Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier: iI5uu9XVp32efMzPQvTm1dl1D2GGOO2N7VSSUE3y62o=
Subject key identifier: 55:30:B2:2D:98:DB:01:32:4D:AB:B6:13:55:FF:87:2F:15:76:EC:3F
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 019EB9215BE431A4DB8AE217585C58A979A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number: 0672
Signing time: Fri 12 Jun 2026 00:00:31 +0000
Manifest this update: Fri 12 Jun 2026 00:00:31 +0000
Manifest next update: Sat 13 Jun 2026 00:00:31 +0000
Files and hashes: 1: 6ztTDGBSEjfUz5YPUm3xJqrFtBQ.roa (hash: NaCtdBF9yWOeFeahp2D+pL4fXJjohl4aTNmTP8dCNsQ=)
2: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: zio+IC2hBL2H7o1bT3+yKUmymOfCo0zPZX16AAfDE60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 00:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:5b:e4:31:a4:db:8a:e2:17:58:5c:58:a9:79:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: Jun 12 00:00:31 2026 GMT
Not After : Jun 13 00:00:31 2026 GMT
Subject: CN=5530b22d98db01324dabb61355ff872f1576ec3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:d3:53:b5:90:17:a2:4e:0f:f7:d4:24:ee:
43:4c:97:a4:a9:80:26:a3:9b:f0:eb:62:19:bd:a6:
e6:4e:d7:58:a5:35:07:73:0f:1a:2e:39:d7:16:19:
98:eb:93:fa:be:62:02:d2:42:bf:6a:a6:e8:85:c7:
6c:72:99:0b:90:2b:49:8f:75:18:18:21:e0:99:8e:
9d:97:15:64:49:19:44:2f:b5:ee:e8:ca:8e:f9:1f:
c3:52:77:8e:44:4f:41:7a:36:72:ea:9f:d4:41:e2:
fa:71:a4:c9:28:b7:55:db:4e:60:f7:21:7f:a4:cc:
b2:80:c5:25:42:60:80:f0:fb:3c:30:fd:d4:62:4f:
b4:cd:57:91:6e:b2:b3:bd:9c:0c:fa:a0:aa:ef:bb:
05:1c:3d:6a:66:04:fc:4a:5b:1e:99:de:bf:a9:f3:
40:99:3f:c9:f9:2c:b6:96:af:c4:78:a0:66:ed:20:
cd:c0:c4:72:38:29:2b:01:63:49:45:58:5e:d6:cb:
a7:8b:e7:38:82:13:88:de:1c:79:dc:2e:d2:b2:21:
46:c2:02:e5:7f:56:95:87:0a:a9:f7:b1:24:5c:a9:
b1:e0:43:89:6d:95:8e:ea:8f:be:6e:fd:51:c7:8a:
bd:85:b1:fd:a6:1c:9a:7b:27:8e:f7:ed:88:9b:0a:
46:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:30:B2:2D:98:DB:01:32:4D:AB:B6:13:55:FF:87:2F:15:76:EC:3F
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3c:00:3d:7f:7b:20:08:22:43:45:5c:d4:09:4f:44:b9:5b:
26:12:86:22:f1:c6:a3:f1:ef:0c:7f:c5:3a:43:dd:ee:56:b4:
30:cc:a8:b8:43:34:38:ba:25:5d:8f:33:ce:b6:6e:c8:eb:08:
29:00:f2:89:0e:9b:1f:3d:a6:bf:8c:e9:1d:a9:c1:8d:21:65:
e1:a2:20:e4:da:dc:38:b4:0c:f2:f0:53:a9:19:4c:61:51:53:
7e:5a:c8:68:b7:80:da:42:5f:eb:8b:d1:f8:09:86:c6:62:00:
ff:42:16:54:63:38:d4:e0:41:6f:77:be:2a:e7:28:48:6b:ca:
31:ae:72:8d:0e:df:38:10:16:e7:6d:a5:7e:a0:96:77:86:46:
af:1d:c9:bf:0c:2c:b2:31:eb:4b:32:4c:95:f5:6f:af:16:d6:
eb:be:29:96:0a:55:65:ba:32:f9:b4:c5:91:51:4d:bf:5e:42:
16:29:a9:28:c2:69:c9:ff:7d:25:50:55:a4:58:d8:19:dc:de:
19:4f:c1:e3:2e:38:e6:51:a8:d9:bc:79:b7:9d:da:b1:f8:d7:
0f:59:8f:f4:eb:bd:5f:0d:66:5a:55:98:ff:37:b6:4e:f2:0f:
8c:ac:c9:03:84:e1:c4:05:1d:48:a0:18:65:4a:c5:8c:e6:14:
a4:2b:9c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:55:34 2026 by rpki-client