Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
File: ORxdMzEUXsjicYdvgEIge50Ay2Q.mft (raw, json)
Hash identifier: sUhiBZRw/hwbN7F0pomoqFKN5OjwQLD/Wktv3IbR+BY=
Subject key identifier: F6:1D:1C:16:DA:11:45:61:11:EC:7F:F9:1F:D2:E1:B6:A0:12:06:A2
Authority key identifier: 39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
Certificate issuer: /CN=391c5d3331145ec8e271876f8042207b9d00cb64
Certificate serial: 019D37C06F200CF5BA478CC8294458A34A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
Manifest number: 1166
Signing time: Sun 29 Mar 2026 04:00:51 +0000
Manifest this update: Sun 29 Mar 2026 04:00:51 +0000
Manifest next update: Mon 30 Mar 2026 04:00:51 +0000
Files and hashes: 1: ORxdMzEUXsjicYdvgEIge50Ay2Q.crl (hash: yLw4eAi5u/t93oNJ0CGgdBjqTkLEDF+Fq8NJf/ta0Kw=)
2: bv7crWXlDlytvYkySG7c5NmMUkA.roa (hash: hgMG06MlwTq9Qr8spukEtgFAVFOnQKq96lFNbYV3uWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:6f:20:0c:f5:ba:47:8c:c8:29:44:58:a3:4a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391c5d3331145ec8e271876f8042207b9d00cb64
Validity
Not Before: Mar 29 04:00:51 2026 GMT
Not After : Mar 30 04:00:51 2026 GMT
Subject: CN=f61d1c16da11456111ec7ff91fd2e1b6a01206a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:24:38:ca:88:96:8b:32:43:80:15:d7:80:
01:08:f9:7a:74:95:cd:77:d4:15:f6:ef:1d:a2:1a:
4b:43:30:ed:00:45:40:04:4c:f6:ad:9b:41:a0:ae:
28:0d:ad:75:9f:03:c3:a9:ce:6e:4a:aa:27:45:9f:
43:76:9a:1a:43:fc:b7:a1:31:b2:14:5f:8b:75:10:
a4:40:4d:64:5b:62:d5:55:af:9f:ea:ed:5b:3e:83:
f7:a8:b2:45:c3:70:86:ff:d5:f0:af:00:7c:9b:69:
51:7e:1c:8d:81:59:ba:51:62:07:86:f5:7d:16:98:
2d:5f:6e:c6:12:12:1b:4e:44:c7:11:d4:b6:be:ac:
98:9f:08:fc:87:78:70:ee:b2:d0:0b:3b:e3:47:44:
b6:e7:ef:4e:ad:8c:24:aa:af:2c:f2:e8:ff:30:44:
b6:82:60:a5:e7:40:a4:8b:c4:e6:10:3b:d4:f8:bf:
e5:a5:0d:94:9a:e9:7a:ba:d1:a6:f7:8e:a5:c5:12:
98:f8:ca:52:bb:ac:9a:a7:8d:c7:16:30:8e:71:5f:
b8:3a:a1:6e:2c:a5:cf:2c:34:ca:83:4d:42:92:33:
6d:e6:0c:4d:97:b1:99:35:63:33:d5:2f:05:2e:3d:
9a:45:c3:4b:03:99:d9:31:eb:70:7e:60:c7:42:b3:
f7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1D:1C:16:DA:11:45:61:11:EC:7F:F9:1F:D2:E1:B6:A0:12:06:A2
X509v3 Authority Key Identifier:
keyid:39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f2:63:1a:81:04:c3:89:ca:26:33:56:30:58:35:19:84:40:
7c:aa:e8:41:8a:df:e2:40:97:c8:2f:23:31:59:d2:92:03:4f:
26:80:bc:4a:bf:94:af:ac:09:2b:bf:ed:6f:6a:92:59:b5:24:
b7:d0:2b:4d:c3:63:11:4f:cc:a0:2b:35:58:4f:8e:2c:e5:a3:
ee:90:d2:ff:ef:bd:39:b1:94:cf:d0:96:bd:7d:bc:b7:af:cb:
2d:5b:79:9d:22:83:b6:6c:ce:5a:76:36:02:a7:ec:fe:2d:b0:
f4:fe:84:91:80:08:cd:a7:59:72:e2:e2:75:8f:14:2e:03:13:
e8:51:fa:90:f4:60:10:95:f5:e3:e0:e2:d9:97:db:96:c1:4d:
ab:e9:90:65:52:e9:ad:c5:7d:78:8d:a4:15:82:73:6b:c8:3d:
4d:a0:2c:9e:cc:ca:37:18:75:15:ba:7e:11:32:d5:a9:b5:8b:
2d:e2:5a:39:ee:0b:5a:90:c6:ba:36:77:e0:ac:ee:d3:fd:3f:
c2:91:e7:0c:6f:ad:2e:53:b3:37:4e:26:2b:b7:e1:e3:e9:cc:
39:44:ab:f0:57:0d:df:18:57:78:02:26:be:84:80:97:48:66:
e7:7c:c9:14:2c:93:28:1c:cd:f3:8c:6c:73:28:45:ac:33:cd:
0d:0a:e7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:02 2026 by rpki-client