Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
File: obkUGttOyjUXWjwq291dU5h1PUw.mft (raw, json)
Hash identifier: Y1OKYyUjMwokElhQ3ffQiwTH+KTr510gI+8q4jpLz7I=
Subject key identifier: FE:F2:62:95:F0:A7:F6:2C:F0:BA:93:D0:72:EE:58:CA:DE:9F:DF:60
Authority key identifier: A1:B9:14:1A:DB:4E:CA:35:17:5A:3C:2A:DB:DD:5D:53:98:75:3D:4C
Certificate issuer: /CN=a1b9141adb4eca35175a3c2adbdd5d5398753d4c
Certificate serial: 01A0D7CD1DB4605945E866018C4C71503AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obkUGttOyjUXWjwq291dU5h1PUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:02:18 +0000
Manifest this update: Fri 25 Sep 2026 09:02:18 +0000
Manifest next update: Sat 26 Sep 2026 09:02:18 +0000
Files and hashes: 1: 7AMox4S4nEHhmpbXvGZbnJYK6vY.roa (hash: GwF5AtnzW8V2jba5G+d/080MoYMx9miVmeYXvE5ydYs=)
2: obkUGttOyjUXWjwq291dU5h1PUw.crl (hash: gPLufvIbx9XT03qrLcaAvZ1TenGZonPaLve8CV1t1a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/obkUGttOyjUXWjwq291dU5h1PUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cd:1d:b4:60:59:45:e8:66:01:8c:4c:71:50:3a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b9141adb4eca35175a3c2adbdd5d5398753d4c
Validity
Not Before: Sep 25 09:02:18 2026 GMT
Not After : Sep 26 09:02:18 2026 GMT
Subject: CN=fef26295f0a7f62cf0ba93d072ee58cade9fdf60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:55:53:00:57:e2:7c:8d:cf:fb:0c:db:4b:d9:
04:ef:f7:c2:aa:76:9a:e3:c4:5d:f7:1e:e5:cf:78:
90:2b:b6:53:70:67:c1:75:f1:b8:f3:38:61:c9:db:
74:44:74:f1:64:0c:22:ee:74:93:ee:b2:f1:3f:61:
ce:d4:f4:42:63:e8:d5:e0:c5:b0:19:2f:ee:b4:b6:
75:78:69:61:46:38:ba:f7:4e:52:fe:26:46:14:7a:
a8:bc:b7:1d:6d:c3:1b:b1:a8:9d:08:90:73:76:2c:
20:82:fe:69:9c:08:dc:df:83:34:f7:95:5c:f0:f0:
a5:6f:2b:7f:27:dc:68:37:4d:ee:1b:93:a6:d8:eb:
58:c1:49:7c:63:63:b9:1c:d5:d3:5e:8f:c9:9c:ed:
14:5a:93:1e:89:6a:6a:d4:4d:25:40:73:c2:2d:a5:
84:83:38:58:14:64:be:8b:7e:6b:0d:98:ff:dc:5f:
2d:9b:d0:5b:03:76:d5:36:bc:5c:18:07:a8:c2:c8:
63:2d:b5:22:60:a0:2d:39:3a:e5:18:ef:bb:92:6b:
73:78:ca:4f:cc:71:5d:b2:1d:8f:ad:69:b4:35:a8:
04:a8:a0:fb:d8:2f:58:f8:1a:11:ee:40:01:5c:b0:
13:1c:66:e5:02:3c:69:c8:c2:82:15:9b:db:1c:8c:
e7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F2:62:95:F0:A7:F6:2C:F0:BA:93:D0:72:EE:58:CA:DE:9F:DF:60
X509v3 Authority Key Identifier:
keyid:A1:B9:14:1A:DB:4E:CA:35:17:5A:3C:2A:DB:DD:5D:53:98:75:3D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obkUGttOyjUXWjwq291dU5h1PUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:69:11:39:b8:bd:b9:00:a2:c6:97:35:ec:26:d2:63:34:fb:
e4:bc:e8:df:7a:8d:b3:eb:ed:14:8a:aa:87:96:57:26:2b:f0:
70:21:cf:9b:0d:84:4a:f5:d7:e1:8a:9c:6c:a1:9a:32:79:d6:
1b:84:68:d2:df:a4:2c:43:74:a7:d5:60:10:5e:d3:cd:43:7b:
b1:17:3c:f1:9f:c5:a4:72:79:48:0c:2f:c0:a9:2a:93:45:54:
8d:f6:a5:ff:67:13:f6:5b:c2:f2:5c:63:0a:22:2f:c6:be:99:
4f:f3:76:77:b8:ef:0f:ad:e2:cd:93:39:3d:0e:85:77:d3:de:
01:e4:c4:ba:2a:cb:4d:6e:2c:29:28:f4:99:8e:fd:86:b5:9e:
dc:09:12:e3:cb:71:c5:f4:b0:99:e3:f1:07:dc:fc:32:e7:93:
f7:44:6d:23:98:7d:f2:02:14:71:fb:ea:84:d7:5d:a4:67:06:
3a:9c:1e:23:43:84:bd:83:10:11:3d:b6:6a:87:49:9c:8c:cd:
86:13:2c:3a:fc:b9:bd:d2:ee:3c:26:7b:22:89:a7:26:39:ef:
9c:bc:44:1d:9c:80:18:ca:28:1a:ec:75:a1:02:1e:b7:cf:5c:
aa:33:b1:5d:e4:2e:b4:a8:fe:b9:f4:c1:41:e1:c6:a5:d6:44:
1c:de:58:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:53:33 2026 by rpki-client