Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier: u8pmOWZc5D9mqe4CJMtBHSI0KRgbYKrnx6D+4Cwyp2I=
Subject key identifier: 6B:F8:11:A6:C6:1B:17:9B:50:7B:4E:51:9E:31:94:DD:A7:9F:ED:71
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 019CE5C92302BE8E43EEADD48937711FD3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number: 0580
Signing time: Fri 13 Mar 2026 06:01:29 +0000
Manifest this update: Fri 13 Mar 2026 06:01:29 +0000
Manifest next update: Sat 14 Mar 2026 06:01:29 +0000
Files and hashes: 1: 6ztTDGBSEjfUz5YPUm3xJqrFtBQ.roa (hash: NaCtdBF9yWOeFeahp2D+pL4fXJjohl4aTNmTP8dCNsQ=)
2: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: wyVU2lRMmRtzI4bHPIUDPtjERtrkVvPPc8VbNEFqNqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:23:02:be:8e:43:ee:ad:d4:89:37:71:1f:d3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: Mar 13 06:01:29 2026 GMT
Not After : Mar 14 06:01:29 2026 GMT
Subject: CN=6bf811a6c61b179b507b4e519e3194dda79fed71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:23:9b:b0:cf:0c:8d:d6:2b:6e:c8:83:ab:6f:
51:a3:c3:c2:c2:19:d2:a0:5c:ca:98:94:38:b6:63:
13:ad:b0:fa:40:c9:ed:22:1a:45:15:56:14:6c:16:
25:78:b9:59:a6:53:a8:ab:be:3f:d7:4f:5f:7b:4d:
4f:f9:c0:91:a8:ae:fc:51:c2:05:91:4b:01:3f:ca:
48:61:dc:c4:a8:d6:19:be:8b:8e:ac:21:da:75:9d:
d3:2e:68:af:4e:e6:52:a4:e9:0c:12:b1:44:39:86:
0d:0a:94:fb:4a:cd:d2:f7:e0:0e:0d:11:77:c2:79:
06:cf:e5:7b:eb:68:18:58:76:46:21:7d:38:dc:7a:
74:87:da:6a:86:d1:b5:bd:69:01:ce:9d:74:00:79:
c9:7d:77:10:ab:42:61:7c:56:f3:aa:3b:56:72:07:
22:dd:3e:82:32:a2:8d:58:88:0a:d6:d3:9b:c6:26:
da:0e:bb:e0:f9:2b:d2:69:83:50:a1:52:f4:9e:80:
3b:2e:c5:30:2d:1c:53:28:b9:27:c0:99:2d:6e:3a:
1f:f9:d6:7a:c6:10:a0:a3:e4:79:24:df:57:e0:f3:
89:8a:84:8d:1f:40:df:a5:55:e6:fc:a4:df:ea:b1:
0a:fd:16:cf:48:f5:98:2a:00:6e:6c:94:8c:5f:9e:
fa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F8:11:A6:C6:1B:17:9B:50:7B:4E:51:9E:31:94:DD:A7:9F:ED:71
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:da:73:7e:d1:68:53:35:32:94:23:c5:46:c0:5f:28:3b:cb:
0e:63:f2:12:fd:e7:2b:d5:52:09:11:50:6a:98:da:05:89:a8:
9d:45:d8:b7:95:e4:15:87:99:d4:b4:9d:ff:f9:b9:6d:ae:b4:
c5:24:ce:16:5c:9d:a4:91:29:03:89:8b:f4:29:c2:d3:92:a4:
3d:60:63:26:3d:88:39:7b:7c:07:05:88:1b:48:de:43:3e:64:
02:75:aa:2b:76:ad:c6:66:68:cf:4f:be:be:b6:4c:74:b8:15:
18:0d:d0:06:81:09:fb:b3:81:2f:96:d2:5a:92:89:93:8e:0d:
36:06:33:7e:15:cd:e2:52:f0:cb:f4:db:67:e1:17:9b:4c:d6:
2f:10:58:d1:a2:cf:4d:03:3f:f2:8e:93:4e:8e:3d:d3:95:34:
06:cc:8e:9e:e9:6a:e0:c3:50:1b:b0:ac:43:23:98:69:f8:fc:
bd:dd:be:17:e0:47:42:12:a5:50:81:17:8f:21:23:e5:c8:7f:
22:c9:f3:61:cd:26:a0:a7:59:b8:cc:a6:14:cd:93:5c:c8:4d:
27:4d:06:60:5d:9c:ea:4a:1c:1c:87:50:a5:27:08:bb:cd:d4:
5a:29:d1:bd:f5:c3:3e:a7:d7:c0:c4:f3:3a:38:bc:cb:76:6e:
67:36:81:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:19:53 2026 by rpki-client