Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier: HmxeACLxLBwO1tuMvTUCKtG3kBwM7ks044NfUcT+Mew=
Subject key identifier: 81:D4:F6:0C:10:3E:14:FE:7F:8B:4E:52:AC:CF:73:34:F0:B1:DC:0C
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial: 019F9D030B9DE62857983AD0B7106B10CB50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number: 19CD
Signing time: Sun 26 Jul 2026 06:00:50 +0000
Manifest this update: Sun 26 Jul 2026 06:00:50 +0000
Manifest next update: Mon 27 Jul 2026 06:00:50 +0000
Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: x/b6kQTnqqfazUfyTfX48+fEzBBZEKM5RQ/MEc0TovE=)
2: l_5sj0n83h1j-KNddGTmHYrghYs.roa (hash: lWD+ja9YbtyG1MA96ufKgRHVHut4712gK2auViaR/PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:03:0b:9d:e6:28:57:98:3a:d0:b7:10:6b:10:cb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Validity
Not Before: Jul 26 06:00:50 2026 GMT
Not After : Jul 27 06:00:50 2026 GMT
Subject: CN=81d4f60c103e14fe7f8b4e52accf7334f0b1dc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:41:b9:f4:54:1a:be:d4:73:47:24:48:58:12:
1d:d5:20:d9:03:ca:91:15:5e:de:bd:10:a5:f8:72:
ea:e4:91:8b:17:6b:82:b7:0c:f7:5f:7a:55:25:c0:
e8:07:7e:48:81:a8:32:6f:e5:7c:eb:0c:55:6c:1f:
c6:c5:c2:fd:75:f7:36:04:a4:0d:cd:b7:80:d1:34:
39:03:a1:01:2f:bb:1d:be:97:ea:48:d1:e6:bf:0b:
f4:e5:db:f3:3a:92:64:2d:ee:60:20:16:a4:31:d5:
17:8d:d3:fa:47:c7:92:76:b0:3d:0b:e5:81:91:df:
1c:99:9e:d8:d2:9b:7b:f0:76:b6:80:bd:39:7f:25:
4f:8a:d0:9a:2e:e3:d8:dc:f8:d3:ae:5a:39:e8:ea:
94:3b:03:7d:56:ca:56:50:66:d0:58:2d:93:3c:bc:
89:46:a8:99:47:1b:22:78:67:28:59:f1:84:2b:66:
c8:ac:d1:36:0f:57:fa:24:9d:1b:3f:29:d4:2e:10:
48:20:cd:d0:91:1e:81:63:19:7b:c4:75:60:44:56:
7c:c0:24:05:b9:78:a5:89:a6:2a:66:d2:1f:b6:0f:
f9:2d:f7:bb:3b:fa:53:b1:25:19:7c:ef:6f:53:a5:
c4:a4:8b:0f:58:8e:93:94:be:c9:ca:40:a7:8a:c0:
16:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D4:F6:0C:10:3E:14:FE:7F:8B:4E:52:AC:CF:73:34:F0:B1:DC:0C
X509v3 Authority Key Identifier:
keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:84:f4:70:a4:05:50:d5:97:76:53:ec:51:38:b9:e1:50:51:
75:85:22:03:f4:4b:ad:69:60:ab:9d:f5:c0:57:88:e5:de:a2:
30:ce:ff:aa:f2:fa:03:02:14:39:35:c6:e3:36:38:81:cd:be:
5f:ed:46:2d:9a:81:b5:3d:bf:b7:7a:69:46:86:18:c7:3c:ff:
59:83:0a:74:e8:cb:1a:28:21:34:63:c8:3a:f2:4e:33:4e:a8:
2b:a9:47:01:92:d0:a0:47:6e:c7:bb:8b:a7:a8:6e:b9:d6:d8:
99:c2:2b:d2:27:7e:b0:44:6d:bf:b5:2a:90:79:af:9d:dd:bd:
8c:6a:84:c1:cc:6d:e3:23:4e:98:0f:9f:57:dd:51:42:bc:e1:
15:73:ed:b2:fc:b0:67:75:71:33:d7:48:8c:8f:af:1f:db:3d:
10:04:0f:ac:89:78:95:12:41:d7:91:f2:9e:da:95:59:dd:3f:
0c:fc:fc:c8:bf:5a:4c:7b:15:34:ed:35:25:9c:18:b5:b3:07:
9c:d4:4a:2b:ae:0f:0f:a8:d4:4a:7c:7e:00:0f:a2:fb:ce:eb:
01:6d:9d:87:fd:fb:5f:05:52:72:d7:18:b9:58:9a:9d:b5:59:
12:ba:9d:15:0f:36:94:14:19:7a:b2:a2:c1:27:2e:4b:7d:f1:
46:68:d4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:52:41 2026 by rpki-client