Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
File: D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json)
Hash identifier: KQuBppw33rf7kZK5KfpLpA18ms2Qgf/dt21BJqfAFPQ=
Subject key identifier: AA:C4:63:DE:0E:95:E4:D2:6E:CD:B8:92:03:D9:E6:67:1D:62:1F:23
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 019E1E6C8123F471EF42F0929C9FC1B87236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
Manifest number: 1809
Signing time: Tue 12 May 2026 23:01:27 +0000
Manifest this update: Tue 12 May 2026 23:01:27 +0000
Manifest next update: Wed 13 May 2026 23:01:27 +0000
Files and hashes: 1: 2og3dcAu_OJTWY5ClPmlGnRIzwU.roa (hash: 74PsLs5h39Lm9vcmo+PFlNAnhQ4jBPxcvEsxXUafgh4=)
2: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: kRcaXu/Ob7Biksa7Hv6zFQXJewlM5P4SiOoovVbjlpI=)
3: VEt141JORS4uXfTBqMEFS8dl95o.roa (hash: 1ZDnuppObmQPK0jPoDm6JuqwCFlMwWQBs72wZZg4jts=)
4: wMPJLylt1ll63S3MrW2IkHP31bY.roa (hash: WHI/AcafVWTXaJ4wP1ApO3kymuMxH23X4WRNK0MlnyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:81:23:f4:71:ef:42:f0:92:9c:9f:c1:b8:72:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: May 12 23:01:27 2026 GMT
Not After : May 13 23:01:27 2026 GMT
Subject: CN=aac463de0e95e4d26ecdb89203d9e6671d621f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ab:7a:2d:2e:2d:75:c6:a7:4e:8f:43:15:d8:
07:20:64:ef:da:9d:7c:e5:c1:66:65:7a:5b:48:e5:
56:ed:ef:9a:21:3b:ff:e8:c0:76:cc:0c:25:bb:55:
38:f3:27:d5:e7:d5:33:f8:e1:3d:b2:ce:6b:10:b0:
7d:f8:9f:63:96:61:f6:8a:74:08:03:d7:85:6e:d9:
57:30:82:76:9c:3e:0f:44:13:72:e2:65:27:3c:94:
d6:b7:d8:c3:14:13:b9:c6:7a:9d:c6:d5:a3:37:98:
78:88:02:03:71:b8:b8:45:d9:89:d5:99:0a:42:33:
0c:12:81:96:d5:91:5d:8d:9b:59:47:2b:55:ee:78:
ef:08:08:d4:3d:81:47:0e:04:7a:cf:89:17:1b:f6:
8f:75:a8:40:13:93:da:09:b4:97:6c:8f:74:5d:ea:
84:ee:6f:42:57:bf:1c:6e:41:b4:8e:f9:00:16:62:
58:c2:21:80:77:7b:54:52:15:f6:7b:04:40:7d:5c:
fb:7e:3a:48:2f:71:fc:83:f9:5a:e2:20:33:f7:ab:
f3:1f:4e:56:b9:ae:f6:cc:8c:5f:94:85:4b:f0:8f:
af:af:df:b0:bd:fb:49:e2:4c:0f:05:7d:1f:2f:1f:
80:72:4b:80:a9:a1:2f:55:a8:ae:44:62:22:9a:ae:
dd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C4:63:DE:0E:95:E4:D2:6E:CD:B8:92:03:D9:E6:67:1D:62:1F:23
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:77:24:c9:dc:f9:4a:8d:ca:ba:14:09:b6:43:e4:75:50:65:
59:68:87:58:3c:44:63:70:0a:11:0b:9a:24:25:67:cd:7a:17:
66:24:68:c5:35:0e:18:da:ba:54:35:b5:ef:f1:e4:ed:4e:3b:
31:a9:83:cc:68:71:83:ab:00:e6:f8:ca:47:c4:b0:50:dc:e8:
d7:98:ff:41:77:fb:f6:bf:70:85:8f:ee:7b:7d:fd:40:74:ea:
19:c3:10:0e:d6:20:80:a3:1e:d6:aa:32:4f:93:21:3c:84:1d:
3c:33:5f:40:f8:2a:22:29:1f:7a:c6:62:5c:95:81:f1:0b:9d:
2f:78:d9:94:73:f7:bd:64:79:77:e1:28:45:db:77:12:1a:09:
39:be:12:4d:42:ca:03:b6:bf:a6:c1:a8:54:fe:6e:4d:44:6e:
23:c9:be:74:4f:61:fa:3a:0f:46:d1:24:53:a2:8f:c0:c9:ea:
10:67:6f:95:1b:26:c9:21:a4:98:f2:35:1b:5d:4f:28:e0:c1:
74:3c:ad:ec:40:7f:ad:6a:45:52:d5:a2:3d:81:a0:26:de:ec:
05:b2:ff:b1:59:d7:40:b6:86:91:82:e3:61:d2:e4:fe:47:c3:
0b:fc:e3:54:b7:db:46:13:f5:6d:f9:38:df:85:e4:e7:49:0c:
d2:73:19:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:32:57 2026 by rpki-client