Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
File: Or4W6uZkLTO7wPuQzeI0_QITRwk.mft (raw, json)
Hash identifier: Qt7IuOUsEtbFqUEMlQHs9Gcy+8O4HsBOBzIlWtPZdVg=
Subject key identifier: 9E:AA:14:23:4C:8D:0E:48:D9:A0:4B:70:10:7D:E7:38:96:8C:31:07
Authority key identifier: 3A:BE:16:EA:E6:64:2D:33:BB:C0:FB:90:CD:E2:34:FD:02:13:47:09
Certificate issuer: /CN=3abe16eae6642d33bbc0fb90cde234fd02134709
Certificate serial: 019E91DCBEF26B929A114E79DD2C3A2F6351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
Manifest number: 06
Signing time: Thu 04 Jun 2026 09:00:23 +0000
Manifest this update: Thu 04 Jun 2026 09:00:23 +0000
Manifest next update: Fri 05 Jun 2026 09:00:23 +0000
Files and hashes: 1: Or4W6uZkLTO7wPuQzeI0_QITRwk.crl (hash: IFKjTjATarTEzuxHylC84X6Mq1mm4vfbTvrSqOhHymw=)
2: P-NUTyH2nVmRcyECHCRmEz-xvik.roa (hash: qicAikWH5uUaAqp5U7Os+UidSM1o4zOBz4zwJdo3kRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:dc:be:f2:6b:92:9a:11:4e:79:dd:2c:3a:2f:63:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3abe16eae6642d33bbc0fb90cde234fd02134709
Validity
Not Before: Jun 4 09:00:23 2026 GMT
Not After : Jun 5 09:00:23 2026 GMT
Subject: CN=9eaa14234c8d0e48d9a04b70107de738968c3107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:80:c1:e6:d6:36:9b:0d:82:a2:7a:37:a4:f1:
ab:21:5f:1e:c6:90:f2:00:6e:c8:ef:0f:f2:eb:40:
b1:82:c0:00:0f:c2:1a:c7:44:e1:4c:76:42:15:cd:
9a:e8:e3:2c:18:c0:9f:f6:12:40:eb:1e:74:47:05:
d3:a5:1e:d3:ce:67:38:32:b3:81:55:5a:c0:dc:2c:
c4:2f:78:8e:18:06:65:98:0b:3f:0d:ab:e2:ed:07:
66:5a:d1:a5:b0:8d:db:80:91:0d:fb:9f:da:8a:53:
d6:7e:62:d9:fa:c3:23:65:74:6d:9f:c9:64:7e:96:
a1:53:8a:26:d5:cd:23:89:08:35:63:3f:ff:9b:85:
4c:ef:92:9b:ce:3f:10:82:ae:39:a9:36:5d:e0:69:
8f:32:10:db:44:08:65:c7:6a:dc:e2:67:d9:9b:58:
69:c6:68:bd:ae:99:c2:d2:da:00:d3:60:81:20:64:
8e:6a:a5:bb:c6:7a:1a:b7:2e:79:be:c7:40:21:75:
01:3b:be:62:a3:11:bc:c7:77:c2:79:38:10:43:d3:
61:c3:35:69:76:e9:24:14:eb:ba:6d:76:29:f4:3c:
20:87:6e:c9:78:cb:4f:c4:fd:9c:b2:62:31:43:30:
aa:eb:7b:e1:1a:28:18:39:be:94:d5:6a:d0:09:9a:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AA:14:23:4C:8D:0E:48:D9:A0:4B:70:10:7D:E7:38:96:8C:31:07
X509v3 Authority Key Identifier:
keyid:3A:BE:16:EA:E6:64:2D:33:BB:C0:FB:90:CD:E2:34:FD:02:13:47:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:54:0e:ab:d9:d6:84:4e:cf:84:af:ff:7a:2a:09:d1:cb:c4:
9b:14:3c:62:d6:99:38:9a:9b:6c:23:28:34:f5:88:25:0a:a2:
eb:b9:e3:9a:fb:4f:c7:94:bf:3c:19:5b:33:22:2b:49:3c:05:
8e:19:f0:bb:b8:7b:c0:04:1c:46:b6:9e:3d:d3:0c:65:93:d2:
65:54:05:e4:ba:93:fd:d7:26:36:43:dc:bc:12:31:79:f7:2c:
ca:2e:cf:bb:d1:0c:30:4a:11:0f:fc:a9:91:b7:fe:19:47:74:
d2:e7:b5:5e:f6:e2:74:28:52:69:8d:bd:6e:79:54:07:a0:51:
5e:3d:af:71:e9:09:40:db:fe:40:ac:73:b7:ea:72:f7:ac:a2:
5e:9a:76:bb:96:05:d2:e4:7e:a9:86:c8:1e:1f:a7:a1:50:bf:
2c:33:94:1f:87:b5:7c:79:4e:6f:a9:ac:11:1e:d1:e5:72:e6:
58:45:27:6c:6d:4f:3a:82:75:ea:79:d7:31:67:58:a2:03:45:
3b:67:ff:4e:38:c6:89:39:13:b6:05:e6:48:e5:3b:e3:3a:86:
1b:cc:db:e0:e9:f7:6f:ed:10:08:5d:54:62:24:c8:71:f2:a1:
ff:bf:88:9e:20:39:59:8d:9b:d5:0c:b8:b1:55:59:17:36:d1:
58:25:38:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:59:56 2026 by rpki-client