Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier: k8gozL7BFYs3QAaG4TfDgPwrryM9Vm3fsZ/P0XORLaE=
Subject key identifier: 62:3C:FC:81:B8:88:0D:1E:75:F5:14:16:D9:40:3D:63:87:E0:17:0A
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial: 019DCD8770FC9BA0BD204B913A6CB748DC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 06:01:38 +0000
Manifest this update: Mon 27 Apr 2026 06:01:38 +0000
Manifest next update: Tue 28 Apr 2026 06:01:38 +0000
Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: iS3qUE+byPXqTQl0SYCsCeH6IdAF3FnALFAhPYZyZIY=)
2: l_5sj0n83h1j-KNddGTmHYrghYs.roa (hash: lWD+ja9YbtyG1MA96ufKgRHVHut4712gK2auViaR/PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:70:fc:9b:a0:bd:20:4b:91:3a:6c:b7:48:dc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Validity
Not Before: Apr 27 06:01:38 2026 GMT
Not After : Apr 28 06:01:38 2026 GMT
Subject: CN=623cfc81b8880d1e75f51416d9403d6387e0170a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:85:ff:89:96:6e:80:e1:fc:d7:fc:58:7e:
81:75:24:04:61:1c:02:de:1e:e9:46:58:91:96:4c:
9e:89:ce:90:fd:b7:74:be:b7:49:6d:df:07:2b:66:
2f:b0:11:07:76:8d:23:61:0e:38:b1:ad:42:c9:81:
8f:ff:fa:99:f2:8c:4c:28:63:af:4d:3a:00:4e:e7:
42:9d:4c:f2:43:eb:ae:e4:66:5c:7b:7d:4e:66:12:
09:0d:05:18:96:92:ba:32:3f:ee:9c:2d:bb:09:9d:
79:ac:ab:54:e8:2e:6f:28:30:fc:4a:d5:d0:d6:df:
27:df:23:70:7f:96:1f:6a:5b:84:17:bd:80:f6:2e:
a1:aa:44:5d:bb:c6:5b:09:31:6a:05:1d:a5:d7:92:
10:37:ae:64:41:34:e6:02:95:dc:72:c4:67:91:f1:
b4:3f:18:45:74:36:3d:b6:16:3f:d2:b9:1f:8f:92:
15:81:b1:f9:31:d3:bd:24:cc:0e:98:07:2e:c3:2d:
0a:f8:88:8e:e8:e3:7b:9f:6c:fa:01:34:12:8a:b6:
e6:d2:6d:e1:8a:03:bb:bf:30:62:b0:01:4a:df:a5:
8e:a6:90:20:68:96:fb:90:61:46:8f:5f:9e:eb:4b:
e4:25:84:93:d2:ce:ae:4c:88:11:b6:f8:38:d1:6f:
ef:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3C:FC:81:B8:88:0D:1E:75:F5:14:16:D9:40:3D:63:87:E0:17:0A
X509v3 Authority Key Identifier:
keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:27:5a:be:a4:9a:7d:65:7d:be:42:68:e2:e1:01:2d:a3:15:
3d:f8:f5:50:44:02:a1:8c:47:d0:5d:7c:18:2d:89:3f:c9:c6:
83:cb:85:60:67:1e:6e:2f:a0:06:14:b8:55:89:32:19:89:0f:
85:72:7c:ad:c9:0a:02:d8:c4:f7:1f:f3:34:0c:45:08:f7:ee:
e8:6f:63:fc:07:8b:56:57:f2:4a:b5:b8:e0:0d:66:ae:1e:ef:
e8:46:f6:de:a9:d0:30:1c:ca:23:a9:32:fa:e5:39:38:3c:b0:
29:f8:e2:54:e7:16:eb:fd:4d:e7:1d:50:40:f0:4e:86:2d:88:
a4:11:2b:c7:ef:d2:b4:14:7f:ff:ec:23:1a:17:c5:45:db:5d:
0f:ca:f8:75:c4:b0:68:dc:bf:fb:b5:f7:a7:5b:da:73:15:b8:
db:b1:41:ce:06:cb:0f:83:4c:7e:92:a1:73:21:fb:a0:9a:90:
5b:c6:96:12:b3:b4:fc:a4:46:e1:d2:be:2f:58:76:8f:e4:2e:
12:57:8e:ac:f0:78:06:e5:a6:4d:92:1b:18:27:92:83:5b:87:
4d:24:13:08:c0:ad:77:67:24:45:b7:d6:e3:81:58:35:75:98:
56:55:85:83:69:29:dd:3b:8e:f0:b9:8a:b5:8f:b1:c2:bb:74:
6a:a4:2a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:55:56 2026 by rpki-client