Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
File: obfHtAmGdKBPsXeELOxO65v4nh4.mft (raw, json)
Hash identifier: JB8I1rrtGtBhFsVj7g0Wx0nX9F5HHi1mLHLqbxqb/5g=
Subject key identifier: 3F:49:5A:A8:26:C8:A7:32:BD:16:7C:B7:10:87:26:71:94:EA:5E:9D
Authority key identifier: A1:B7:C7:B4:09:86:74:A0:4F:B1:77:84:2C:EC:4E:EB:9B:F8:9E:1E
Certificate issuer: /CN=a1b7c7b4098674a04fb177842cec4eeb9bf89e1e
Certificate serial: 019D2703E7AA6BB6B8F2E3A745F037C27F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:00 +0000
Manifest this update: Wed 25 Mar 2026 22:01:00 +0000
Manifest next update: Thu 26 Mar 2026 22:01:00 +0000
Files and hashes: 1: obfHtAmGdKBPsXeELOxO65v4nh4.crl (hash: GrJ0f92FdC/Da2+QiJM4bQWYnQgNWqSH2cZ9WyTpl48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e7:aa:6b:b6:b8:f2:e3:a7:45:f0:37:c2:7f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b7c7b4098674a04fb177842cec4eeb9bf89e1e
Validity
Not Before: Mar 25 22:01:00 2026 GMT
Not After : Mar 26 22:01:00 2026 GMT
Subject: CN=3f495aa826c8a732bd167cb71087267194ea5e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:57:8a:4a:77:25:dc:45:89:07:d4:a1:cc:65:
08:f8:6d:e9:f3:5e:0c:16:a4:38:95:55:3f:d5:4a:
cf:f9:52:a6:cc:ff:0d:4c:80:e8:29:8f:da:c1:0e:
2f:3e:8b:cb:fc:0a:6c:dd:32:e6:94:6a:de:ae:11:
02:46:3a:b8:f2:7a:80:d2:66:83:79:e3:89:0f:ce:
63:19:bf:bc:fa:e0:00:21:41:76:c7:31:01:ea:0d:
e3:ce:f9:20:e7:19:be:52:f0:93:1e:54:48:85:9e:
6e:bc:fc:36:37:a7:3d:09:4c:02:71:73:7f:78:ac:
bf:0b:65:64:88:4a:ca:09:bc:67:0d:46:be:72:59:
18:65:e7:f0:e9:28:0d:b9:01:ec:b9:de:f7:de:5f:
eb:b9:2a:0d:d5:4f:fe:e8:cf:51:31:08:cb:65:5b:
7e:ca:6b:51:7b:2f:a1:6b:31:97:38:e8:97:b1:10:
26:dd:ba:ac:4e:fb:b5:bb:91:53:3b:18:2d:f3:51:
be:ba:d4:19:ba:55:51:82:28:6d:29:60:d7:62:80:
8b:39:e6:d5:bd:66:3d:57:77:d0:ff:37:8e:2e:85:
59:9d:ea:03:fe:37:bd:5d:10:a3:4e:89:06:9b:71:
5f:5d:b7:ef:c4:d3:16:d0:4e:f0:30:72:8a:00:07:
75:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:49:5A:A8:26:C8:A7:32:BD:16:7C:B7:10:87:26:71:94:EA:5E:9D
X509v3 Authority Key Identifier:
keyid:A1:B7:C7:B4:09:86:74:A0:4F:B1:77:84:2C:EC:4E:EB:9B:F8:9E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:84:d3:18:93:de:31:0e:66:b8:01:2e:b5:8a:fd:56:40:24:
6a:cf:18:a0:28:7c:83:74:19:1d:68:d7:a8:d0:71:9b:1d:4f:
f7:f6:fb:00:00:6d:3c:f5:e8:64:8c:17:fc:71:26:28:cc:9f:
b3:45:90:c7:db:65:1c:1b:af:8d:6e:8d:bb:c6:cd:58:53:b8:
67:b6:5d:f3:81:18:d1:d7:a5:34:cf:8f:88:93:fd:ba:32:93:
fc:6c:93:b7:7a:a4:5e:bb:55:a2:26:d8:8f:38:3e:af:eb:fc:
17:c0:2b:e1:e7:3a:a9:33:85:47:84:1b:d5:c4:09:29:c5:d4:
1f:ba:c4:ce:48:72:3a:e5:ad:5d:b7:2b:84:94:11:c7:bc:ef:
db:56:c5:9d:1a:d3:b6:a5:98:72:19:19:ca:ec:0d:e0:db:d1:
d7:c6:80:62:42:f9:ca:dd:64:66:a8:76:2d:a9:67:9f:52:b5:
3e:a6:23:46:af:72:67:d3:a3:70:51:d9:9a:15:92:52:08:cd:
82:90:f2:5b:49:3f:79:12:94:d7:ba:6c:07:71:d3:21:78:4b:
2d:c6:c7:f0:f1:ef:e2:86:4e:11:07:1a:3e:3a:58:d0:79:c0:
4a:94:4d:d9:1f:05:56:cd:ec:c7:87:2a:33:eb:d3:59:7d:20:
e4:34:0a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:28 2026 by rpki-client