Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier: X7xl4aGvO9iVCZQmxMqbyAhmQ2BIRuHN1RIlJetygXk=
Subject key identifier: B3:F7:1D:4E:FA:95:32:8A:E4:73:DA:68:00:EE:5B:AF:73:1B:A9:18
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 01A18D53DB7465CDFD7D10FED19896FC9CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number: 07E9
Signing time: Fri 30 Oct 2026 15:00:45 +0000
Manifest this update: Fri 30 Oct 2026 15:00:45 +0000
Manifest next update: Sat 31 Oct 2026 15:00:45 +0000
Files and hashes: 1: 6ztTDGBSEjfUz5YPUm3xJqrFtBQ.roa (hash: NaCtdBF9yWOeFeahp2D+pL4fXJjohl4aTNmTP8dCNsQ=)
2: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: ASNz3EAs3aYS38C5lWdeypoWbr5CUOP3BgAvMFNFtWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:53:db:74:65:cd:fd:7d:10:fe:d1:98:96:fc:9c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: Oct 30 15:00:45 2026 GMT
Not After : Oct 31 15:00:45 2026 GMT
Subject: CN=b3f71d4efa95328ae473da6800ee5baf731ba918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:1b:3e:de:c3:ee:cd:bd:31:81:0b:a7:d7:
aa:33:22:e5:96:9d:22:6a:bd:39:dd:b9:36:b3:fa:
9e:3b:cc:4f:f9:e5:1b:9d:b8:4b:af:71:d2:26:dd:
e2:02:16:c5:e9:36:6f:56:dc:9e:1f:e1:f5:83:ac:
6e:5b:02:ee:43:87:8c:e4:2a:e0:e2:9c:9e:c9:00:
7b:15:b5:d2:35:5c:88:e1:fe:6a:d1:c7:d6:b2:d8:
fc:60:aa:37:47:77:82:71:7e:14:15:78:a8:cc:32:
38:3b:e9:0a:4e:52:0e:24:85:f7:8e:8f:e0:2c:c1:
ad:b3:ed:ac:36:02:84:18:2b:f9:c8:0b:2e:aa:ed:
39:9f:fb:df:48:8b:d7:9b:20:29:ff:b3:57:05:4c:
00:fc:4a:77:b8:c0:01:fc:30:45:3c:85:93:03:d3:
9e:5e:37:ea:10:01:be:cd:4d:bd:9f:e9:b0:10:af:
6f:2a:65:c6:b9:80:b9:ed:05:77:66:a0:f9:63:34:
24:a5:db:06:b2:a0:e8:33:d1:70:f9:1d:1d:d1:9e:
6c:d0:74:66:0b:9e:f3:10:a8:35:77:46:0d:d6:f4:
48:dc:2e:5a:77:70:ce:fc:20:e9:82:fa:92:31:b2:
bb:90:37:77:3a:98:72:74:9c:12:67:f7:35:8f:66:
aa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F7:1D:4E:FA:95:32:8A:E4:73:DA:68:00:EE:5B:AF:73:1B:A9:18
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f2:06:08:87:ae:3b:bd:87:97:45:69:b0:50:53:7f:e9:1c:
fa:bd:7f:48:95:9b:5a:d4:3f:49:69:06:e9:08:a0:c6:83:98:
42:59:b0:67:a3:16:72:fb:71:01:20:fe:c3:9a:a8:56:49:b8:
17:bf:06:d7:6f:a8:d6:b0:3f:6d:73:fc:98:5b:c7:b7:63:4b:
01:cf:c0:24:22:b5:b8:2f:7c:5f:e3:0b:70:7f:31:2a:0e:ca:
c5:0c:db:5f:c3:21:d9:dd:b8:de:1b:d7:b5:1d:f2:9b:8b:ab:
52:db:fe:a8:2a:09:90:44:b9:2a:74:40:1f:15:ae:3f:90:f2:
d1:db:fe:25:6d:a2:6f:ff:00:f9:97:ab:eb:68:45:ff:4a:b5:
6e:b3:5a:89:a0:6f:63:a8:2a:85:55:3a:fc:40:a2:ba:0d:07:
27:b6:60:af:9a:c7:d8:e4:41:fd:62:54:34:3d:51:c6:20:65:
a5:0a:35:79:31:23:d9:c9:9c:a9:4c:1d:d2:27:d7:24:f4:5c:
28:71:10:76:19:6c:db:80:22:d8:54:4c:90:37:2c:1d:ac:cb:
64:7d:31:1f:2c:26:a7:ab:6f:d8:83:bc:05:d2:f9:8b:93:2a:
3d:30:2d:e6:66:21:50:36:6a:38:0b:e4:07:3b:45:0e:79:f6:
d9:4c:27:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGNU9t0Zc39fRD+0ZiW/Jz7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYjYyMzcxZWM2MmVmZDBmNDM4NWZhMDQ3MzA1NmYwODgx
OGRlNzMwHhcNMjYxMDMwMTUwMDQ1WhcNMjYxMDMxMTUwMDQ1WjAzMTEwLwYDVQQD
EyhiM2Y3MWQ0ZWZhOTUzMjhhZTQ3M2RhNjgwMGVlNWJhZjczMWJhOTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWkbPt7D7s29MYELp9eqMyLllp0i
ar053bk2s/qeO8xP+eUbnbhLr3HSJt3iAhbF6TZvVtyeH+H1g6xuWwLuQ4eM5Crg
4pyeyQB7FbXSNVyI4f5q0cfWstj8YKo3R3eCcX4UFXiozDI4O+kKTlIOJIX3jo/g
LMGts+2sNgKEGCv5yAsuqu05n/vfSIvXmyAp/7NXBUwA/Ep3uMAB/DBFPIWTA9Oe
XjfqEAG+zU29n+mwEK9vKmXGuYC57QV3ZqD5YzQkpdsGsqDoM9Fw+R0d0Z5s0HRm
C57zEKg1d0YN1vRI3C5ad3DO/CDpgvqSMbK7kDd3OphydJwSZ/c1j2aqbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLP3HU76lTKK5HPaaADuW69zG6kYMB8GA1UdIwQY
MBaAFKK2I3HsYu/Q9DhfoEcwVvCIGN5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8wYmU1NTEtZDYwZC00OWJiLThjYWQt
Njc1ZTA3MjM1NjU3LzEvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8wYmU1NTEtZDYwZC00OWJiLThjYWQtNjc1ZTA3MjM1NjU3
LzEvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvIGCIeu
O72Hl0VpsFBTf+kc+r1/SJWbWtQ/SWkG6QigxoOYQlmwZ6MWcvtxASD+w5qoVkm4
F78G12+o1rA/bXP8mFvHt2NLAc/AJCK1uC98X+MLcH8xKg7KxQzbX8Mh2d243hvX
tR3ym4urUtv+qCoJkES5KnRAHxWuP5Dy0dv+JW2ib/8A+Zer62hF/0q1brNaiaBv
Y6gqhVU6/ECiug0HJ7Zgr5rH2ORB/WJUND1RxiBlpQo1eTEj2cmcqUwd0ifXJPRc
KHEQdhls24Ai2FRMkDcsHazLZH0xHywmp6tv2IO8BdL5i5MqPTAt5mYhUDZqOAvk
BztFDnn22Uwn+A==
-----END CERTIFICATE-----
Generated at Fri Oct 30 20:24:30 2026 by rpki-client