Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
File: ORvm1CiPvt6_hkKmoeOXeupfHzU.mft (raw, json)
Hash identifier: 1AzG19LfsLmwIAXGgG+1qabefFEbhx6Bs75a6Xg0H2A=
Subject key identifier: C6:2E:0A:CD:5F:AD:3B:25:D2:D7:E7:0D:76:57:CD:72:B7:0E:DE:33
Authority key identifier: 39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35
Certificate issuer: /CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
Certificate serial: 019D37C10ED424C7A0F55A725C0A6E8306B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
Manifest number: 100A
Signing time: Sun 29 Mar 2026 04:01:32 +0000
Manifest this update: Sun 29 Mar 2026 04:01:32 +0000
Manifest next update: Mon 30 Mar 2026 04:01:32 +0000
Files and hashes: 1: ORvm1CiPvt6_hkKmoeOXeupfHzU.crl (hash: 1RITgF/mW4XTcOan0oMayJOhQaq4wqDPRobH1kKU6ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:0e:d4:24:c7:a0:f5:5a:72:5c:0a:6e:83:06:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
Validity
Not Before: Mar 29 04:01:32 2026 GMT
Not After : Mar 30 04:01:32 2026 GMT
Subject: CN=c62e0acd5fad3b25d2d7e70d7657cd72b70ede33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:31:93:62:10:56:86:09:1f:d5:68:52:6f:d3:
a2:2d:7b:11:44:95:d8:46:e3:f5:34:1f:cd:a1:0f:
06:4a:28:79:a6:af:68:62:87:eb:09:20:0e:b1:e1:
21:dd:89:cb:e1:1a:0d:fa:d1:14:70:9a:0a:11:17:
78:9a:e5:cb:88:7f:a8:b3:73:88:79:1e:09:1d:4f:
35:65:04:c1:49:ad:fe:b0:62:01:4e:5a:c7:86:92:
0f:d5:22:e7:a7:23:d8:3d:6d:9d:67:09:0e:cc:ce:
ae:b6:99:53:7c:fb:a6:0d:e8:9a:40:0e:7b:e5:49:
14:31:41:05:a3:3f:40:df:44:a6:45:86:e7:f3:a8:
e1:6e:a8:34:90:14:14:11:9f:20:eb:7b:3b:50:d1:
20:f2:1b:c6:8e:22:8a:eb:6a:68:66:03:4e:ec:83:
63:5c:d3:60:c6:3c:71:f8:ed:92:ce:0b:4b:34:c0:
e7:18:c7:b8:90:98:22:32:7d:fd:20:65:37:4c:d2:
8c:5d:39:87:e7:b6:c4:b1:aa:9a:62:fc:2c:a1:12:
1a:38:99:52:a2:4f:b0:97:75:9e:a5:a9:54:12:d3:
0a:d0:e2:bf:f7:0f:bd:34:cf:67:bf:e6:63:9a:37:
c4:fc:53:cf:14:bf:a2:43:c1:0f:02:18:47:6b:da:
c3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2E:0A:CD:5F:AD:3B:25:D2:D7:E7:0D:76:57:CD:72:B7:0E:DE:33
X509v3 Authority Key Identifier:
keyid:39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0c:de:9b:13:66:3f:98:91:81:59:bc:5d:af:33:6d:45:0a:
88:96:50:ee:32:8f:69:00:1f:ec:0c:ac:a6:73:0a:44:35:17:
1e:be:63:4d:64:03:9e:9e:1c:22:59:3e:51:02:c5:55:9d:80:
72:20:c8:95:f8:90:84:30:6c:9a:f7:20:35:24:c1:e5:27:ea:
37:5a:f1:fe:4a:f3:e4:0f:0a:48:97:4e:c8:0a:53:83:2e:79:
65:eb:10:04:69:a1:72:10:d0:40:3b:e6:b9:05:ef:0e:97:f4:
e1:a0:12:25:b1:ac:86:b4:d7:55:59:39:1f:80:a6:21:18:28:
7f:e6:fb:0b:5c:e1:26:92:0a:fd:9b:a7:45:46:43:fa:9c:3e:
e2:50:9a:0f:0d:ab:01:de:8e:f3:a7:66:72:61:7f:f4:db:a2:
0d:aa:0a:84:4b:9c:70:35:37:c4:81:8a:9c:59:30:7e:98:18:
0c:e1:36:2e:da:87:72:67:d2:cc:1c:d3:49:1c:7f:41:1c:ff:
67:a1:22:17:29:7b:5d:63:f9:12:18:f5:0a:cd:99:87:6e:6f:
9a:1a:a0:b5:e9:e1:71:21:aa:81:6b:6d:84:95:85:39:22:f9:
a5:9c:e5:66:a1:74:6e:bf:94:b5:3f:a8:0f:69:4a:bd:b7:88:
a8:1d:6a:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wQ7UJMeg9VpyXApugwazMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MWJlNmQ0Mjg4ZmJlZGViZjg2NDJhNmExZTM5NzdhZWE1
ZjFmMzUwHhcNMjYwMzI5MDQwMTMyWhcNMjYwMzMwMDQwMTMyWjAzMTEwLwYDVQQD
EyhjNjJlMGFjZDVmYWQzYjI1ZDJkN2U3MGQ3NjU3Y2Q3MmI3MGVkZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DGTYhBWhgkf1WhSb9OiLXsRRJXY
RuP1NB/NoQ8GSih5pq9oYofrCSAOseEh3YnL4RoN+tEUcJoKERd4muXLiH+os3OI
eR4JHU81ZQTBSa3+sGIBTlrHhpIP1SLnpyPYPW2dZwkOzM6utplTfPumDeiaQA57
5UkUMUEFoz9A30SmRYbn86jhbqg0kBQUEZ8g63s7UNEg8hvGjiKK62poZgNO7INj
XNNgxjxx+O2SzgtLNMDnGMe4kJgiMn39IGU3TNKMXTmH57bEsaqaYvwsoRIaOJlS
ok+wl3WepalUEtMK0OK/9w+9NM9nv+ZjmjfE/FPPFL+iQ8EPAhhHa9rDpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYuCs1frTsl0tfnDXZXzXK3Dt4zMB8GA1UdIwQY
MBaAFDkb5tQoj77ev4ZCpqHjl3rqXx81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1J2bTFDaVB2dDZfaGtLbW9lT1hldXBmSHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81Y2RlYjQtZWE3OS00YTY2LTkwYmYt
ZTVmYjRhYzExMGRiLzEvT1J2bTFDaVB2dDZfaGtLbW9lT1hldXBmSHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy81Y2RlYjQtZWE3OS00YTY2LTkwYmYtZTVmYjRhYzExMGRi
LzEvT1J2bTFDaVB2dDZfaGtLbW9lT1hldXBmSHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAzemxNm
P5iRgVm8Xa8zbUUKiJZQ7jKPaQAf7AyspnMKRDUXHr5jTWQDnp4cIlk+UQLFVZ2A
ciDIlfiQhDBsmvcgNSTB5SfqN1rx/krz5A8KSJdOyApTgy55ZesQBGmhchDQQDvm
uQXvDpf04aASJbGshrTXVVk5H4CmIRgof+b7C1zhJpIK/ZunRUZD+pw+4lCaDw2r
Ad6O86dmcmF/9NuiDaoKhEuccDU3xIGKnFkwfpgYDOE2LtqHcmfSzBzTSRx/QRz/
Z6EiFyl7XWP5Ehj1Cs2Zh25vmhqgtenhcSGqgWtthJWFOSL5pZzlZqF0br+UtT+o
D2lKvbeIqB1qSg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:40:35 2026 by rpki-client