Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
File: obgXVrYRDyp1SVx0yCDg5zTuimw.mft (raw, json)
Hash identifier: LnPwB6b4U4HjdlDN/7z+M01fTkQO/1h+FT8p+8etU/A=
Subject key identifier: 94:86:A8:6D:89:76:31:1F:E3:E4:02:18:82:AF:FB:14:B2:F9:52:E1
Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
Certificate issuer: /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Certificate serial: 019D27DF85857CCF895139C27DA1093F6176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
Manifest number: 0D67
Signing time: Thu 26 Mar 2026 02:00:53 +0000
Manifest this update: Thu 26 Mar 2026 02:00:53 +0000
Manifest next update: Fri 27 Mar 2026 02:00:53 +0000
Files and hashes: 1: Lp8SvbEirw77bD6bjqTRJH9RHag.roa (hash: E4a/u2pu0/SKcHKL3Q1hBcB3nQ4uQ6kbjvNNFt2G5aE=)
2: obgXVrYRDyp1SVx0yCDg5zTuimw.crl (hash: dJ5UBHILJ4QIJZS/p9/TixdMQ+pNq8fQVCCdLXhjsTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:85:85:7c:cf:89:51:39:c2:7d:a1:09:3f:61:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Validity
Not Before: Mar 26 02:00:53 2026 GMT
Not After : Mar 27 02:00:53 2026 GMT
Subject: CN=9486a86d8976311fe3e4021882affb14b2f952e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:99:16:ca:fd:d9:bd:2d:03:8c:b9:70:b7:
d8:ae:4f:76:93:ee:df:a9:49:ae:a8:c7:44:d8:a7:
b0:6f:1f:3b:df:6b:05:6d:ee:57:a8:26:7c:90:35:
16:a5:90:0c:14:f7:c0:4f:ce:58:67:18:da:87:c2:
69:d4:26:49:2d:92:ea:5a:44:90:6b:97:6d:2b:d1:
a2:df:ef:7e:ca:40:ff:53:a5:d9:ab:d5:db:28:4e:
49:82:45:ae:2a:b7:9f:c2:83:a3:34:75:9f:73:07:
2c:01:72:d4:b5:ab:9e:90:b6:9f:5e:f9:3e:70:2a:
83:a2:f4:dd:f6:6e:8d:d4:5f:8a:f7:18:19:6f:08:
e3:10:c2:47:f8:6b:b7:3b:00:4a:ac:11:65:84:38:
45:6e:95:7b:fe:4b:09:a7:9f:c5:59:2a:68:b8:68:
de:66:65:4a:2f:83:6c:ad:aa:47:30:18:e6:d1:22:
90:81:e4:e4:3f:79:c2:59:0a:18:ac:f3:46:4b:17:
b4:ac:35:68:a3:4b:65:f5:80:d7:6b:59:1e:23:9e:
33:69:21:4d:96:cb:48:06:78:01:e4:e9:b3:3e:c3:
b2:0d:75:f4:fd:20:3d:eb:1b:1b:43:a4:d8:cf:ab:
27:bb:7a:c3:5a:e6:89:cf:24:85:47:de:18:88:61:
8f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:86:A8:6D:89:76:31:1F:E3:E4:02:18:82:AF:FB:14:B2:F9:52:E1
X509v3 Authority Key Identifier:
keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:12:dd:86:3b:07:e2:25:68:ba:88:e7:f3:ec:e2:38:57:4b:
68:36:9e:2c:d0:44:73:19:a7:89:74:fe:7e:99:f8:9d:47:0b:
0f:a1:ef:0e:45:bc:b3:13:68:8f:bb:dd:60:fb:69:41:d1:91:
87:4f:25:1f:07:85:6e:95:4d:27:6d:f3:2c:ea:97:a7:63:c4:
d5:d3:42:8d:2d:9d:97:5c:d1:17:87:7b:b9:c1:0f:b8:f4:cb:
af:e7:ac:58:62:ef:7c:24:ab:53:55:b1:a2:84:89:96:db:cc:
a8:13:58:ae:a4:e9:e2:85:2a:cd:90:37:f5:6c:be:bb:33:75:
e9:f8:4f:be:7e:9c:ba:f9:b6:57:2b:ab:1d:e6:e3:ff:d1:47:
07:b9:9f:4b:ac:08:77:05:73:2b:a9:f0:f7:a0:07:d1:c0:23:
d8:42:dc:79:ec:9b:0e:99:73:72:9d:40:08:35:6b:54:f8:ea:
5b:3c:e6:27:1b:11:6a:41:d6:32:6f:d6:c2:ce:2d:9c:cc:71:
fc:a4:c6:21:b1:e6:ff:4c:a1:d2:11:89:46:9a:46:6e:3e:33:
66:f2:09:02:11:0d:df:d3:ae:df:91:28:eb:b7:82:61:31:a0:
5e:aa:95:7d:4c:47:2c:e7:9f:62:7c:4e:db:ef:5b:3d:22:b5:
28:74:ac:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:56 2026 by rpki-client