:95:cb:28:ec:4d:6b:77:95:79:65:87:08:fc:
a8:6d:22:bd:f0:65:f5:71:68:45:e5:e4:72:8d:d3:
aa:33:25:6f:5e:db:0f:c4:f3:b8:5a:4d:c7:4f:fa:
b7:78:ff:e7:c1:40:7f:21:8d:21:57:70:21:eb:29:
61:d6:9d:f8:cd:08:ad:1c:5a:3d:f3:9e:73:ba:43:
a5:85:e5:fd:a3:4e:8c:2d:75:50:49:09:93:a3:61:
7f:47:91:12:84:5e:b7:4f:8a:ac:a6:be:ea:07:d0:
65:54:7f:13:40:89:d6:10:e0:23:a1:84:96:5f:15:
81:33:16:ea:af:a0:a8:e9:3d:4e:d7:7a:3d:af:02:
5a:71:a2:ff:ac:15:1b:d9:48:d3:88:52:a1:04:93:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:79:C1:E1:94:0A:2D:A1:F2:D5:72:D6:18:D8:04:09:7A:C6:BA:2D
X509v3 Authority Key Identifier:
keyid:39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:16:7b:4a:d0:1b:38:4b:7f:8e:8a:3a:47:0c:ba:1d:df:e2:
bc:36:87:0b:41:70:17:a6:31:f4:88:e7:0e:2b:b7:df:24:45:
7b:8c:23:72:35:4e:62:d4:a3:59:61:cf:9b:3f:26:d1:16:ed:
d4:e6:24:be:c4:61:27:9f:54:a1:20:0b:e5:42:d1:fd:04:dd:
57:cb:cd:e5:ea:e4:b1:2f:5b:b1:e2:ef:f2:e7:87:5d:e5:d5:
cc:41:c7:29:00:00:b3:17:be:57:bf:1e:cd:d5:4c:53:00:82:
62:79:f9:e1:21:24:58:4d:97:51:9f:68:fe:7c:04:66:8b:7d:
10:75:e4:f1:b8:fa:38:0e:39:5f:15:47:ed:9a:75:c8:92:37:
71:a1:ac:83:08:02:38:5a:ae:05:e1:3a:cf:f4:18:a4:48:a2:
08:c5:f6:dd:f4:ea:f6:47:08:4c:e9:ba:ef:7e:41:20:ae:39:
57:77:a0:64:6b:5c:93:98:85:fd:c4:18:46:80:2b:8b:8d:69:
b1:d2:00:bb:d0:ef:0a:9c:00:d0:13:49:e4:a6:42:f4:f5:58:
5e:5d:cd:bb:76:0b:e2:a6:c1:52:0b:31:2c:b5:b6:e0:de:24:
8b:e6:07:81:b1:cd:65:0a:f7:ea:93:5d:34:e3:6b:0d:98:cb:
aa:94:5e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:24:36 2026 by rpki-client