Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
File: OBXtD6YgyAGqqabxT2WW1-yXUKE.mft (raw, json)
Hash identifier: 1SuUMUOscyszAX1KzirZxTflOpoJYd0MnNR+ClwI++g=
Subject key identifier: F8:11:2C:CE:BD:3F:8E:22:95:C1:75:57:1C:C5:35:88:70:B9:D7:E2
Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Certificate serial: 019F95EE49AFE266A4B98EBE7FD455A0B7EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 21:00:49 +0000
Manifest this update: Fri 24 Jul 2026 21:00:49 +0000
Manifest next update: Sat 25 Jul 2026 21:00:49 +0000
Files and hashes: 1: J5zzAtbu7OO84foJkjfo9mnqe4E.roa (hash: iT6yzwPu2JR2wJ7myEmKqPOSCKR+ROL2NO3QjEH64jQ=)
2: OBXtD6YgyAGqqabxT2WW1-yXUKE.crl (hash: 2cK8SLWXjTriwWNJKi4J8oyZN2B49es8h8Oj8ETi8bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ee:49:af:e2:66:a4:b9:8e:be:7f:d4:55:a0:b7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Validity
Not Before: Jul 24 21:00:49 2026 GMT
Not After : Jul 25 21:00:49 2026 GMT
Subject: CN=f8112ccebd3f8e2295c175571cc5358870b9d7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:1b:a7:5a:13:ec:ba:94:7d:20:b9:ff:bc:
74:c5:56:23:89:ee:73:ac:65:94:58:56:07:61:1d:
2d:c4:b8:3e:e2:7f:a1:c2:b7:72:b1:ab:59:ff:a5:
29:39:db:5e:7e:73:ca:48:ce:ce:8e:b9:cf:df:44:
a6:68:cc:54:06:66:ac:61:a9:3b:fa:3a:8f:82:44:
6d:3c:36:46:df:d3:c6:85:0c:e6:06:fc:c7:c1:d9:
1f:55:b5:e3:ca:b6:89:35:b2:62:d1:e7:60:9b:2c:
28:3a:cc:c9:c8:5f:66:ec:bf:00:03:e1:b2:c2:40:
42:f6:2e:89:bc:97:a9:53:fb:ce:40:f5:6a:8a:98:
cb:ea:8c:e5:43:74:5e:e5:97:61:0c:40:f8:bb:a9:
a0:b1:52:b1:a6:68:dc:4c:9f:16:56:28:02:3a:9d:
8b:b4:43:3d:ef:80:cb:a8:5e:67:f4:7a:bc:64:eb:
56:e9:37:6d:53:84:07:1c:e2:f4:a3:b1:d4:37:b6:
75:a1:6f:4f:44:70:b6:f3:6b:02:90:7c:13:85:5c:
fb:f4:2e:33:20:2c:4a:33:f9:88:2b:83:86:47:1a:
b3:5a:23:6f:d7:e1:72:d5:87:16:69:44:a1:dc:a3:
a7:b3:7a:28:66:e8:bf:8a:19:56:f2:aa:31:1b:2c:
92:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:11:2C:CE:BD:3F:8E:22:95:C1:75:57:1C:C5:35:88:70:B9:D7:E2
X509v3 Authority Key Identifier:
keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ff:20:09:85:01:6b:dc:c8:71:45:2a:a2:99:55:55:e6:36:
ae:58:d4:0b:52:9c:0c:b5:07:86:01:0c:0b:ab:b2:bf:b2:5e:
8b:45:b8:32:f8:a2:77:05:c6:21:48:ad:33:e7:e8:0d:43:04:
fc:c6:5b:c6:87:8d:78:1f:e4:f0:ad:0a:a1:c9:fb:0c:e4:45:
4e:6f:aa:47:da:57:22:9b:57:0e:bd:ef:96:54:93:97:d3:13:
52:89:ba:4a:a5:51:fd:43:3e:cf:24:66:d7:48:4a:c3:fd:4c:
a5:05:8f:ed:98:ba:4e:f9:d1:94:97:4d:37:b7:93:31:73:dc:
e4:47:f8:21:11:64:92:fb:05:63:4f:96:37:62:70:5a:05:d9:
e5:3c:38:2a:e1:99:dd:52:51:68:28:01:5b:02:77:bb:b7:91:
57:a3:6e:0e:75:4b:00:fa:87:1a:10:ea:a1:ea:1d:1e:e0:8e:
ca:b9:d7:66:c5:ab:05:31:58:9d:d6:6d:0c:71:96:bf:56:3c:
87:8c:60:99:50:2f:67:af:f1:d9:4c:60:b9:99:e6:db:9a:66:
e3:68:a7:9a:ca:28:1d:b9:b3:d7:05:71:93:70:b3:8f:9d:80:
ef:24:5c:bf:e4:dd:2e:95:69:94:d2:8b:bb:40:f1:09:76:1c:
58:3f:5f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:51:52 2026 by rpki-client