Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/orWthdxjIax7o93JxiqqBsfVPc4.mft
File: orWthdxjIax7o93JxiqqBsfVPc4.mft (raw, json)
Hash identifier: ME/2TappKgtDi8I73Xl6RsZgVYVN+JtsBqhV/iWPX7M=
Subject key identifier: F3:73:09:C5:74:B5:70:65:D8:EA:63:C2:02:51:40:25:5C:7A:03:FF
Authority key identifier: A2:B5:AD:85:DC:63:21:AC:7B:A3:DD:C9:C6:2A:AA:06:C7:D5:3D:CE
Certificate issuer: /CN=a2b5ad85dc6321ac7ba3ddc9c62aaa06c7d53dce
Certificate serial: 019D38D2C4BBD2A5E5EBC63E6A004FFA8D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orWthdxjIax7o93JxiqqBsfVPc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/orWthdxjIax7o93JxiqqBsfVPc4.mft
Manifest number: F2
Signing time: Sun 29 Mar 2026 09:00:30 +0000
Manifest this update: Sun 29 Mar 2026 09:00:30 +0000
Manifest next update: Mon 30 Mar 2026 09:00:30 +0000
Files and hashes: 1: orWthdxjIax7o93JxiqqBsfVPc4.crl (hash: /Qc5wbitbA/cytGkZka10ZPQuy279gufaYZEfLRIW/w=)
2: zH59FOjEeW0tX1tZPAKwttZubxc.roa (hash: E7WqBqxeqDORrFZVX5AFQ14CSfk2SIvYpV/ckuWWz5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/orWthdxjIax7o93JxiqqBsfVPc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/orWthdxjIax7o93JxiqqBsfVPc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/orWthdxjIax7o93JxiqqBsfVPc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c4:bb:d2:a5:e5:eb:c6:3e:6a:00:4f:fa:8d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b5ad85dc6321ac7ba3ddc9c62aaa06c7d53dce
Validity
Not Before: Mar 29 09:00:30 2026 GMT
Not After : Mar 30 09:00:30 2026 GMT
Subject: CN=f37309c574b57065d8ea63c2025140255c7a03ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8d:f2:60:8d:ee:99:80:b9:38:f1:f0:4b:3d:
0f:5d:69:d9:e2:c1:17:07:8c:ab:fd:66:8d:99:d4:
ad:28:49:47:c3:13:34:df:ce:d9:f3:12:a9:fd:6e:
e5:e6:0f:46:c3:a6:89:e7:85:e5:e1:de:28:cd:05:
6b:10:93:d7:89:bd:9a:67:e5:94:68:9b:10:8d:7f:
f2:0e:d5:7d:ff:59:88:ba:ae:c5:ec:e0:e2:9e:7c:
8d:c6:d8:8c:a9:62:82:04:a8:03:87:df:b6:6e:82:
60:68:9c:af:30:3d:c7:3d:9c:6c:a4:bb:3e:4a:74:
45:ad:74:83:76:58:5c:d4:ec:be:ca:8c:71:70:57:
34:d7:bb:a0:8b:ff:a6:6c:8d:b1:b8:3a:2e:fe:ff:
7f:14:65:e8:b4:3c:88:94:f8:78:80:5e:7f:f6:e0:
b3:a7:65:ff:45:cc:9d:cd:c9:b2:d8:70:8d:ef:84:
66:19:a4:f6:13:ed:a1:10:1c:53:7b:33:8f:52:30:
61:da:70:19:ec:d4:2f:32:d5:e5:92:a3:d1:22:07:
9f:f7:32:be:ac:a5:8e:c6:4b:0d:53:55:b0:e0:67:
ea:5f:dd:6f:52:87:4e:2c:ec:55:5d:14:6c:29:ce:
aa:c4:8b:7a:51:ad:b6:ed:5d:8b:0e:1b:bc:4d:9b:
ca:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:73:09:C5:74:B5:70:65:D8:EA:63:C2:02:51:40:25:5C:7A:03:FF
X509v3 Authority Key Identifier:
keyid:A2:B5:AD:85:DC:63:21:AC:7B:A3:DD:C9:C6:2A:AA:06:C7:D5:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orWthdxjIax7o93JxiqqBsfVPc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/orWthdxjIax7o93JxiqqBsfVPc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/orWthdxjIax7o93JxiqqBsfVPc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c1:d1:7b:39:1f:a8:47:39:95:8f:9b:03:9c:61:7d:fc:9b:
e0:41:b7:36:36:6a:f9:57:6a:7d:13:47:cb:e5:23:3a:cb:d3:
fb:e0:49:54:4b:a8:05:58:88:a0:8e:d7:35:3d:38:04:bf:04:
49:73:56:82:39:75:cb:79:ae:c0:01:bb:bc:77:09:be:b2:f7:
bb:c5:4c:90:bb:db:ed:d0:ae:dd:bc:b0:4c:23:69:35:d2:89:
7a:8f:74:a6:4b:95:1b:68:df:99:73:ff:24:dc:a6:27:d8:58:
81:8e:01:3d:51:ff:e3:7f:c7:e4:10:cb:f1:8e:57:92:07:15:
a2:5c:c7:4a:f0:18:10:5b:63:36:d3:7c:f7:be:57:6c:c3:17:
ec:68:f3:62:e7:7b:9d:90:b6:75:f2:bc:a6:f7:1e:ba:00:9a:
e7:66:e6:04:80:f2:c3:f4:34:1a:04:18:cf:04:2a:0a:b4:39:
2d:b8:46:85:46:4b:08:50:28:ae:11:f5:3c:7f:1d:80:48:07:
3e:19:81:36:9e:f8:61:21:33:25:e8:05:34:90:be:b3:1a:47:
74:29:0f:35:48:62:4d:63:c7:ea:b7:0c:62:09:3a:82:e2:6d:
55:85:c2:43:11:f1:33:2b:1c:89:be:97:c6:58:96:e8:94:0f:
82:af:ff:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:22 2026 by rpki-client