Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
File: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft (raw, json)
Hash identifier: 8VB+TAXX+RGR37v8KnuTi1eNmS6idOepvildX78M2Lk=
Subject key identifier: CA:24:C9:E4:45:7C:26:47:BB:79:3A:7C:43:B6:D0:32:71:EA:26:2D
Authority key identifier: D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
Certificate issuer: /CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Certificate serial: 019F8EA27B0A914B9F4DBDA3440A96F667FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
Manifest number: 10D8
Signing time: Thu 23 Jul 2026 11:00:40 +0000
Manifest this update: Thu 23 Jul 2026 11:00:40 +0000
Manifest next update: Fri 24 Jul 2026 11:00:40 +0000
Files and hashes: 1: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl (hash: sSfq/qfM1xfqBMGUmGgF+r6GGaROrNQG5oTvKE7plLo=)
2: bEcb6mJG7iCjlx3MBYnus4nMrP8.asa (hash: YUZIJf3sKNZrkiUCtSJPScroHKhNFxjZxkZytz7Yd84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:7b:0a:91:4b:9f:4d:bd:a3:44:0a:96:f6:67:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Validity
Not Before: Jul 23 11:00:40 2026 GMT
Not After : Jul 24 11:00:40 2026 GMT
Subject: CN=ca24c9e4457c2647bb793a7c43b6d03271ea262d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2b:ab:99:84:c2:d1:90:df:3c:de:e6:51:55:
b9:63:a8:9e:70:1c:38:f5:26:18:34:42:99:e8:0e:
98:aa:8b:46:8b:6d:8e:88:7f:d2:59:c6:10:c1:1c:
25:ea:95:c7:49:2f:00:9c:fb:60:8f:70:1f:30:4f:
39:06:4a:c2:b5:14:21:b8:1b:74:77:0d:f2:b5:18:
33:19:e3:1d:5f:e2:70:b5:00:71:8a:aa:90:82:6b:
f8:f2:48:92:ad:c6:cf:0b:62:f7:63:a6:68:3b:93:
36:4e:6b:36:1b:80:ff:3c:2e:86:dc:8b:4b:eb:8b:
39:53:33:55:68:77:c5:eb:7d:b8:82:41:07:9b:67:
c9:1c:89:b9:ae:cb:f6:5d:68:75:cd:80:9b:0d:c4:
62:5e:35:14:8a:07:bd:48:52:a3:77:df:4f:2a:2d:
32:8a:d4:b5:2d:b5:62:e6:04:8f:93:27:1a:85:99:
30:56:cf:d9:0b:10:cc:0c:67:c3:ed:b6:cc:72:b9:
18:8e:fc:2d:a7:6c:3f:d5:d0:db:b8:8f:ca:ad:2f:
c7:3a:36:a1:4f:68:18:94:62:33:95:b2:11:12:3d:
f7:fb:21:08:cd:50:cf:b5:87:4b:21:0e:95:08:98:
ab:fc:e6:da:83:35:6f:6c:ff:26:6b:f7:6c:4c:f8:
c8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:24:C9:E4:45:7C:26:47:BB:79:3A:7C:43:B6:D0:32:71:EA:26:2D
X509v3 Authority Key Identifier:
keyid:D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:83:05:f7:28:83:92:72:94:19:62:9b:f3:80:f9:8b:06:ff:
93:cb:6a:ac:35:42:10:8e:aa:4e:fa:d7:c4:d1:4b:8f:30:42:
74:50:c4:8f:95:6d:42:68:9c:35:74:93:cd:fb:d9:c4:64:a8:
80:90:96:b1:d3:b0:67:b7:aa:48:5e:0a:6b:5b:b0:ce:b8:b4:
fd:40:83:ea:3b:7e:71:63:23:ab:3c:3d:ac:ab:85:fa:a9:c6:
84:12:19:5f:74:9a:69:86:76:68:4b:75:ed:33:dc:e0:37:61:
31:b5:54:52:9a:c9:bd:f4:95:02:c9:57:ef:0d:c5:6b:94:45:
c7:7f:dd:6e:8b:4e:86:48:71:5e:24:a3:ce:66:ee:04:16:17:
f6:a6:62:f5:df:2f:c7:37:c5:82:33:fd:09:64:a3:6b:d4:46:
9c:46:89:ea:9b:fa:2e:79:a3:5d:b1:ab:71:8f:a8:a9:66:57:
f8:63:f8:e2:5d:3b:73:f6:7c:32:77:8b:2e:a8:33:49:fb:4d:
9a:5e:4b:bd:ab:dc:14:77:28:0f:ed:5b:f6:e9:03:ef:43:ff:
fb:e4:aa:c9:da:e4:d7:74:d0:a5:87:19:ff:69:f7:af:5a:4d:
d9:47:3c:cc:05:78:9a:a9:ff:b5:76:9f:16:8d:7a:87:89:71:
a9:34:84:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:07 2026 by rpki-client