Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
File: OBXtD6YgyAGqqabxT2WW1-yXUKE.mft (raw, json)
Hash identifier: z4h9sZmkw4mEMJXGEu4QvV9jLUmBti9ZqO4bxLjSlx0=
Subject key identifier: A3:81:EF:C9:69:9E:6C:5A:77:62:EE:DA:66:54:51:09:B5:F5:4D:C2
Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Certificate serial: 01A125B029A79E5F9AD9B89CBA5446983939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
Manifest number: 1A9A
Signing time: Sat 10 Oct 2026 12:01:04 +0000
Manifest this update: Sat 10 Oct 2026 12:01:04 +0000
Manifest next update: Sun 11 Oct 2026 12:01:04 +0000
Files and hashes: 1: J5zzAtbu7OO84foJkjfo9mnqe4E.roa (hash: iT6yzwPu2JR2wJ7myEmKqPOSCKR+ROL2NO3QjEH64jQ=)
2: OBXtD6YgyAGqqabxT2WW1-yXUKE.crl (hash: prlWFQIs737HNfmbpvSGuw+esnJJTM+semczW20pT2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:b0:29:a7:9e:5f:9a:d9:b8:9c:ba:54:46:98:39:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Validity
Not Before: Oct 10 12:01:04 2026 GMT
Not After : Oct 11 12:01:04 2026 GMT
Subject: CN=a381efc9699e6c5a7762eeda66545109b5f54dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:10:85:81:57:4f:7d:ed:f7:59:80:ff:69:41:
96:a7:29:7c:c2:cf:fc:fc:23:16:35:7f:e0:36:32:
d7:5a:e2:14:6a:8d:d5:ce:30:8c:fb:ee:b8:85:1e:
c0:de:01:50:f3:6e:43:7f:f4:79:e0:10:5c:25:5d:
e4:ba:c8:55:1c:35:ba:75:4b:fe:83:cc:ee:5e:39:
25:ea:c1:5c:99:23:a9:39:68:a4:4f:88:80:7e:b9:
60:6d:76:3f:78:17:68:3e:54:aa:27:82:3f:99:dd:
1f:fe:ab:0b:dc:b0:3b:4c:dd:09:82:cd:cc:bd:55:
ca:3a:30:79:e4:9c:56:d2:ac:2e:f8:b5:28:13:c1:
3f:ec:9e:9c:42:2b:31:aa:73:64:c0:d4:7c:1a:76:
ba:99:78:b9:85:d6:a2:46:d3:cd:a8:bb:e6:03:09:
d4:ae:56:50:0f:7c:2d:5f:71:e0:b5:32:bd:0a:5b:
0a:4d:a6:a6:e5:8e:b0:33:0a:88:22:6f:16:65:ea:
68:c6:9c:0e:12:8c:df:9d:b6:6f:be:0a:a2:b2:cb:
37:79:65:d3:7a:1e:2b:be:01:4b:e0:d9:91:d3:c8:
5e:d6:20:d5:ac:72:11:17:a4:9e:47:a2:31:ce:df:
64:58:2d:01:a0:8c:f0:7f:f5:e0:bc:fe:a0:37:83:
09:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:81:EF:C9:69:9E:6C:5A:77:62:EE:DA:66:54:51:09:B5:F5:4D:C2
X509v3 Authority Key Identifier:
keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e8:90:84:0d:e7:45:a1:1d:c5:90:aa:d4:4d:81:34:68:ec:
cf:76:94:c0:f0:71:af:23:f5:ab:e2:42:d6:77:01:4d:3a:2b:
cb:e0:fe:09:b8:26:ed:9a:36:29:f0:14:32:df:63:49:46:49:
da:2c:5d:60:f9:8f:50:3b:9e:03:00:bf:b5:77:22:86:9b:91:
af:90:ba:b6:55:17:a5:06:06:af:ad:7e:37:6b:7e:60:8d:4a:
ab:0b:62:18:9c:60:57:92:de:1c:aa:b1:b0:cc:c8:87:03:f7:
1d:8e:7f:cb:77:2e:a2:91:91:8c:ca:87:61:04:44:8b:72:57:
36:09:e5:22:49:84:c2:7f:35:ef:31:f4:7b:b8:9c:bb:74:30:
e7:4e:0a:bf:db:b5:91:a1:f6:79:69:7d:90:ca:b8:a4:51:b0:
c6:a1:3b:18:db:fd:c2:fc:fc:74:22:cf:3e:f0:21:dd:78:e5:
ef:c8:9f:65:77:ca:8c:37:f0:5b:4b:31:6c:80:19:39:7b:6f:
39:bc:be:c5:54:42:d6:5a:d1:6f:4f:39:81:72:93:2d:bc:3c:
28:bc:f9:fe:23:5f:f8:d3:29:b3:f8:1b:29:76:0f:90:26:b0:
28:3c:ec:49:7d:44:b8:04:0e:46:47:14:af:5c:55:9e:99:af:
97:c1:ba:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:16:40 2026 by rpki-client