Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
File: obBHf50JosdPTEWegLcpr-6zEtQ.mft (raw, json)
Hash identifier: 89gLJavT7rtptXjwsaU1ezkKq2ayl0nWDSUJPyBcZuM=
Subject key identifier: F4:26:91:A3:71:0E:9E:56:3F:9A:9D:1F:A3:16:B8:99:73:DC:3A:53
Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
Certificate issuer: /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Certificate serial: 01A0E73F121D2C3262D425951DBE522F112E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
Manifest number: 1013
Signing time: Mon 28 Sep 2026 09:01:05 +0000
Manifest this update: Mon 28 Sep 2026 09:01:05 +0000
Manifest next update: Tue 29 Sep 2026 09:01:05 +0000
Files and hashes: 1: GcmnLhUrxsDtpi6IFcCeNgV9CNU.roa (hash: 30rGZU6mCf0D1WtNl4OSSePM1TRDWesSyIJi8OZOjqw=)
2: T9QosLBjVi3O4na1965Ec34JXvw.roa (hash: HSBCkcAnz7XfejtJRKHSAfoqFOLGJkEPluwkxCR0nhA=)
3: obBHf50JosdPTEWegLcpr-6zEtQ.crl (hash: YgSVQsOGg+mQwPkAqaPxg++qnsUYOqekH4c1Jig3jkQ=)
4: z_9II5WYBoTBGZ5pgFe4r6CevAw.roa (hash: b3pynxd2lAP3NtJ8uzmF53kEH7MeotRATSOpsRAWQMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:12:1d:2c:32:62:d4:25:95:1d:be:52:2f:11:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Validity
Not Before: Sep 28 09:01:05 2026 GMT
Not After : Sep 29 09:01:05 2026 GMT
Subject: CN=f42691a3710e9e563f9a9d1fa316b89973dc3a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:a6:69:11:79:3f:4b:29:90:72:e4:b0:98:
32:b7:68:09:2d:ab:79:b7:f4:df:a8:84:26:5f:f8:
d4:e6:ea:8e:1d:e6:7a:67:3f:7e:c9:bf:5b:9f:4a:
10:ff:f3:da:b6:8f:79:59:41:31:90:12:d0:6b:be:
dd:49:33:7a:5d:da:98:62:da:e1:ad:55:08:cd:4e:
89:18:dd:de:7d:bb:53:0e:9b:90:d0:d0:c8:db:ee:
b4:a4:80:b7:00:e1:83:1b:c6:cb:45:14:35:8c:4b:
32:cf:e8:b7:2f:8b:40:14:87:78:79:e9:4b:bb:09:
e9:13:b7:8e:45:c6:f0:ab:43:2d:88:8b:74:34:19:
fa:99:08:1c:98:d9:38:00:7f:47:29:29:33:45:86:
35:2c:da:cc:2f:69:62:52:c5:0e:8a:32:44:d4:bc:
df:3f:97:cd:e7:ff:b8:ff:9f:66:8d:f9:e8:05:b8:
45:d0:91:5f:08:b1:36:a9:f5:92:67:e0:5a:40:ca:
ed:5c:ea:5c:cf:f8:0b:a4:ad:8e:c5:08:bd:cd:a2:
9e:ec:07:65:d7:0a:05:3f:bc:cb:4f:9f:2e:64:c8:
fb:69:9a:a7:98:1a:00:98:01:63:07:16:1d:11:b3:
4f:68:ae:92:b3:ba:bf:88:78:5f:df:3e:66:a8:71:
66:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:26:91:A3:71:0E:9E:56:3F:9A:9D:1F:A3:16:B8:99:73:DC:3A:53
X509v3 Authority Key Identifier:
keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a7:69:e5:b4:36:c0:57:7f:a2:c9:4e:4d:ad:c4:72:c9:d5:
70:9c:48:5d:8e:6b:b5:d7:85:96:87:36:1c:75:af:ea:2b:a4:
7e:19:65:07:0d:c6:e8:43:9e:fc:6a:e8:7a:32:45:9d:b9:2f:
d1:d0:7c:b3:93:89:61:95:22:c9:89:ea:91:5f:7c:90:c6:ec:
6b:aa:81:8e:35:62:44:2b:ad:ea:15:ae:43:33:16:f2:92:2e:
bc:28:62:9d:5a:21:5d:51:77:65:f6:e2:82:88:6d:75:5b:57:
5f:c6:3c:79:57:9f:0f:0b:d5:35:f9:3b:ee:17:31:26:26:7e:
fb:b8:ed:82:97:d5:8f:ef:1e:71:ab:57:51:30:1c:3b:61:b2:
54:f0:54:4c:04:29:31:07:ae:86:dc:8a:76:7c:54:44:3b:1b:
6d:d3:25:d9:23:0d:18:99:7d:bf:c6:4b:14:e7:09:46:f2:47:
85:08:57:d1:08:64:36:c7:4c:34:6b:1e:8e:ae:fe:25:9f:91:
a6:cc:b5:75:90:e6:e5:9a:a8:e4:1a:22:f2:d1:6e:e1:95:cb:
e3:7f:53:33:b0:a3:96:5f:43:e8:d3:68:9f:0c:e8:c3:93:6d:
07:b0:e9:89:50:48:82:0c:67:f5:21:20:6f:1c:50:73:bc:7a:
39:49:b5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:30:22 2026 by rpki-client