Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier: mCEw5XwUW1xc+Qi27LhxZjshc/KNHZWb43vtidrw70w=
Subject key identifier: 60:FC:0F:39:7C:55:0F:7C:A0:C1:D4:06:77:BA:27:92:1C:6C:1A:83
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 019D36E49B3140B954A8046EF12EDA6E5597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number: 1831
Signing time: Sun 29 Mar 2026 00:00:44 +0000
Manifest this update: Sun 29 Mar 2026 00:00:44 +0000
Manifest next update: Mon 30 Mar 2026 00:00:44 +0000
Files and hashes: 1: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: KeANuE1S5V+LspooOSl+JgXgKTaJRurnwJJ+IstC9gE=)
2: s7RCJecrkvhO4O8n4hnHhMn63mI.roa (hash: RMUboypqGxzOTuEkOaIhesKwecXYlREEbxutxlq+fCs=)
3: yhoQSW5m0HxnhBThODAYvKmDatA.roa (hash: Zj3xva8IbUjYyCWlM9IRCPCWul21ZtyOBPZl0zgZK3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:9b:31:40:b9:54:a8:04:6e:f1:2e:da:6e:55:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Mar 29 00:00:44 2026 GMT
Not After : Mar 30 00:00:44 2026 GMT
Subject: CN=60fc0f397c550f7ca0c1d40677ba27921c6c1a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:af:b0:0f:16:b1:ed:37:10:40:ca:9a:c5:
56:de:90:dd:c6:a8:e8:41:c3:df:6a:ca:59:7f:b6:
20:f0:a7:c1:7f:19:39:29:c2:b8:f3:ef:e7:90:9c:
88:2d:ad:cc:ba:bb:18:60:45:3b:32:be:be:35:56:
f2:04:ef:ae:3f:e0:6a:02:70:c6:d4:c8:9e:e8:09:
5e:cd:d8:0e:a0:75:10:75:17:b3:1e:5c:70:f8:86:
d9:d0:88:76:6a:ba:03:5a:b1:ac:06:5b:56:a1:17:
1e:92:4a:bb:93:57:ed:c8:f5:a2:d4:35:93:48:5f:
34:4e:5b:c9:8c:c6:d6:70:ae:b3:c1:e3:35:91:9c:
9d:80:af:3c:0c:1f:25:28:30:79:b2:9b:4b:e4:6d:
0d:8a:5d:6c:7e:88:4e:71:ca:7a:02:e1:05:19:39:
87:82:fc:32:94:ff:8c:d2:47:54:94:cb:b2:63:55:
ce:2d:db:b4:d7:6b:24:39:f3:0c:7a:9d:f2:76:c9:
ca:66:5b:bd:31:d8:c8:98:c7:a9:9b:76:ce:48:ef:
9e:de:0c:8b:e7:da:5b:24:c1:eb:0d:fe:e2:16:35:
b3:78:e7:cb:12:55:3b:0d:b9:13:43:bd:a2:ee:8c:
f5:34:86:df:0d:28:37:13:6b:fd:b9:05:ad:b8:d9:
a6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FC:0F:39:7C:55:0F:7C:A0:C1:D4:06:77:BA:27:92:1C:6C:1A:83
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:42:db:19:bf:5a:2a:b3:7f:ab:08:f3:23:3d:9f:c1:b7:d7:
54:0b:f4:13:54:c4:4d:84:61:80:e4:33:9e:8c:ba:5a:96:12:
c2:4e:be:b1:38:24:fc:43:24:4e:34:18:ab:1f:9d:74:d8:15:
7e:06:9c:b7:9b:30:d7:7b:9f:c5:33:7a:17:1b:f1:96:89:b9:
9c:5a:aa:71:ce:78:05:69:2c:d5:7f:5c:25:1e:0e:31:3c:4e:
e9:c1:30:0a:34:60:42:1a:57:9e:13:73:8d:62:5f:a8:84:6c:
a3:c6:d1:49:a6:a9:a9:6a:bb:b2:d3:27:2a:47:35:17:68:7f:
8c:6e:6a:66:50:26:87:21:a9:67:ca:61:24:8f:4b:52:31:d0:
9c:39:ef:d4:81:c2:a0:7a:2a:82:6d:3b:ee:54:8f:3c:6c:e0:
4b:fa:76:50:56:21:99:3a:a3:3b:31:c0:59:d4:9d:e2:06:1f:
dc:18:d6:15:a9:46:9f:cc:11:bf:43:99:78:80:61:5b:76:40:
09:da:1f:23:c5:da:c9:c8:cd:6d:46:c9:d2:89:db:24:3e:52:
fe:3e:16:91:52:91:f3:93:a1:1f:58:7f:2e:dd:99:36:6b:88:
d9:57:f0:d1:77:57:44:58:7a:a9:bd:73:8c:77:44:f9:01:13:
ed:77:ac:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:33 2026 by rpki-client