Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier: i6dhohZP2P9nJJv6cBiP6EXC4WOJ2atMuprzO3dLhjo=
Subject key identifier: 51:C3:0D:76:D6:D5:DE:57:0D:0F:AA:F2:7F:91:4C:2C:54:F8:35:4B
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 01A176275B6DA9F7959B772F1447A76C72B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number: 1A64
Signing time: Mon 26 Oct 2026 03:00:53 +0000
Manifest this update: Mon 26 Oct 2026 03:00:53 +0000
Manifest next update: Tue 27 Oct 2026 03:00:53 +0000
Files and hashes: 1: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: 8DfA75fDejviI4oLLWNQEb95h2p9Y3kJlqFiKZOPtts=)
2: s7RCJecrkvhO4O8n4hnHhMn63mI.roa (hash: RMUboypqGxzOTuEkOaIhesKwecXYlREEbxutxlq+fCs=)
3: yhoQSW5m0HxnhBThODAYvKmDatA.roa (hash: Zj3xva8IbUjYyCWlM9IRCPCWul21ZtyOBPZl0zgZK3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:5b:6d:a9:f7:95:9b:77:2f:14:47:a7:6c:72:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Oct 26 03:00:53 2026 GMT
Not After : Oct 27 03:00:53 2026 GMT
Subject: CN=51c30d76d6d5de570d0faaf27f914c2c54f8354b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f4:09:e2:45:a5:ec:ac:a2:21:99:36:0f:32:
90:13:0b:72:9f:92:ea:14:71:a0:fe:3d:9a:80:ad:
00:41:71:ef:92:cc:e3:3a:fd:26:3c:aa:aa:52:73:
c9:aa:90:33:02:e2:2b:92:ab:08:c4:7e:1b:a2:37:
7a:c0:b9:5c:6c:b3:89:61:81:8c:5a:3e:21:95:e9:
49:fc:fe:81:f4:b9:05:aa:e3:d8:4e:8d:6f:a5:8e:
e7:c2:57:10:00:9d:72:6a:85:3c:8c:d4:1a:c1:9e:
b5:ef:d6:b7:a6:8c:51:3d:65:8a:e2:f5:7a:3e:e8:
c6:f1:50:9f:77:40:e1:b6:65:e0:75:44:fa:1b:9a:
69:7d:ff:6c:61:64:7c:8b:e8:84:aa:b9:c4:fa:c0:
db:48:52:5d:c4:29:18:30:8c:9e:66:55:29:e4:0d:
b8:6d:00:f2:da:df:d8:6f:d1:38:1a:63:40:5c:08:
3c:d2:c8:69:6a:3b:d2:2c:96:ab:12:12:56:47:bd:
bd:6f:91:3d:9e:14:7d:0c:90:68:04:52:d6:8f:0b:
be:5b:bd:d1:bc:c4:98:b7:76:a3:2a:65:9d:69:8a:
bf:d6:66:bf:93:6b:14:58:e4:b0:ec:40:f7:1c:cd:
1e:11:29:95:ec:85:08:23:b4:de:dd:13:de:e9:63:
ba:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C3:0D:76:D6:D5:DE:57:0D:0F:AA:F2:7F:91:4C:2C:54:F8:35:4B
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:cb:05:39:81:5a:72:d1:e5:d6:98:81:cc:96:78:51:f7:77:
3f:c0:5a:1b:3f:09:11:00:bf:59:1a:e2:00:0e:8c:da:e6:6a:
95:ee:07:32:98:2e:06:d7:02:75:1b:1f:6b:b5:1b:b3:69:46:
16:fe:37:11:3c:a4:82:d3:1e:27:55:d4:9c:5b:c1:ca:55:ad:
98:5b:d0:41:f5:73:c3:98:e0:04:92:2d:46:fe:19:4e:25:d2:
0a:d1:7a:6c:f3:69:05:c0:e7:30:d6:16:19:b2:fb:52:07:47:
de:bf:75:03:03:12:1d:c5:5e:90:8e:4c:ef:bb:ff:60:40:27:
0d:80:33:42:79:ff:e2:77:ef:24:f0:1b:ad:0a:3a:ba:7c:6d:
2f:be:48:a9:1e:ad:11:2d:48:01:32:ce:8f:87:0f:c0:59:18:
50:b4:f6:c5:48:3d:c7:3f:85:81:a5:13:fa:57:b6:dd:c0:f0:
d2:d2:9e:ae:75:23:a9:e2:b0:87:e6:71:be:d1:07:43:2d:61:
0a:16:bf:44:64:91:a8:e7:15:11:00:a8:c5:96:bf:39:f9:de:
92:f3:a9:1b:5b:66:7f:44:28:27:a6:b4:bd:d5:e9:7f:4d:86:
12:bd:fa:ca:68:52:a9:da:b3:a5:f1:c5:78:b8:3a:a7:41:53:
df:09:30:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:33:28 2026 by rpki-client