Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
File: obTdg_xezSEPT2hPtr9A-zFg2yE.mft (raw, json)
Hash identifier: d2dY62oAJC5nGbWlLF5moeAkOi+i5TjEuVACSZb9Mc8=
Subject key identifier: 75:2F:94:E3:B1:91:10:7E:2D:E0:92:FB:E1:4D:47:D1:EB:E2:4D:98
Authority key identifier: A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
Certificate issuer: /CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Certificate serial: 01A10E8374C6C74DA0837738D8BCA2490DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
Manifest number: 18D3
Signing time: Tue 06 Oct 2026 00:00:58 +0000
Manifest this update: Tue 06 Oct 2026 00:00:58 +0000
Manifest next update: Wed 07 Oct 2026 00:00:58 +0000
Files and hashes: 1: dBabbU_-55VgkgCDNbAuPVfiCeE.roa (hash: qiqQK8VaMW7uW5BkkgRu/GeJE6DlW/Q47O03oOWKZIA=)
2: obTdg_xezSEPT2hPtr9A-zFg2yE.crl (hash: P6uuN8odGnwzZ5U+mVqo3Uo30QpO+/kgM5w+QDn3/wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:83:74:c6:c7:4d:a0:83:77:38:d8:bc:a2:49:0d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Validity
Not Before: Oct 6 00:00:58 2026 GMT
Not After : Oct 7 00:00:58 2026 GMT
Subject: CN=752f94e3b191107e2de092fbe14d47d1ebe24d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:50:29:4d:81:71:12:5a:03:d3:7e:c7:f3:
d6:32:01:04:eb:18:86:71:a1:a7:4b:a1:2a:bc:97:
5b:29:84:ff:b7:b7:6c:2e:41:d2:6e:64:06:be:d7:
63:ed:60:d1:72:6f:7d:c0:d8:5e:a4:ed:c1:a1:6e:
e9:e1:dc:7d:37:dc:c1:22:55:e5:cf:bb:1b:2f:be:
b7:26:66:62:f1:71:54:0d:69:94:f7:1a:57:bf:e0:
a1:32:0a:87:16:0f:2e:e0:af:91:89:7f:49:ab:25:
06:7f:f0:e8:46:6f:ba:0f:47:32:90:ab:b3:e5:ef:
5e:d7:9c:72:4b:41:50:5c:a6:70:69:45:2e:ab:86:
0f:1c:b2:d3:91:7d:63:da:8b:f5:79:f8:fc:43:f4:
8a:a0:81:07:5b:58:52:54:e1:5d:ef:3e:3e:ea:2c:
4f:94:a0:f0:3d:2d:23:a7:77:a4:d7:8f:c7:db:95:
90:ec:a6:05:c6:06:30:1c:81:9c:2c:ba:9c:df:e9:
78:47:e8:31:b3:d5:8a:31:a2:f1:ca:83:ac:8f:34:
ff:17:57:72:29:02:48:22:9a:6d:df:10:81:d0:83:
6e:86:bc:e4:25:a7:54:1a:c8:52:e6:87:75:c9:2e:
9c:f2:8b:20:e8:4a:af:b4:f3:30:fa:88:02:1a:15:
f3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2F:94:E3:B1:91:10:7E:2D:E0:92:FB:E1:4D:47:D1:EB:E2:4D:98
X509v3 Authority Key Identifier:
keyid:A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8e:46:52:03:4c:c6:6a:f3:86:95:6f:39:40:40:b0:67:60:
7e:01:0d:03:16:c4:f2:b7:80:98:12:ae:bd:21:fc:69:26:bc:
7b:89:f0:cd:3d:e8:0b:e6:4b:c4:85:f8:5f:3e:b2:e7:51:0d:
a7:16:c0:41:04:30:77:44:a8:c2:11:52:9c:1f:d9:e1:7e:4b:
49:57:13:39:56:47:90:54:11:da:a5:7d:da:14:9b:66:7b:5f:
7d:92:84:fd:d3:ac:34:67:c6:2f:46:01:62:82:14:c8:51:2e:
fe:9d:4b:57:fc:52:d2:e3:7a:13:16:a0:bf:ff:22:4b:b4:6f:
c6:23:68:be:d5:24:9e:9a:31:48:1f:e4:0e:2d:c0:ab:de:8d:
dc:1d:99:23:f3:ca:32:17:ef:96:34:6c:3f:a2:8e:30:29:06:
6f:a2:6a:08:8f:2e:4a:e7:ba:a5:39:fc:d4:d4:b9:5a:83:9b:
6f:13:cc:9d:3e:6d:a1:c1:5f:15:b8:a0:1e:a2:00:14:06:d7:
20:4c:bd:5f:a3:f4:86:e5:76:64:3b:a9:44:3f:4f:4a:65:12:
b9:3e:1c:d9:6e:8c:91:0a:9b:7d:26:5d:96:e2:e6:53:6d:b0:
89:26:24:cb:4e:b9:e3:93:b5:b1:1b:ca:df:1b:28:62:be:0c:
51:82:ab:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:17:54 2026 by rpki-client