Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier: MZF6IYTi0YpAcmHY28Eul+lqusdYg8TbY7stMWRALgA=
Subject key identifier: 20:AF:1F:D9:8E:A5:B0:DB:06:68:33:99:0B:9A:AF:BB:BD:0C:4A:43
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial: 019CE3DA6AD0244E7C6659F85C6FDA29A816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number: 1864
Signing time: Thu 12 Mar 2026 21:01:08 +0000
Manifest this update: Thu 12 Mar 2026 21:01:08 +0000
Manifest next update: Fri 13 Mar 2026 21:01:08 +0000
Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: OK2iVqKPe5uPi2RHRrtmhf0JHZOhtImySuPsAyNwYY4=)
2: l_5sj0n83h1j-KNddGTmHYrghYs.roa (hash: lWD+ja9YbtyG1MA96ufKgRHVHut4712gK2auViaR/PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:da:6a:d0:24:4e:7c:66:59:f8:5c:6f:da:29:a8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Validity
Not Before: Mar 12 21:01:08 2026 GMT
Not After : Mar 13 21:01:08 2026 GMT
Subject: CN=20af1fd98ea5b0db066833990b9aafbbbd0c4a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:ad:74:90:d6:97:1c:87:18:79:8e:0a:06:
47:43:f2:11:2d:7c:7a:cd:0e:9c:dd:f1:8d:54:64:
80:18:b8:14:48:f2:76:3c:f9:e8:93:56:c6:30:63:
81:7a:eb:a4:65:76:eb:aa:dc:eb:b8:1a:84:a6:6f:
f2:8a:ed:51:b8:08:fc:8a:7c:38:d9:5d:ee:2f:6f:
ec:08:aa:15:f6:f5:55:1b:b6:16:7a:a7:88:37:b5:
24:f1:8c:3a:72:b1:1d:69:e6:53:be:ba:d0:d8:48:
59:c6:d3:75:57:91:9c:4d:68:36:6d:2f:c5:06:c2:
ae:92:a1:b5:d2:16:55:83:89:43:34:19:96:80:aa:
be:e2:1c:57:a6:4e:e5:66:f3:a7:8d:95:70:e3:83:
4e:43:db:73:f5:1e:f2:57:95:92:90:ee:b2:48:3a:
83:f3:04:ab:31:73:fe:e7:23:b5:e7:71:86:00:89:
a3:a7:09:1f:ed:d0:b1:c0:ab:48:07:2c:6c:8f:ac:
1a:5a:7d:43:2c:39:ad:e4:31:ac:47:39:62:61:ed:
42:d4:7e:1a:8d:ab:20:cc:f2:3e:d2:ba:7d:0d:32:
14:7e:cb:93:b6:bd:71:b7:51:20:78:40:cc:b8:26:
5c:fd:a9:a1:2c:59:f8:5e:20:46:c4:cd:80:8f:e9:
0f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AF:1F:D9:8E:A5:B0:DB:06:68:33:99:0B:9A:AF:BB:BD:0C:4A:43
X509v3 Authority Key Identifier:
keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:86:43:79:a7:e6:24:94:93:6c:50:fa:8c:76:2c:3e:22:43:
dc:77:35:2d:f0:c5:50:a8:94:03:88:50:8f:79:bb:df:cb:29:
e6:db:e3:90:af:9d:ff:fd:8c:db:22:53:04:83:2a:7b:68:79:
89:f7:c9:13:a2:b2:6b:e8:d2:6b:70:a2:98:8f:0d:e7:9c:92:
48:cb:27:8a:c2:c3:04:5b:fb:35:39:d1:31:84:ba:80:82:c0:
e8:69:73:93:6e:53:89:21:fe:5f:73:26:18:66:9e:b6:b3:6f:
5e:5e:37:63:ee:9f:44:9a:26:05:32:a0:28:1e:c0:f6:da:55:
93:a3:6a:24:35:05:b4:d0:90:7d:03:2d:ff:37:0e:2f:48:08:
b5:ad:5f:d5:f8:e1:99:44:3a:5b:77:1f:54:ce:90:53:d8:6b:
18:64:4d:09:c0:27:b5:9d:73:3a:95:66:05:9c:ad:95:22:6f:
1b:e7:73:5f:1d:06:e6:e7:49:55:7b:15:ed:b0:64:95:7e:d7:
55:fc:5d:d7:90:d6:81:30:3e:41:c7:e0:41:80:22:f5:ad:96:
6b:90:b8:4d:f3:54:d3:d5:e0:56:0d:ad:ad:81:89:bc:c5:2a:
69:3c:a7:a3:81:43:ed:01:c7:0f:9b:ac:df:86:94:83:16:62:
50:e4:7e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:48:28 2026 by rpki-client