Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
File: OBXtD6YgyAGqqabxT2WW1-yXUKE.mft (raw, json)
Hash identifier: 3dez+Ss3SMZ16VybmFPlMKdIIveqdUj5nbDXeA0owN4=
Subject key identifier: 1D:46:9E:5E:0D:90:AD:BA:69:34:EC:DA:3C:C3:C9:E8:D8:3B:FC:61
Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Certificate serial: 019F940001B8BA92B11A35B3ABA230C28CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 12:00:56 +0000
Manifest this update: Fri 24 Jul 2026 12:00:56 +0000
Manifest next update: Sat 25 Jul 2026 12:00:56 +0000
Files and hashes: 1: J5zzAtbu7OO84foJkjfo9mnqe4E.roa (hash: iT6yzwPu2JR2wJ7myEmKqPOSCKR+ROL2NO3QjEH64jQ=)
2: OBXtD6YgyAGqqabxT2WW1-yXUKE.crl (hash: RU1J4/LZRGK1Wmxz5lGxzp64uWWDq+Ukm7Iq6ttflcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:01:b8:ba:92:b1:1a:35:b3:ab:a2:30:c2:8c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Validity
Not Before: Jul 24 12:00:56 2026 GMT
Not After : Jul 25 12:00:56 2026 GMT
Subject: CN=1d469e5e0d90adba6934ecda3cc3c9e8d83bfc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:01:4c:62:01:4f:a0:b1:33:c0:c1:e3:1c:09:
b6:38:70:c1:de:d9:f4:6f:78:61:d6:fe:f5:63:14:
e5:23:23:9d:96:de:6d:27:08:2e:17:9e:b1:8e:57:
5a:cb:f2:b7:a0:15:b3:18:d9:3b:33:1c:45:b7:84:
02:9b:9b:cb:23:6c:20:37:8b:fc:0f:63:02:a4:01:
33:9e:cd:1f:6c:a8:5d:eb:49:89:44:84:2b:39:fc:
22:15:d7:e4:54:87:56:3d:ef:27:6c:03:f5:89:9d:
54:09:7d:e4:51:48:09:01:23:2f:10:3f:c3:ac:a8:
3e:6d:d1:7d:f7:18:e2:2b:bd:bc:11:db:2e:b4:e8:
bd:cf:14:15:b0:53:07:07:48:df:f7:0d:bc:8e:78:
49:4f:35:f7:0d:3e:2f:ff:06:0c:19:de:f9:3c:ea:
d3:e9:fe:99:d3:8c:73:18:2b:3a:b8:ba:4f:9b:6d:
bf:83:e4:00:73:a7:9f:f2:49:2d:85:61:79:af:96:
c6:e3:79:59:45:92:22:9b:94:fa:14:0f:0c:96:06:
13:f8:61:4a:42:6d:64:ff:a3:72:5a:28:71:bd:c8:
a9:e4:4e:69:b6:d4:c0:76:af:cf:13:09:a9:a4:4f:
d6:ee:72:d9:9b:ca:8f:95:52:a8:b8:c5:71:e2:ab:
da:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:46:9E:5E:0D:90:AD:BA:69:34:EC:DA:3C:C3:C9:E8:D8:3B:FC:61
X509v3 Authority Key Identifier:
keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ca:ec:63:b4:30:39:1b:d6:63:5d:22:d0:65:10:98:4e:99:
de:84:12:a4:3f:2c:54:6c:45:32:a8:77:a5:d0:ea:83:4e:33:
69:ba:9d:09:38:fe:52:ef:9d:cc:c8:f2:56:18:99:7d:75:ac:
16:78:be:fd:ae:f5:c5:c4:29:aa:13:b4:78:29:ad:68:a1:34:
3b:cb:66:cc:45:e8:d0:53:cc:b3:64:3c:53:c9:a0:47:b1:13:
d3:07:1f:96:a2:5d:76:1c:69:26:01:2f:9d:ac:73:c9:e4:70:
1d:37:97:f5:4d:f3:b8:da:e7:c6:31:8b:a0:f0:9d:9a:86:47:
0b:d6:1c:39:79:ef:09:2d:f2:cc:7c:86:c0:fa:82:da:31:76:
6e:db:3e:21:e9:e1:50:37:20:14:85:93:a9:2a:4a:b9:85:d5:
05:00:de:8e:84:55:1f:ab:7f:27:8d:c7:bc:29:8a:cc:d9:cf:
30:47:38:e3:6c:35:ea:6d:d0:10:05:e6:ae:05:f8:fa:99:c8:
bb:b6:28:2c:1d:2e:0e:f6:10:38:b1:24:3b:c2:1c:ec:e2:e8:
12:0d:c7:36:dc:bc:0a:d0:da:1e:5d:27:5e:72:e7:10:02:3e:
2a:12:71:c1:50:1a:59:24:1a:90:8a:0c:5e:e6:28:f1:f5:47:
55:6a:1b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:10 2026 by rpki-client