Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
File: obTdg_xezSEPT2hPtr9A-zFg2yE.mft (raw, json)
Hash identifier: fbMPi/Crd6vhZIwStEM3zrZx+I6XpJFRVjwx7CM/NTs=
Subject key identifier: DE:00:9B:DD:62:FA:8F:0C:C8:8D:C6:18:4B:16:3C:4B:08:76:43:83
Authority key identifier: A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
Certificate issuer: /CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Certificate serial: 019D2627FBA0E7223D82BFD145CFFDA73A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
Manifest number: 16CD
Signing time: Wed 25 Mar 2026 18:00:47 +0000
Manifest this update: Wed 25 Mar 2026 18:00:47 +0000
Manifest next update: Thu 26 Mar 2026 18:00:47 +0000
Files and hashes: 1: dBabbU_-55VgkgCDNbAuPVfiCeE.roa (hash: qiqQK8VaMW7uW5BkkgRu/GeJE6DlW/Q47O03oOWKZIA=)
2: obTdg_xezSEPT2hPtr9A-zFg2yE.crl (hash: dFMjbEQe3Z7gcOZ0EC+fh4q0xCCzm3LqCRFnfvdyO+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:fb:a0:e7:22:3d:82:bf:d1:45:cf:fd:a7:3a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Validity
Not Before: Mar 25 18:00:47 2026 GMT
Not After : Mar 26 18:00:47 2026 GMT
Subject: CN=de009bdd62fa8f0cc88dc6184b163c4b08764383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:90:c5:fb:f9:32:3b:77:4a:37:ea:36:7d:6c:
ec:9a:fa:be:67:86:51:e1:fd:9d:4b:1a:ca:8a:98:
62:26:21:52:4e:1b:16:64:25:12:3d:17:ae:a7:00:
c4:9f:eb:15:fc:c3:81:c3:fe:22:ff:27:44:90:42:
c1:83:df:35:05:3f:c9:26:a1:91:81:ad:64:06:a7:
68:c5:12:01:da:af:89:16:e5:64:42:e7:b9:f5:43:
7f:60:2b:4c:07:89:e5:4b:d7:b1:fd:51:ed:9e:82:
8e:e9:61:31:8e:23:86:3d:d5:1f:cc:35:10:d3:f4:
f1:75:6e:3a:c5:15:8e:8f:fd:d8:3d:0b:28:96:d1:
29:27:4c:80:7d:95:6f:46:46:36:21:e0:1f:3d:14:
d5:c8:b4:2f:2f:42:19:f9:7a:6e:af:16:a7:a5:5d:
ee:8e:c8:7c:9a:41:eb:28:7c:e5:2b:90:33:33:f5:
63:be:46:8d:59:73:49:e9:61:4f:d9:a1:3f:0b:1c:
47:93:d9:ba:e6:e9:10:e2:0f:39:88:9d:ed:00:e1:
1a:34:d9:0a:fc:91:e2:0d:1a:f1:f5:d8:d0:54:41:
e2:fb:78:61:d3:0a:7f:ca:41:fb:11:ff:38:ef:fb:
38:ad:67:05:dc:7f:a0:a6:de:49:a9:29:92:70:9f:
32:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:00:9B:DD:62:FA:8F:0C:C8:8D:C6:18:4B:16:3C:4B:08:76:43:83
X509v3 Authority Key Identifier:
keyid:A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:50:76:b9:ba:54:50:c5:20:cb:d9:af:02:40:9b:6e:e6:bd:
42:fa:47:1c:d2:0a:80:8f:06:27:0f:28:91:fb:b0:02:c4:e5:
bb:eb:23:cc:8a:e7:a7:fa:77:a1:08:7d:9b:dc:c2:25:60:a8:
98:79:48:82:19:08:19:dc:fc:05:72:63:2f:5d:64:42:09:dd:
9a:01:ee:ae:88:9f:76:ca:d0:45:b9:02:a0:d7:e2:b8:28:f3:
7f:6d:46:20:e8:d3:81:7b:3e:31:5a:c6:53:8a:b0:ef:6b:44:
04:f3:cf:00:ed:96:b2:74:66:6d:2a:8a:8c:f5:f9:da:b2:39:
63:d5:b9:c9:79:0d:48:50:6d:6d:04:e4:3e:9a:60:8f:a4:01:
73:75:fd:c7:fd:8c:6d:95:0c:e5:d6:50:60:31:bb:04:49:03:
30:1e:02:e5:1b:66:3f:2e:9c:39:5c:ed:17:47:83:8a:6b:17:
08:89:37:c6:4b:fb:9e:e1:99:46:be:4c:51:45:5a:2a:0f:6e:
82:52:58:57:b5:7b:f8:54:34:ec:03:95:f8:50:8a:20:25:92:
2f:c5:9e:fe:02:1e:cd:c1:ee:a8:db:d0:97:db:e8:12:db:cc:
b8:ae:8a:dd:88:07:42:35:4f:b3:c6:0f:27:78:9d:c0:3c:cf:
c5:ff:0b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:10 2026 by rpki-client