Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
File: OBXtD6YgyAGqqabxT2WW1-yXUKE.mft (raw, json)
Hash identifier: 2GrqK2SOITrOqeuXM6tZqEUyJI0lfqWhq2UmYarz374=
Subject key identifier: A8:41:BE:87:35:87:07:52:96:66:C4:15:C1:6A:D7:5F:E8:F5:2A:6B
Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Certificate serial: 019D2A047949E47E0413FF19F4A0135CF076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 12:00:29 +0000
Manifest this update: Thu 26 Mar 2026 12:00:29 +0000
Manifest next update: Fri 27 Mar 2026 12:00:29 +0000
Files and hashes: 1: J5zzAtbu7OO84foJkjfo9mnqe4E.roa (hash: iT6yzwPu2JR2wJ7myEmKqPOSCKR+ROL2NO3QjEH64jQ=)
2: OBXtD6YgyAGqqabxT2WW1-yXUKE.crl (hash: tuFrBYOo7oI839heW12I4OBKammcrw7NN3rtvaTMyVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:79:49:e4:7e:04:13:ff:19:f4:a0:13:5c:f0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Validity
Not Before: Mar 26 12:00:29 2026 GMT
Not After : Mar 27 12:00:29 2026 GMT
Subject: CN=a841be87358707529666c415c16ad75fe8f52a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:4f:57:ea:8d:1d:9d:d0:06:c9:61:29:e0:
e4:1a:95:67:c4:22:0d:bc:fa:27:9e:a7:ae:59:ac:
c5:cc:e6:c5:77:94:da:5d:b1:60:b5:46:7c:c8:88:
c9:1d:0f:29:26:8a:e1:2b:ee:17:f5:70:9b:e0:4c:
0a:e0:7b:ae:6e:9c:ab:a0:cd:ed:dc:25:ab:f5:4d:
e0:ba:43:54:91:c4:7e:03:63:67:7d:a5:12:22:5e:
71:ef:6f:bd:5f:aa:a5:fd:30:c7:06:ec:de:9a:7f:
5d:1d:39:08:8a:63:d6:71:7c:64:44:18:5a:d0:5f:
bc:1c:26:38:64:59:8b:a8:16:48:a4:b8:f8:11:6a:
3b:d0:9f:8b:6f:af:25:b5:35:e6:b9:8c:6b:54:0e:
6d:b1:2e:9e:8f:b0:25:8c:55:f3:74:c0:07:49:f5:
be:30:4e:14:1c:f7:8a:5c:f1:76:ff:8c:cf:63:57:
96:24:6b:0e:b7:ad:d9:c7:2d:ba:9f:40:1b:3b:48:
45:50:db:e1:5c:89:ed:56:30:0f:ef:e2:f3:91:f2:
bb:66:f1:cb:3f:2c:78:dd:35:c4:9d:b5:22:c2:d2:
b3:2f:09:64:95:ef:0a:96:1d:75:84:b6:4f:e7:64:
bd:e8:3c:87:f1:fb:c6:fb:47:41:7b:bd:a2:d0:4f:
40:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:41:BE:87:35:87:07:52:96:66:C4:15:C1:6A:D7:5F:E8:F5:2A:6B
X509v3 Authority Key Identifier:
keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3f:7f:32:c1:31:fe:ea:cd:db:3a:b9:9a:95:96:ff:8b:c3:
c2:54:01:b6:09:0f:bd:96:5e:81:46:74:a1:5d:3a:18:d8:db:
c4:bc:03:da:4f:63:1f:87:f2:64:ec:ab:52:6e:79:d4:18:fc:
d3:a4:bd:6c:02:0c:11:5f:20:3a:1b:48:40:4b:ea:ee:8c:eb:
4c:ee:6b:d7:9b:07:49:dc:b1:3c:a4:c3:11:c9:8d:93:fd:46:
56:fe:57:b4:40:54:f8:f1:d5:39:f8:02:26:d1:cf:73:79:0d:
a5:7f:9b:76:63:4b:ba:5c:f2:b0:12:b2:4a:75:12:1d:81:b5:
05:87:f2:05:eb:ef:d0:0f:6f:2e:e5:9e:ad:b1:b4:03:08:46:
08:09:0e:2b:ba:81:3e:0f:6c:a1:e7:b0:b9:cb:bc:7f:c5:69:
df:fe:41:87:3d:3f:65:32:c6:62:4f:f9:82:8a:5c:c4:60:fe:
d5:fa:26:78:98:2e:57:fb:a6:33:e0:3e:2e:ee:d9:a2:93:e1:
fb:15:ac:f7:13:67:0d:3d:82:9b:dc:c1:09:eb:81:1b:88:17:
93:04:cd:ab:9c:25:8a:ee:7d:54:c8:37:36:d6:db:11:dc:5d:
b8:91:c6:a9:7a:bf:49:7b:a5:1d:39:e2:94:73:34:0d:fa:a1:
03:5e:17:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:58:48 2026 by rpki-client