Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier: pOkFxFkoAj3+nO41P9XnggEwF4ozfS5syKY6XKFxJ8Y=
Subject key identifier: 84:A2:BF:56:A9:1E:09:3E:44:38:7C:37:BD:B0:23:D0:95:B4:71:89
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial: 019EB544D2916F72849072D4B28916AB8A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number: 1955
Signing time: Thu 11 Jun 2026 06:00:46 +0000
Manifest this update: Thu 11 Jun 2026 06:00:46 +0000
Manifest next update: Fri 12 Jun 2026 06:00:46 +0000
Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: gHx/Az5N0Ax25vT8RwR/p8DycsFerY2hJg8q+peQKvA=)
2: l_5sj0n83h1j-KNddGTmHYrghYs.roa (hash: lWD+ja9YbtyG1MA96ufKgRHVHut4712gK2auViaR/PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:44:d2:91:6f:72:84:90:72:d4:b2:89:16:ab:8a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Validity
Not Before: Jun 11 06:00:46 2026 GMT
Not After : Jun 12 06:00:46 2026 GMT
Subject: CN=84a2bf56a91e093e44387c37bdb023d095b47189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a8:10:d7:d4:95:63:83:a5:67:d9:57:20:7c:
a4:ee:d8:67:19:05:8a:60:0e:b7:d0:00:40:14:6a:
f2:de:c3:e1:94:31:62:9f:18:c5:25:20:db:52:95:
5d:7c:8f:20:86:20:6e:3b:3e:70:90:42:4d:8c:16:
5b:c3:ee:65:4b:7a:3e:16:3e:b4:a9:33:e2:54:d5:
44:e9:98:4f:75:7a:7d:99:19:3e:6e:d0:7b:b8:83:
48:04:96:c2:2c:28:08:ae:fe:57:10:2e:e9:77:98:
1a:ca:8a:31:35:b9:f1:05:d0:cd:7b:03:e4:72:b2:
ba:8a:cf:b3:cc:de:84:60:7b:ac:36:c6:87:59:ce:
5d:7e:f5:78:7a:60:32:05:47:a6:bc:74:e5:6c:2e:
43:07:87:a0:da:da:42:93:7f:04:79:45:6a:2e:cc:
b1:ae:37:b6:5a:dd:16:ec:7b:ce:82:ed:93:c1:c7:
cf:1c:b2:01:7d:df:d0:3d:3f:a6:41:f2:b9:38:7e:
0c:9f:3e:e1:a8:f0:40:91:cc:9c:6e:15:20:3b:7e:
16:62:c4:b8:4d:fb:13:29:1d:5f:0b:8e:6a:7d:73:
64:6e:37:80:d3:9f:56:6b:2e:e1:79:f0:70:06:a2:
48:5b:82:02:81:cf:0a:b5:f5:62:cd:cd:10:ed:99:
4a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A2:BF:56:A9:1E:09:3E:44:38:7C:37:BD:B0:23:D0:95:B4:71:89
X509v3 Authority Key Identifier:
keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:41:58:d7:e3:99:01:5e:ed:e1:49:d3:ec:46:b7:da:0d:ad:
9e:0b:d8:88:e3:03:03:b3:8c:78:c9:a1:3b:41:de:00:23:1e:
f6:b6:85:d2:45:ed:ee:22:c7:fa:f3:0f:e3:2f:26:86:0c:56:
3b:e7:7f:42:60:8f:8e:74:72:cd:c6:13:81:ca:ad:cd:39:f3:
e7:75:c1:d7:b6:61:9c:91:29:28:37:7d:0a:ca:00:9b:c6:24:
0b:85:8c:97:f5:ab:76:ee:6f:5e:58:3a:a8:ef:b5:05:d7:ec:
d4:b8:95:ed:ec:ee:e0:4a:61:98:69:61:c9:5d:0c:8a:3c:cf:
1d:b8:35:11:86:94:f0:9d:fa:a5:6f:1c:47:a2:c9:8d:cd:dc:
60:7b:97:27:59:9a:6f:19:e0:7f:8d:07:d9:63:07:6d:7f:48:
5f:fc:1e:3c:b7:bf:de:78:8f:38:71:85:52:50:63:89:af:16:
a4:6b:15:1a:dc:17:f2:c5:87:76:01:0a:3c:64:19:81:75:47:
69:1f:ef:b8:19:4d:a1:f5:8c:8b:76:a8:ab:b5:3e:14:e0:b7:
db:de:b1:09:4f:25:2d:87:4b:40:63:97:41:ed:cb:f5:e2:49:
96:20:c2:44:6e:e2:e1:86:60:54:ad:e7:7a:8a:c9:e9:23:0b:
7c:82:ac:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:09:26 2026 by rpki-client