Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/obGOy3zMmQgi1GDAcnLouA5oqtU.mft
File: obGOy3zMmQgi1GDAcnLouA5oqtU.mft (raw, json)
Hash identifier: 7KGS38HluZxXcZn3oiNiNNiUeaaayUAwiqSxl07zZO4=
Subject key identifier: 1E:CD:FA:4F:BA:09:D7:D2:6E:4C:F2:4C:C1:80:B4:62:1D:D2:69:7B
Authority key identifier: A1:B1:8E:CB:7C:CC:99:08:22:D4:60:C0:72:72:E8:B8:0E:68:AA:D5
Certificate issuer: /CN=a1b18ecb7ccc990822d460c07272e8b80e68aad5
Certificate serial: 019F8E6BAC97BE01DBDFA93DC8A5F448BD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obGOy3zMmQgi1GDAcnLouA5oqtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/obGOy3zMmQgi1GDAcnLouA5oqtU.mft
Manifest number: 3A
Signing time: Thu 23 Jul 2026 10:00:48 +0000
Manifest this update: Thu 23 Jul 2026 10:00:48 +0000
Manifest next update: Fri 24 Jul 2026 10:00:48 +0000
Files and hashes: 1: dyADFFewrM7Y0P0BHyW6bU0vYJM.asa (hash: 5UxEiw6SdP/BtWdmCxTCXSJU1jTR+Ui2OH8nT+YD1IM=)
2: obGOy3zMmQgi1GDAcnLouA5oqtU.crl (hash: jiTFRO7OtYGpRtz+5ALE3/C25VVkpx4R3HpyZMmidBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/obGOy3zMmQgi1GDAcnLouA5oqtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/obGOy3zMmQgi1GDAcnLouA5oqtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/obGOy3zMmQgi1GDAcnLouA5oqtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:ac:97:be:01:db:df:a9:3d:c8:a5:f4:48:bd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b18ecb7ccc990822d460c07272e8b80e68aad5
Validity
Not Before: Jul 23 10:00:48 2026 GMT
Not After : Jul 24 10:00:48 2026 GMT
Subject: CN=1ecdfa4fba09d7d26e4cf24cc180b4621dd2697b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8b:b8:18:81:d7:67:d0:e5:6b:51:4a:a4:74:
33:d6:67:df:f2:6d:25:43:76:3f:ce:50:8c:eb:0e:
76:2c:e0:3a:7d:d0:2f:1f:6c:60:ae:d3:d5:90:df:
ac:50:80:94:16:12:2b:41:e1:f6:dd:97:02:29:ac:
12:32:7e:ad:ad:81:6d:18:a3:6b:36:40:35:b2:43:
c0:31:66:18:4d:ef:de:5d:a4:5c:d3:9f:c2:4d:54:
35:48:a5:91:80:00:fb:05:8d:23:05:85:ba:6a:fb:
a9:2c:3c:53:2a:67:28:6e:52:6a:3c:49:0b:94:60:
1f:0e:ce:f5:4e:44:56:d7:a5:83:05:25:11:77:5b:
09:ab:77:db:03:fb:8a:ab:16:40:bc:82:75:45:68:
85:d1:94:e2:f4:93:4c:45:2d:71:19:f1:bc:59:11:
b9:81:e1:02:88:eb:97:49:7b:82:fa:84:b5:aa:d4:
8e:2c:27:f0:60:bd:b9:63:30:8c:a7:da:27:14:89:
c5:7b:1b:87:d3:ff:7d:8f:24:d6:0d:4c:94:44:0f:
45:b1:9a:e3:bc:3d:8d:f8:5d:9d:fc:c8:f2:b5:ca:
76:f5:4c:8a:7a:3c:a7:16:58:8d:b6:a7:8b:66:a5:
05:9e:88:f4:b8:0b:a9:3d:2e:55:6f:1e:11:06:9e:
00:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CD:FA:4F:BA:09:D7:D2:6E:4C:F2:4C:C1:80:B4:62:1D:D2:69:7B
X509v3 Authority Key Identifier:
keyid:A1:B1:8E:CB:7C:CC:99:08:22:D4:60:C0:72:72:E8:B8:0E:68:AA:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obGOy3zMmQgi1GDAcnLouA5oqtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/obGOy3zMmQgi1GDAcnLouA5oqtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/obGOy3zMmQgi1GDAcnLouA5oqtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:eb:e1:af:de:ea:3c:7f:fb:f0:28:4f:61:b6:58:df:0d:69:
7c:6f:8c:c0:58:76:84:34:0f:60:66:16:31:1a:e5:a7:b1:90:
08:e9:4b:04:5c:94:e4:82:2c:14:fd:45:da:91:7f:a5:ca:bf:
26:27:0d:60:4c:11:66:e8:f7:33:2f:69:00:21:d4:a8:6a:24:
c2:60:3d:59:2b:83:d7:e3:07:8b:cf:61:d0:98:2e:06:db:d5:
6b:0b:d0:c1:a8:87:43:bc:e4:06:7d:1e:d3:3a:f6:84:1f:a9:
6a:82:cc:e7:58:3a:82:26:6e:9c:b3:a4:d8:c2:83:56:c8:87:
d8:22:83:71:63:78:58:41:87:f7:08:5e:da:64:65:19:29:ad:
6a:28:6d:1b:d0:21:67:db:92:75:a6:d5:1d:36:aa:38:d4:d0:
e9:f4:c2:fb:1d:6d:e5:09:ea:14:f4:7a:eb:2f:e8:40:6f:e1:
7f:4e:4d:7a:53:d0:1d:ff:69:6d:06:23:42:32:e1:63:f9:74:
ce:fa:03:89:2c:e9:e0:b4:c7:b0:e2:a4:13:dd:5b:9f:3e:0e:
d7:53:02:e9:7b:43:de:7a:8a:fc:30:d2:5d:8b:69:f1:65:ab:
b9:b0:46:4c:e8:e5:76:6c:56:a5:b2:32:8b:09:9a:c5:61:ff:
c5:82:a6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:01:06 2026 by rpki-client