Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
File: ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft (raw, json)
Hash identifier: Z2fopxEp/7foC0Zgvy0xV2/mVdclH2ljmUkge3ZVeOQ=
Subject key identifier: D3:9A:18:AC:37:0F:B8:B1:4D:CB:47:F8:79:6F:57:3B:F4:19:F9:E6
Authority key identifier: 39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9
Certificate issuer: /CN=391b36bf39d2bc7f078e0279991876709c85acd9
Certificate serial: 019D39AF4C7441D894DB8F0CDEE97B174F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
Manifest number: 031C
Signing time: Sun 29 Mar 2026 13:01:22 +0000
Manifest this update: Sun 29 Mar 2026 13:01:22 +0000
Manifest next update: Mon 30 Mar 2026 13:01:22 +0000
Files and hashes: 1: ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl (hash: rHJ7coBpuZGp1I7RL3R+RZ1jayEBltDy0tzD+q3PYQc=)
2: vkfnJrHiy2sJ2-fSn0x2K1mT3tU.roa (hash: RiiYyuDkNY9o+2d4f389MOhfKC15CjzA8CBlt+hYg4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:4c:74:41:d8:94:db:8f:0c:de:e9:7b:17:4f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391b36bf39d2bc7f078e0279991876709c85acd9
Validity
Not Before: Mar 29 13:01:22 2026 GMT
Not After : Mar 30 13:01:22 2026 GMT
Subject: CN=d39a18ac370fb8b14dcb47f8796f573bf419f9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:94:b7:f9:32:aa:14:bc:c5:f2:90:ef:ca:
8a:60:80:47:f5:7b:b7:52:43:ac:df:25:a1:91:46:
01:60:a3:7c:e3:6b:c1:97:0e:80:79:0f:d4:5d:5a:
76:b7:93:a9:6d:ae:70:db:38:55:8e:14:57:9a:db:
01:02:3b:af:23:a9:29:de:02:d7:eb:d1:17:f3:d5:
05:08:fc:df:41:28:3a:ac:29:41:b6:65:90:da:05:
b8:4a:7a:38:02:d4:a7:4e:47:0c:20:16:8f:ab:7c:
99:e3:85:74:b4:a7:4f:e3:3f:12:9e:42:31:5c:12:
38:7d:7a:b0:3e:8f:ae:69:6c:5f:68:44:44:9f:54:
f2:34:ae:72:3e:57:27:eb:b9:0d:60:12:8a:31:0d:
3c:5f:ca:8b:bf:f5:da:ad:e6:24:61:64:80:69:22:
c7:b9:a6:11:24:a0:4e:65:41:00:03:9a:fb:7a:44:
a1:bb:ee:71:01:0e:79:9e:1c:0c:d7:a8:7c:51:bd:
11:fa:4e:17:26:e8:0f:16:b3:09:55:36:6a:f5:84:
cc:8e:2d:a0:fb:ef:fd:7c:b1:39:5c:97:9f:04:0f:
dc:45:2c:95:d4:88:98:bb:01:b5:6c:ef:1d:cb:b6:
ac:7c:f6:39:69:06:4f:a6:56:d4:b7:04:a5:e7:84:
a1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9A:18:AC:37:0F:B8:B1:4D:CB:47:F8:79:6F:57:3B:F4:19:F9:E6
X509v3 Authority Key Identifier:
keyid:39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fa:83:ff:39:e8:01:2f:27:fe:50:cd:66:65:21:13:64:11:
2a:08:47:2a:60:34:75:32:1e:42:e6:f1:dc:95:f2:9d:00:73:
50:06:59:53:42:cf:30:3a:98:0c:7d:42:d1:7d:10:22:45:de:
4c:6a:04:46:5c:2e:2f:06:92:97:4e:c5:48:b9:2b:c1:8d:ba:
b3:5b:2f:b8:1d:2a:d0:90:ea:d6:69:a0:f0:1e:31:92:cd:dc:
e7:98:95:9e:43:17:59:70:99:15:70:f7:fd:af:51:1f:c6:27:
5d:a5:2d:f4:cf:c3:f3:06:81:34:a0:c9:b2:5b:39:ce:6c:1c:
7d:41:29:eb:18:24:c3:d6:81:0e:0c:2b:7b:e5:87:1d:05:0d:
29:f8:b1:f5:ac:50:62:8b:67:f3:89:20:d3:74:0e:0f:78:f9:
10:e1:f4:99:7a:42:05:e3:87:1f:0d:dc:f5:8c:9f:b3:71:27:
06:57:7d:82:d6:08:ab:04:bd:cf:9d:9e:09:67:15:65:0a:93:
69:b7:aa:cd:1b:b0:5b:a7:bc:8b:e5:86:19:d8:d1:f7:51:c4:
4f:d3:7a:c7:96:5d:51:60:9e:fc:67:15:54:88:07:87:56:85:
74:e4:64:f9:26:45:48:59:10:8d:76:cf:4f:30:a9:14:d6:19:
f3:69:ac:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05r0x0QdiU248M3ul7F09eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MWIzNmJmMzlkMmJjN2YwNzhlMDI3OTk5MTg3NjcwOWM4
NWFjZDkwHhcNMjYwMzI5MTMwMTIyWhcNMjYwMzMwMTMwMTIyWjAzMTEwLwYDVQQD
EyhkMzlhMThhYzM3MGZiOGIxNGRjYjQ3Zjg3OTZmNTczYmY0MTlmOWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfiUt/kyqhS8xfKQ78qKYIBH9Xu3
UkOs3yWhkUYBYKN842vBlw6AeQ/UXVp2t5Opba5w2zhVjhRXmtsBAjuvI6kp3gLX
69EX89UFCPzfQSg6rClBtmWQ2gW4Sno4AtSnTkcMIBaPq3yZ44V0tKdP4z8SnkIx
XBI4fXqwPo+uaWxfaEREn1TyNK5yPlcn67kNYBKKMQ08X8qLv/XareYkYWSAaSLH
uaYRJKBOZUEAA5r7ekShu+5xAQ55nhwM16h8Ub0R+k4XJugPFrMJVTZq9YTMji2g
++/9fLE5XJefBA/cRSyV1IiYuwG1bO8dy7asfPY5aQZPplbUtwSl54ShCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOaGKw3D7ixTctH+HlvVzv0GfnmMB8GA1UdIwQY
MBaAFDkbNr850rx/B44CeZkYdnCchazZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1JzMnZ6blN2SDhIamdKNW1SaDJjSnlGck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wODNlMmYtMGYwNS00MjU4LWJmOTkt
MWRkYWQ2ZjM2YWYwLzEvT1JzMnZ6blN2SDhIamdKNW1SaDJjSnlGck5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wODNlMmYtMGYwNS00MjU4LWJmOTktMWRkYWQ2ZjM2YWYw
LzEvT1JzMnZ6blN2SDhIamdKNW1SaDJjSnlGck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPqD/zno
AS8n/lDNZmUhE2QRKghHKmA0dTIeQubx3JXynQBzUAZZU0LPMDqYDH1C0X0QIkXe
TGoERlwuLwaSl07FSLkrwY26s1svuB0q0JDq1mmg8B4xks3c55iVnkMXWXCZFXD3
/a9RH8YnXaUt9M/D8waBNKDJsls5zmwcfUEp6xgkw9aBDgwre+WHHQUNKfix9axQ
Yotn84kg03QOD3j5EOH0mXpCBeOHHw3c9Yyfs3EnBld9gtYIqwS9z52eCWcVZQqT
abeqzRuwW6e8i+WGGdjR91HET9N6x5ZdUWCe/GcVVIgHh1aFdORk+SZFSFkQjXbP
TzCpFNYZ82mszA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:56 2026 by rpki-client