Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
File: Or4W6uZkLTO7wPuQzeI0_QITRwk.mft (raw, json)
Hash identifier: 0vPFIiPb+M02A10cpqiW6SkFoh0Kq9Zq3yQZ5L/j2dE=
Subject key identifier: 90:D7:44:99:1F:01:84:F6:DB:60:CE:0C:02:D2:FD:8C:41:F4:19:6A
Authority key identifier: 3A:BE:16:EA:E6:64:2D:33:BB:C0:FB:90:CD:E2:34:FD:02:13:47:09
Certificate issuer: /CN=3abe16eae6642d33bbc0fb90cde234fd02134709
Certificate serial: 01A15EFAFE90FCCB36DBFABA60406E45570A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
Manifest number: 017A
Signing time: Wed 21 Oct 2026 15:01:09 +0000
Manifest this update: Wed 21 Oct 2026 15:01:09 +0000
Manifest next update: Thu 22 Oct 2026 15:01:09 +0000
Files and hashes: 1: 8mmg-DqoTaLl8UWoKiZNbBVl_j4.roa (hash: M7YHb21vTzCkeEhMD68ZFvaAlzZ63ni1sBAtuh5+KP8=)
2: Or4W6uZkLTO7wPuQzeI0_QITRwk.crl (hash: sgsdl6bxcBrCKaTvVpp7q5AevzxJqASMTpzOUYy7BQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:fa:fe:90:fc:cb:36:db:fa:ba:60:40:6e:45:57:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3abe16eae6642d33bbc0fb90cde234fd02134709
Validity
Not Before: Oct 21 15:01:09 2026 GMT
Not After : Oct 22 15:01:09 2026 GMT
Subject: CN=90d744991f0184f6db60ce0c02d2fd8c41f4196a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:26:f0:fc:a6:dc:1f:6b:ab:1a:33:bd:c3:
3b:52:95:1f:cd:37:3c:1c:69:81:50:e4:80:ed:c4:
48:79:f5:32:c5:82:27:55:7b:a5:a9:61:a4:03:a3:
c0:e6:01:5d:ca:98:cc:e8:14:04:e8:f4:05:56:03:
f8:e0:2d:08:6e:72:eb:c9:1a:14:62:70:16:2b:de:
34:25:16:cd:de:cf:b3:38:a4:5a:b4:ae:45:78:9a:
44:91:57:57:f3:b8:36:45:23:6d:fc:37:df:b7:8c:
eb:e7:f0:23:7a:9e:bc:ab:63:99:79:7d:a9:1a:d2:
9b:c3:0e:72:ca:95:e0:3f:31:14:04:c8:b1:48:cf:
40:03:be:ba:72:3b:8b:ca:90:94:86:26:27:60:81:
bd:af:d1:e3:37:7d:d4:1e:12:04:b0:4e:01:ef:4d:
47:89:73:39:15:a4:a5:61:fd:74:e7:dc:f4:19:90:
a1:75:94:18:bd:57:8c:92:27:f3:a2:5e:ef:38:8f:
6e:83:f0:bf:ce:b8:fc:d1:5e:f0:65:fb:fa:16:fc:
7f:a4:8c:87:7a:76:a6:23:d7:76:18:6f:fd:f9:9f:
f0:da:28:93:a6:b4:6d:0e:0f:6a:dd:05:ad:bd:7a:
16:c9:04:c9:21:41:12:0d:58:a2:14:fa:f9:3f:a2:
da:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D7:44:99:1F:01:84:F6:DB:60:CE:0C:02:D2:FD:8C:41:F4:19:6A
X509v3 Authority Key Identifier:
keyid:3A:BE:16:EA:E6:64:2D:33:BB:C0:FB:90:CD:E2:34:FD:02:13:47:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:18:ff:13:92:bf:46:b9:84:c4:a4:2b:76:07:86:b1:1b:4e:
34:40:c8:91:05:6f:b7:81:b6:01:db:0a:dd:c5:ba:c6:05:6b:
8a:16:44:07:6c:36:46:74:0a:0c:a9:0a:6d:a3:ff:78:44:13:
49:6d:c0:75:a8:2c:e3:15:77:37:56:f9:59:31:f8:e8:e9:90:
c1:22:fb:a5:83:8c:8a:e9:db:2f:5c:45:ad:05:78:e3:6b:d3:
a6:26:46:81:75:c8:8f:10:4e:a0:68:9b:21:a6:7b:89:bf:85:
dd:b1:b6:57:44:20:8d:66:6a:fe:6b:4a:96:bb:8f:c5:74:94:
60:de:1b:ef:3a:f4:66:84:c2:e5:d7:1c:db:18:5f:40:f7:c5:
03:bd:16:6c:22:31:d2:44:84:72:08:d6:ca:24:14:af:92:87:
86:73:5d:2c:a7:fd:d0:8c:65:6e:1b:d5:9e:f4:77:96:68:3c:
5e:03:33:65:5b:aa:b1:85:04:05:bc:f9:8d:76:d9:9b:09:3c:
98:26:d0:80:5a:e3:f4:e1:27:12:e0:71:92:87:36:f8:c4:cd:
1e:0a:38:22:68:2b:19:7b:9c:d3:52:88:d5:18:c1:d7:ea:1a:
b2:01:31:94:5f:c9:70:b5:f2:43:24:81:18:34:62:6a:2d:30:
fe:ca:db:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:06 2026 by rpki-client