Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier: h6luny4Cwvpln7LXvY+prbA0LjqF2VvODlYA8cKqCWk=
Subject key identifier: F5:65:81:2E:10:5B:55:C4:E3:FD:7E:B5:1E:65:75:FC:20:89:AB:EE
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 019F85D5F4F793299AF179873B6856872185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number: 1963
Signing time: Tue 21 Jul 2026 18:00:19 +0000
Manifest this update: Tue 21 Jul 2026 18:00:19 +0000
Manifest next update: Wed 22 Jul 2026 18:00:19 +0000
Files and hashes: 1: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: 4dwBkS4b4MxlrBRSljQ6J651VIY0mhBop2/glekA0dU=)
2: s7RCJecrkvhO4O8n4hnHhMn63mI.roa (hash: RMUboypqGxzOTuEkOaIhesKwecXYlREEbxutxlq+fCs=)
3: yhoQSW5m0HxnhBThODAYvKmDatA.roa (hash: Zj3xva8IbUjYyCWlM9IRCPCWul21ZtyOBPZl0zgZK3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d5:f4:f7:93:29:9a:f1:79:87:3b:68:56:87:21:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Jul 21 18:00:19 2026 GMT
Not After : Jul 22 18:00:19 2026 GMT
Subject: CN=f565812e105b55c4e3fd7eb51e6575fc2089abee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:13:24:16:53:09:9a:f7:05:7a:25:d7:f1:
5d:1b:9a:01:c7:70:42:3e:b2:fc:cb:ee:e4:6f:4e:
1e:bd:69:bc:8f:2b:b8:5e:11:d6:c2:ea:e5:0d:d8:
96:89:53:7f:00:06:b5:ef:fd:47:a9:10:05:d6:d0:
d5:fc:35:ec:87:ea:ce:bc:78:6a:c0:1f:a2:fb:58:
30:e2:4f:0d:57:96:9f:b3:15:ea:79:9d:d7:2d:e5:
18:e0:19:05:a3:92:3b:46:27:a8:a1:5a:03:0a:04:
4c:a3:5b:b8:71:db:9b:51:e2:a6:80:06:cd:05:81:
91:e3:d7:2a:87:32:e4:57:92:c1:66:d9:b7:05:df:
db:b8:59:36:63:14:ff:e3:6a:9c:29:19:43:5a:46:
49:0d:94:6d:7b:33:76:b9:92:a8:4d:a4:a3:bc:1c:
49:e7:b5:43:7f:f9:b0:eb:48:1d:8c:fb:af:25:9c:
c7:1b:b5:63:3a:ab:1d:dc:f4:f8:39:22:3a:e6:56:
5a:44:2b:6a:9a:bb:76:8b:0c:76:65:04:39:3e:16:
ab:f0:68:65:2b:36:53:60:8a:cf:21:a4:5d:b9:9f:
5e:9e:95:bc:a2:af:71:e1:64:0e:b1:09:ef:40:f3:
a0:9a:f6:7a:89:06:80:0f:37:4f:ee:7a:c6:19:46:
e3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:65:81:2E:10:5B:55:C4:E3:FD:7E:B5:1E:65:75:FC:20:89:AB:EE
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b5:ca:2b:0d:e8:98:29:36:f8:09:97:06:69:fc:c0:ec:20:
bf:0b:1e:70:9c:f8:07:0e:08:3f:ce:33:f2:dc:6b:dd:b6:3e:
a5:97:4b:18:a6:ff:07:6b:80:fc:86:11:06:06:a9:cf:24:71:
dd:3c:99:7c:d5:55:45:40:c2:9e:96:b1:8a:ec:e9:f4:07:8e:
ed:69:28:2d:d2:e4:b2:d3:70:cc:83:35:c3:91:3a:32:f7:aa:
a5:57:eb:4b:5f:72:c1:30:5d:dc:c2:58:49:87:b3:91:72:5d:
d1:9e:9a:5a:e0:53:f0:91:17:f6:80:9e:06:d1:d6:50:41:a4:
35:5f:66:db:d4:76:84:e2:60:df:a3:d4:0d:b1:61:8c:08:fd:
20:f3:f5:96:f7:59:30:3c:e9:10:c4:48:ab:7a:31:0e:d1:82:
0a:f2:6f:f6:25:c0:83:17:41:46:8c:52:75:08:e9:c4:18:4a:
e2:e7:11:42:b3:63:19:48:39:84:fa:78:8f:ce:b7:5c:3a:6d:
0f:bb:b0:d9:09:bd:7f:62:75:48:5e:6f:00:df:2f:45:99:7d:
9d:f7:a0:97:38:fe:8f:a3:0f:94:37:f7:cb:94:e0:e1:86:68:
6f:f3:e6:66:4e:25:ce:ff:61:e1:8b:8f:c9:b4:06:bd:05:0a:
15:fb:33:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:15:25 2026 by rpki-client