Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
File: Or4W6uZkLTO7wPuQzeI0_QITRwk.mft (raw, json)
Hash identifier: KFuKRo5bo4g50mukbH3pp0Cro0vBOKBnQL1HyJF3+gc=
Subject key identifier: E0:FD:4E:06:CC:98:ED:7C:BD:77:74:1D:34:FB:2D:2D:BE:1D:25:E5
Authority key identifier: 3A:BE:16:EA:E6:64:2D:33:BB:C0:FB:90:CD:E2:34:FD:02:13:47:09
Certificate issuer: /CN=3abe16eae6642d33bbc0fb90cde234fd02134709
Certificate serial: 01A06CF03529761F23BC785F8BD3FA32D6AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
Manifest number: FC
Signing time: Fri 04 Sep 2026 15:01:16 +0000
Manifest this update: Fri 04 Sep 2026 15:01:16 +0000
Manifest next update: Sat 05 Sep 2026 15:01:16 +0000
Files and hashes: 1: Or4W6uZkLTO7wPuQzeI0_QITRwk.crl (hash: Hu2+4/d5rqwOaXUolRS3TY7W5eTldsDnN5Jh6i6NGUg=)
2: P-NUTyH2nVmRcyECHCRmEz-xvik.roa (hash: qicAikWH5uUaAqp5U7Os+UidSM1o4zOBz4zwJdo3kRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:f0:35:29:76:1f:23:bc:78:5f:8b:d3:fa:32:d6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3abe16eae6642d33bbc0fb90cde234fd02134709
Validity
Not Before: Sep 4 15:01:16 2026 GMT
Not After : Sep 5 15:01:16 2026 GMT
Subject: CN=e0fd4e06cc98ed7cbd77741d34fb2d2dbe1d25e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2f:c9:f7:cc:1e:09:71:c3:97:d6:77:12:a5:
8a:82:e4:56:89:bc:9a:dd:b6:2f:da:2b:fc:0e:43:
ae:4e:e7:01:ae:ff:ec:7f:20:82:1b:3d:56:bd:3a:
c7:ed:d8:ae:38:0a:1e:72:55:e6:97:e8:90:4d:08:
7f:ea:0d:f5:84:55:36:28:c0:01:c0:b1:df:0f:91:
ef:1b:c1:1d:e0:29:08:cf:b6:04:6b:cc:dd:d6:91:
8c:df:86:69:ac:c8:ed:50:42:03:ef:ca:fa:5f:5a:
40:38:30:3b:6a:20:8f:ae:35:5f:2a:f5:57:ab:37:
4f:f0:83:f6:d4:d6:ef:fb:85:f1:b0:67:b7:ca:e9:
06:3e:99:86:90:b1:75:92:30:c8:e0:78:92:c8:8b:
fe:bd:24:77:a4:ff:5f:97:fe:05:1f:30:d5:92:c2:
20:d4:54:9b:4d:5a:58:35:8d:9f:36:79:c9:c0:7d:
81:60:60:32:5c:ce:fd:a9:7a:f1:3a:35:79:6e:3c:
48:b6:e8:ee:b8:b5:1c:08:03:c5:c8:77:92:4f:46:
d3:c3:03:09:a3:db:a5:fe:e5:ee:7b:79:09:27:ce:
bd:8e:2f:f0:4e:fa:88:06:f9:d6:2f:4a:dd:2a:d1:
dc:1c:c5:9a:c8:f0:e0:4f:0b:c7:da:83:db:e2:6b:
62:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FD:4E:06:CC:98:ED:7C:BD:77:74:1D:34:FB:2D:2D:BE:1D:25:E5
X509v3 Authority Key Identifier:
keyid:3A:BE:16:EA:E6:64:2D:33:BB:C0:FB:90:CD:E2:34:FD:02:13:47:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f9:d3:85:2e:83:b7:76:09:48:fa:7a:fb:51:bf:76:7b:f8:
d0:d9:8c:6c:87:0d:ae:27:04:6a:20:d5:de:91:06:c8:eb:d3:
9d:b3:64:47:68:01:e3:98:a5:53:cb:9c:c8:0b:4c:92:ac:97:
4a:ae:86:15:30:05:ef:a2:f9:96:e8:ad:e2:ac:a9:1d:be:ac:
fc:63:a3:5a:93:7e:49:18:16:ba:9c:47:57:bc:ff:53:14:89:
f5:91:82:cd:c0:20:8d:bd:5a:ed:b8:6d:5d:83:be:08:83:d3:
3c:97:fb:3f:f9:7f:14:71:83:f1:9d:6b:86:72:30:27:c9:f9:
1c:e9:84:91:12:f8:7e:7b:b2:8d:28:94:cc:c0:a1:c2:05:b9:
ea:84:00:ff:cd:7b:8c:6e:6c:c1:1b:ed:e2:d8:08:b1:f1:4e:
3c:04:fb:fe:78:c2:75:8e:ec:a6:c8:03:97:68:dd:b4:1e:91:
95:da:db:54:5a:6a:4c:28:34:f3:73:e4:9e:93:23:e3:bf:4d:
d8:8e:04:21:d2:53:c0:89:09:87:69:17:58:bc:ba:91:ed:1a:
69:3c:49:ae:a7:20:fc:12:ef:fe:e8:48:44:39:e2:25:df:1a:
f1:86:11:ff:0d:7b:5f:0c:e0:ed:c2:03:1e:6e:e9:94:a0:88:
40:2d:73:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:27:07 2026 by rpki-client