
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier: LkGVUxX+kaNNHsP3iytJwSc93OUHtBwiQDJEjU3J3lc=
Subject key identifier: 84:4C:A4:58:FC:95:BD:56:7D:9C:ED:0F:35:51:77:D0:45:00:AF:4D
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 019FA2CF3E7455B91C321A5FD790E7A6D240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number: 06EB
Signing time: Mon 27 Jul 2026 09:01:58 +0000
Manifest this update: Mon 27 Jul 2026 09:01:58 +0000
Manifest next update: Tue 28 Jul 2026 09:01:58 +0000
Files and hashes: 1: 6ztTDGBSEjfUz5YPUm3xJqrFtBQ.roa (hash: NaCtdBF9yWOeFeahp2D+pL4fXJjohl4aTNmTP8dCNsQ=)
2: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: QO7Y3a341yRzoJ2BOz6CWGmN2NkZGhlPFjko5y+jnCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cf:3e:74:55:b9:1c:32:1a:5f:d7:90:e7:a6:d2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: Jul 27 09:01:58 2026 GMT
Not After : Jul 28 09:01:58 2026 GMT
Subject: CN=844ca458fc95bd567d9ced0f355177d04500af4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:73:0c:1b:50:4c:c6:ef:c8:39:cf:bb:c0:
51:fc:6c:13:56:59:9a:2c:0f:42:ec:48:48:26:6b:
13:7b:af:98:a9:1b:c5:fe:2f:af:1c:59:00:4b:47:
57:fd:35:73:b1:ec:23:07:36:e9:92:2d:a2:e9:c5:
0b:fc:58:cb:2d:e5:07:69:37:3b:df:45:54:9e:4f:
fe:0a:ff:e3:ed:4a:93:43:7b:d8:21:fd:09:eb:6b:
97:56:0a:d4:72:84:90:9e:a9:3a:5b:95:7c:e0:f0:
a7:ce:95:95:ec:d4:5d:17:10:a9:bb:21:36:52:cd:
1f:94:3b:a2:b7:59:18:da:92:95:25:6c:24:13:67:
42:40:1e:45:e8:72:86:93:b5:42:68:67:ff:7c:e8:
ea:b1:29:bc:8b:4b:5d:5c:6b:b9:26:89:0f:f8:38:
1f:3f:4f:be:e9:7a:36:23:e2:a4:e7:93:e9:d2:de:
bf:03:a0:60:01:5c:9a:5e:96:3f:c2:cd:e2:85:97:
c2:29:f2:65:b5:85:f3:d6:f7:94:45:8a:35:6f:c4:
1a:eb:03:79:4d:4b:27:0b:ac:d8:ce:71:bf:04:85:
b3:d2:71:c3:3b:bd:04:cd:40:e2:ff:91:dc:fd:ff:
27:1c:3d:e8:e1:4c:b1:98:46:91:a7:d5:d9:90:10:
6f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4C:A4:58:FC:95:BD:56:7D:9C:ED:0F:35:51:77:D0:45:00:AF:4D
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7c:a5:39:0c:48:43:24:9e:12:4d:fc:1c:a9:c5:b7:4e:00:
af:ec:72:3c:37:38:5c:25:7d:08:ac:9b:7a:09:d6:4e:cd:7d:
e0:35:60:bf:54:89:4a:7d:e3:b2:c2:7f:17:74:79:ee:a8:04:
f5:b2:e7:b0:82:5d:35:61:54:51:da:84:39:86:79:26:32:59:
8b:82:3c:82:c4:26:88:3a:5b:38:d5:f6:94:80:b8:12:f1:e8:
a2:70:52:81:6b:4c:ee:97:46:c1:dc:80:77:94:44:8c:93:5b:
13:30:a9:10:64:f1:de:83:fa:23:d6:c8:7a:86:5e:f4:d5:70:
a9:64:71:41:2d:d6:b3:25:98:eb:4f:97:46:01:71:d1:0d:a4:
40:28:f9:23:3b:30:21:1e:8b:65:e4:01:b8:e8:88:0e:58:c1:
d0:77:93:77:66:ac:f5:70:a2:c3:ac:27:7b:16:d6:3c:fc:c5:
f5:d5:43:44:3e:06:e2:41:ee:c1:5d:fa:e5:6a:1e:f6:29:d2:
29:eb:a7:30:ea:12:26:83:9a:f6:26:50:5d:56:93:4d:f7:76:
7e:0f:c2:49:68:87:82:7a:2b:65:c8:55:4c:1b:9b:0c:35:b3:
c7:e3:3a:23:66:11:35:96:91:5b:f4:6e:50:71:5f:bc:4f:34:
d2:89:c7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:58:17 2026 by rpki-client