Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
File: OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft (raw, json)
Hash identifier: 2d/7mS2wb2MX/wVq5i1rulhuXYtFqPiZYy9oYTNjn/4=
Subject key identifier: 19:D0:15:C5:CF:18:B3:92:D8:CE:48:34:A5:10:E4:01:CC:1C:B9:30
Authority key identifier: 38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9
Certificate issuer: /CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9
Certificate serial: 019D28166CC7845A5CBDC6584C8C7447AC15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
Manifest number: 0F66
Signing time: Thu 26 Mar 2026 03:00:51 +0000
Manifest this update: Thu 26 Mar 2026 03:00:51 +0000
Manifest next update: Fri 27 Mar 2026 03:00:51 +0000
Files and hashes: 1: OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl (hash: aEqgucfDElIIHoh/EXdWeNEEBSXqQthYApNlmagS2gc=)
2: WuAHwEu_e_sftMlPkZv_UwtWX5Q.roa (hash: mzprPhNPF3MzVig/0gIEkHNJI2y+MkDSYbRMreX4qBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:6c:c7:84:5a:5c:bd:c6:58:4c:8c:74:47:ac:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9
Validity
Not Before: Mar 26 03:00:51 2026 GMT
Not After : Mar 27 03:00:51 2026 GMT
Subject: CN=19d015c5cf18b392d8ce4834a510e401cc1cb930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:65:e8:b0:bd:a8:0a:85:f2:4e:14:40:79:2d:
c5:32:80:94:ee:bf:36:84:e4:c4:d3:d9:2a:89:cd:
82:ab:17:24:03:57:62:af:47:e9:94:23:b7:8d:03:
90:77:be:81:48:c8:57:23:6f:c3:1c:31:da:e7:b3:
a7:64:04:18:f5:59:96:b0:5a:58:da:4f:ee:08:a8:
01:49:23:dc:20:63:59:66:f1:c1:37:68:fc:df:95:
1a:09:31:ab:ef:ef:51:fc:83:ee:a2:0e:7e:25:4b:
a5:a4:9d:10:3f:88:61:dd:a5:3f:d6:51:4a:70:fe:
4e:25:23:55:4b:c0:c7:e9:61:c4:a5:3c:3e:c0:5f:
6f:ad:02:f3:c8:43:06:dc:6c:3e:a8:54:28:4b:dc:
cb:b8:da:5d:08:fc:ba:28:34:9e:50:7c:fc:0a:15:
8e:75:7c:9f:bb:6b:24:65:c6:79:ef:08:a2:bb:86:
b6:e0:77:74:63:17:f7:bc:2c:e0:f1:3e:3a:2e:23:
be:3e:e8:67:ad:6c:b3:82:41:53:8d:5d:da:8b:89:
b3:5f:b9:20:0c:75:a6:84:28:16:30:69:23:2c:33:
67:c2:7a:32:c8:47:05:f4:04:13:d1:6c:20:1b:e4:
6e:cd:37:c3:10:57:d6:b5:f6:01:76:61:11:28:33:
66:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D0:15:C5:CF:18:B3:92:D8:CE:48:34:A5:10:E4:01:CC:1C:B9:30
X509v3 Authority Key Identifier:
keyid:38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b7:a5:be:1e:93:00:f7:99:bf:8a:f8:bb:3b:8b:2f:66:b8:
0a:f3:6d:73:cf:d6:54:64:1c:44:7d:0c:c4:d9:ee:ce:10:19:
17:f3:34:2d:69:a3:0f:81:0c:d7:4c:dd:87:44:b5:c5:47:76:
6d:d2:3d:33:d5:85:f1:de:97:6a:39:7d:4d:06:12:70:fe:10:
61:95:b8:a0:f9:b2:7a:b2:b2:3a:d4:b4:e9:12:74:b2:7d:62:
fd:45:b3:66:b9:33:78:34:1c:e4:1e:96:10:85:71:42:81:cd:
13:65:b2:aa:32:d4:b4:8f:2a:86:e4:31:d0:e9:9f:95:9b:0d:
b9:74:e9:24:fb:d6:f6:0b:e7:3e:d4:06:c8:43:a1:95:7f:9b:
e7:e3:4d:89:0f:a9:51:b4:9e:56:97:26:95:df:14:56:44:4d:
58:db:06:b6:ad:b8:35:f7:d6:89:5a:ed:9a:be:b8:a0:01:27:
b9:28:67:88:d5:53:a3:2c:e1:1c:50:5b:51:b9:e7:13:4a:57:
ae:60:e6:a2:c8:34:66:95:34:75:2b:5c:ec:91:7f:e0:1f:75:
92:ae:19:2c:4a:7e:fa:65:27:e1:95:b6:db:77:04:27:27:3b:
4f:ad:51:09:1c:d1:e3:ef:61:e8:89:4c:1e:e3:1c:ff:5e:42:
17:8c:0b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:15 2026 by rpki-client