Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier: eTpYh0C/vYVgD2cRBSVnsHl8uwmcsQdrvhC/PMGCrJs=
Subject key identifier: 86:D0:0B:B9:06:86:B4:BF:86:32:34:0E:84:AE:1A:94:B6:99:AA:79
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 01A06D949DA7AA40FE92C9DC646578CF27D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number: 19DB
Signing time: Fri 04 Sep 2026 18:00:51 +0000
Manifest this update: Fri 04 Sep 2026 18:00:51 +0000
Manifest next update: Sat 05 Sep 2026 18:00:51 +0000
Files and hashes: 1: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: VZWpeUekv/gUSRQKHE++jYkJzFVNg6tvaKZXFGQE1K8=)
2: s7RCJecrkvhO4O8n4hnHhMn63mI.roa (hash: RMUboypqGxzOTuEkOaIhesKwecXYlREEbxutxlq+fCs=)
3: yhoQSW5m0HxnhBThODAYvKmDatA.roa (hash: Zj3xva8IbUjYyCWlM9IRCPCWul21ZtyOBPZl0zgZK3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:94:9d:a7:aa:40:fe:92:c9:dc:64:65:78:cf:27:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Sep 4 18:00:51 2026 GMT
Not After : Sep 5 18:00:51 2026 GMT
Subject: CN=86d00bb90686b4bf8632340e84ae1a94b699aa79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cd:a9:bb:6d:c6:4d:2d:fc:5b:e4:28:68:0d:
64:01:f5:c4:1c:f6:5b:ce:83:c6:31:88:8a:c1:57:
ba:60:af:1c:4a:58:f4:10:35:f3:a0:e7:87:54:f9:
db:bc:66:9f:2f:cb:d7:97:22:d2:41:95:57:bf:ea:
a5:dc:7b:3a:ad:89:9e:3e:b6:46:2e:86:a7:6f:10:
5d:1d:29:a7:b8:01:32:8d:ac:41:ed:fd:be:7e:7e:
66:df:c2:9b:ea:76:8f:87:a5:2e:c2:b1:16:5d:0b:
e6:76:50:7d:d9:4e:98:bc:44:07:3e:51:19:cb:c5:
6e:80:16:97:da:94:bb:a4:0b:d2:94:d0:08:04:63:
f1:c8:7a:88:e9:7a:fb:f7:32:09:6a:d8:85:bd:00:
36:82:1b:27:72:20:a9:38:8c:aa:22:ff:86:5d:22:
31:3d:04:90:8e:bc:df:2a:05:31:09:89:f3:fe:48:
c8:8d:2b:7d:87:35:d3:95:0d:07:51:e9:77:d7:7e:
43:53:3e:e0:df:ad:fa:96:ad:ed:65:31:28:78:de:
cd:ae:2c:fc:03:fa:79:49:d7:8f:e3:ed:30:44:16:
7d:27:5f:ec:39:2c:d4:16:e7:48:ea:f5:87:94:61:
48:5d:4c:7f:f0:97:71:96:45:b4:33:8c:cd:8a:6c:
69:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D0:0B:B9:06:86:B4:BF:86:32:34:0E:84:AE:1A:94:B6:99:AA:79
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:02:8a:72:b5:8b:da:1b:e1:00:be:81:50:7e:cd:24:8b:f8:
ff:10:77:46:fc:c3:d7:61:cb:36:fb:0b:84:b3:a0:13:d9:8a:
4e:6c:99:7c:bc:cb:33:2b:c6:bd:6c:9a:db:be:fb:55:2f:b0:
94:f5:24:49:33:03:83:fa:71:64:f7:c7:19:4d:8b:43:be:1d:
aa:66:eb:82:24:f7:bd:0a:b1:55:d0:12:64:66:25:4a:38:21:
f2:53:58:65:8c:82:e7:38:32:1a:87:05:91:17:8f:12:1f:d3:
97:b5:88:c0:cc:27:8d:60:51:69:5b:88:88:fd:31:d1:c7:47:
a0:ff:74:8f:fb:ac:02:5f:96:2a:c3:aa:80:41:b3:0f:91:85:
cf:32:50:b2:ed:54:9d:c6:2c:e3:d5:0e:57:2a:fc:73:0f:cd:
51:c0:90:f0:b9:ef:7f:cd:4c:e7:49:5b:a7:36:da:a6:11:83:
bd:c2:75:96:fd:07:26:18:22:2b:7a:f7:7d:5f:1a:96:6d:30:
6f:42:50:f9:99:90:75:a0:13:4c:fc:90:09:43:20:02:bb:ec:
72:7f:71:d6:b8:70:3f:f2:30:d1:26:df:be:88:f1:3b:ec:04:
df:6a:6a:30:76:23:77:a8:d0:b3:42:f3:18:9b:c0:fe:a9:ef:
07:42:09:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:23:09 2026 by rpki-client