Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
File: obkUGttOyjUXWjwq291dU5h1PUw.mft (raw, json)
Hash identifier: vcoDXbNNSU1nQDDOB7m8oLnW4rbAngkZUDi1G1nw9Ig=
Subject key identifier: 1A:A3:71:49:40:00:22:0A:6F:7D:DF:56:56:D4:06:3F:A2:85:0B:0D
Authority key identifier: A1:B9:14:1A:DB:4E:CA:35:17:5A:3C:2A:DB:DD:5D:53:98:75:3D:4C
Certificate issuer: /CN=a1b9141adb4eca35175a3c2adbdd5d5398753d4c
Certificate serial: 019F935BEBF4AB866EF9684557B44C93F337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obkUGttOyjUXWjwq291dU5h1PUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:42 +0000
Manifest this update: Fri 24 Jul 2026 09:01:42 +0000
Manifest next update: Sat 25 Jul 2026 09:01:42 +0000
Files and hashes: 1: 7AMox4S4nEHhmpbXvGZbnJYK6vY.roa (hash: GwF5AtnzW8V2jba5G+d/080MoYMx9miVmeYXvE5ydYs=)
2: obkUGttOyjUXWjwq291dU5h1PUw.crl (hash: 3KQhifpDeODVwJrXKexUxF1fwfSYZ3YXmGvlikgtwQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/obkUGttOyjUXWjwq291dU5h1PUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:eb:f4:ab:86:6e:f9:68:45:57:b4:4c:93:f3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b9141adb4eca35175a3c2adbdd5d5398753d4c
Validity
Not Before: Jul 24 09:01:42 2026 GMT
Not After : Jul 25 09:01:42 2026 GMT
Subject: CN=1aa371494000220a6f7ddf5656d4063fa2850b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:e4:59:c9:4b:22:47:d0:18:0e:cf:5c:85:
17:b5:b8:c7:62:87:5d:f1:bc:03:a9:05:60:1c:8c:
63:76:f2:cf:b9:a3:d6:20:c8:05:a2:ba:1c:c8:8a:
1b:d9:f9:aa:b3:71:6a:31:37:e8:af:9a:04:9f:95:
43:d2:5c:46:67:27:d8:04:2e:b1:e5:6b:18:92:ee:
e5:5b:f2:1c:e5:a1:75:86:8b:4f:44:7d:99:7c:a4:
6a:94:6f:f0:4d:2b:5b:df:1a:ca:cc:21:05:ce:c0:
6f:4e:b6:1a:ba:89:4a:50:b5:63:98:bd:b4:78:d4:
e0:2e:ef:b3:77:bb:97:27:fd:fc:e0:da:ef:6d:7c:
73:76:39:f7:d0:c6:66:46:f6:5a:23:67:4c:d1:c4:
92:54:72:c9:2a:e1:08:be:1f:7e:97:90:c9:db:ff:
4d:f0:56:bd:39:62:0e:1f:c4:61:8a:51:76:6d:73:
64:b4:66:da:3a:93:ae:fc:6b:69:a2:92:a6:96:4a:
1c:b5:fc:8f:7a:f0:bc:c6:d0:51:f6:48:60:51:5b:
65:61:67:ff:6c:e1:22:d5:d3:11:a8:f4:1c:22:57:
2b:8f:4f:03:9f:d5:82:fe:aa:47:b0:c7:98:d6:b5:
39:40:a5:20:9b:66:c3:b5:32:2c:44:bb:11:d8:45:
8d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A3:71:49:40:00:22:0A:6F:7D:DF:56:56:D4:06:3F:A2:85:0B:0D
X509v3 Authority Key Identifier:
keyid:A1:B9:14:1A:DB:4E:CA:35:17:5A:3C:2A:DB:DD:5D:53:98:75:3D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obkUGttOyjUXWjwq291dU5h1PUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c1:cb:d3:41:a1:71:3a:5d:11:1e:c6:4b:bc:24:b5:c0:17:
26:c9:bc:c6:8e:53:97:ac:d4:04:df:11:f2:25:6d:7b:00:cc:
42:79:1c:66:3c:12:c5:f5:d4:a4:3a:61:d4:c4:4b:57:18:00:
4f:cf:03:36:60:6b:4a:89:01:3f:22:40:55:e0:f1:b3:a7:8f:
53:06:83:11:29:37:44:45:7e:a2:42:3c:5e:10:d3:f2:83:9d:
5b:9f:60:98:74:19:1e:c6:a0:fb:ba:dd:ff:79:da:e5:95:31:
14:fc:56:ec:22:8a:fe:f3:db:a8:36:eb:66:a3:df:a7:76:e6:
73:73:c7:a1:e7:bf:f0:4a:c4:bb:f5:51:bd:75:3e:d0:ba:ed:
e6:35:75:35:d1:7a:dd:26:d0:f5:ee:38:21:58:6d:89:27:7b:
79:05:60:ce:dc:9d:e8:59:ba:1f:31:5e:7e:31:bd:40:04:e0:
ff:92:6c:36:e7:90:ac:0f:cf:9a:65:a1:72:56:5a:e5:60:04:
99:0c:14:af:e9:cf:c0:d4:80:5a:9e:3a:2d:b6:d9:bf:8e:5c:
ff:b2:a4:56:d8:d2:ed:6b:85:53:01:10:75:4c:c2:8b:e0:cd:
c9:d0:b0:47:a5:5e:3c:3d:5b:38:94:f4:22:95:5f:7c:0e:74:
b6:3e:10:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:31 2026 by rpki-client