Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
File: OBXtD6YgyAGqqabxT2WW1-yXUKE.mft (raw, json)
Hash identifier: +Iq59cahSGBrX3NBBWrHKeMTrkMybKQG+tnE3oRFpng=
Subject key identifier: 1C:5C:3F:3A:7C:CD:4D:CB:46:60:3A:D5:2C:94:9C:3A:01:97:5D:74
Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Certificate serial: 019E2136B3AF71357A63765787E8D9783B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 12:01:33 +0000
Manifest this update: Wed 13 May 2026 12:01:33 +0000
Manifest next update: Thu 14 May 2026 12:01:33 +0000
Files and hashes: 1: J5zzAtbu7OO84foJkjfo9mnqe4E.roa (hash: iT6yzwPu2JR2wJ7myEmKqPOSCKR+ROL2NO3QjEH64jQ=)
2: OBXtD6YgyAGqqabxT2WW1-yXUKE.crl (hash: aTdaPe3Ndy6vWdcHT5jwK6R0DYbMNcW9QhfyKZDyDVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:b3:af:71:35:7a:63:76:57:87:e8:d9:78:3b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Validity
Not Before: May 13 12:01:33 2026 GMT
Not After : May 14 12:01:33 2026 GMT
Subject: CN=1c5c3f3a7ccd4dcb46603ad52c949c3a01975d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:37:5f:e1:ba:d6:17:f3:54:f7:60:ea:f3:
fb:c9:5d:02:4f:0f:8e:b3:ad:98:92:fb:86:c9:0f:
5c:49:eb:61:ec:44:f7:b8:1b:0e:03:82:28:bd:75:
a5:76:86:f0:ab:d8:1e:60:95:09:09:17:61:1d:0d:
51:3d:bf:38:fe:81:8a:72:49:19:d5:01:af:aa:2f:
2e:58:62:45:89:4e:d4:56:71:00:8f:5d:ba:39:f1:
ab:52:ff:14:f7:a1:35:d8:55:54:7c:4b:3a:fd:46:
2f:f4:f5:cb:f6:05:86:b7:59:3f:ab:7c:02:32:c8:
6b:a8:d1:16:3a:29:07:ba:7f:8b:c9:0e:d8:7e:6d:
61:31:d0:81:71:e8:18:24:da:f4:ae:b6:78:30:b5:
17:5b:ad:38:28:7d:91:f1:b6:c7:53:70:08:63:99:
33:f9:ab:6b:03:9f:8c:8d:f8:75:a9:41:dc:7c:68:
9b:a7:80:26:a1:4d:7c:55:6b:09:41:68:e9:b6:f9:
22:06:45:6c:1b:14:59:50:0a:1d:91:00:30:57:9c:
9f:29:bd:48:d7:ef:e7:6f:e2:1c:72:fa:5b:1c:db:
1a:80:89:c4:0d:2f:b9:2e:ac:3a:15:6a:37:97:5d:
82:a6:40:ea:53:c2:01:68:3a:0d:de:46:0c:d4:db:
99:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5C:3F:3A:7C:CD:4D:CB:46:60:3A:D5:2C:94:9C:3A:01:97:5D:74
X509v3 Authority Key Identifier:
keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:15:de:ae:cf:bc:13:6c:78:0c:94:df:25:6f:55:f3:bd:64:
79:53:a4:44:2d:8f:d5:67:0c:12:ae:17:c2:04:fd:42:a1:ff:
4c:18:52:a9:6c:1b:3f:88:db:39:48:77:d9:2d:a1:fe:d2:c0:
80:69:b2:78:73:84:38:b6:1d:76:95:3d:77:32:25:8e:2e:13:
34:88:0e:c6:b7:38:38:d2:66:12:3e:9b:97:55:77:69:62:f9:
8e:58:db:1d:4d:9c:2d:d4:aa:20:a1:4a:af:9e:f4:ad:c2:7c:
5f:3e:6b:b4:76:77:c1:d2:b0:21:14:d8:75:4b:d7:a6:6c:bc:
78:76:cc:8d:86:5a:26:17:e2:fe:9e:67:b5:19:6d:2c:cb:f9:
5b:37:b8:ab:42:41:17:b8:c3:22:3a:b9:24:b5:0d:d3:f9:39:
24:3e:49:81:f9:dc:13:f7:05:79:54:84:cc:90:93:2a:b0:87:
1a:b5:ef:07:69:8d:3f:b7:6b:0d:cb:ff:bb:d5:0f:10:5b:34:
2d:66:df:8c:2e:90:7d:e2:d8:74:4f:90:86:88:2b:1a:74:85:
b9:1a:ae:1f:98:be:a7:bc:27:38:ff:97:7b:a2:fa:5a:ef:0a:
7e:05:45:81:7a:3e:dd:15:46:68:72:86:e8:7e:5d:58:5e:02:
53:8d:99:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:07:45 2026 by rpki-client