Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft
File: obUnWAWCwH8MZ29bQj57p9A0mvM.mft (raw, json)
Hash identifier: v3eEBoSgBO6mjf/lvlFEQHCKVsSX3u5Z8oYeeo0C1EI=
Subject key identifier: A9:CE:6A:FE:38:BF:B6:1D:64:0D:24:2C:6A:7B:86:14:27:0F:6D:36
Authority key identifier: A1:B5:27:58:05:82:C0:7F:0C:67:6F:5B:42:3E:7B:A7:D0:34:9A:F3
Certificate issuer: /CN=a1b527580582c07f0c676f5b423e7ba7d0349af3
Certificate serial: 019D2A04E7C86314BAA51029F51E06BF8758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obUnWAWCwH8MZ29bQj57p9A0mvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft
Manifest number: 2D
Signing time: Thu 26 Mar 2026 12:00:57 +0000
Manifest this update: Thu 26 Mar 2026 12:00:57 +0000
Manifest next update: Fri 27 Mar 2026 12:00:57 +0000
Files and hashes: 1: obUnWAWCwH8MZ29bQj57p9A0mvM.crl (hash: i/l0gokyR8EXHAEk6vrNLnOHu+76lgJrxLz1/w2j5JI=)
2: t_ByAeaBQNIrFb5bhmau53EuKWA.roa (hash: AwzAqExXrWOFnUsxmRE0E2eT/V7WcGMDYvuPQOqWltg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/obUnWAWCwH8MZ29bQj57p9A0mvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:e7:c8:63:14:ba:a5:10:29:f5:1e:06:bf:87:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b527580582c07f0c676f5b423e7ba7d0349af3
Validity
Not Before: Mar 26 12:00:57 2026 GMT
Not After : Mar 27 12:00:57 2026 GMT
Subject: CN=a9ce6afe38bfb61d640d242c6a7b8614270f6d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:d8:93:8f:bc:9b:15:f8:ca:ec:15:1f:da:
c9:22:a0:52:e7:9f:74:57:d3:5f:8d:81:31:c0:f5:
97:ee:f2:ef:49:4a:02:97:62:7f:a1:b9:4f:57:e8:
7e:29:c5:fe:19:c6:4a:cd:b4:c3:00:8c:8d:ba:35:
5b:b5:ac:39:bf:3a:bd:7e:8f:e9:85:5d:98:65:eb:
f6:5b:d4:5b:a1:45:56:af:f0:e2:98:f6:fe:d7:b6:
f6:e9:cd:10:a3:99:46:a6:5e:94:16:03:40:d7:f8:
14:29:99:d7:aa:0f:90:45:96:15:68:f3:9e:11:aa:
60:bc:e4:51:6b:31:4f:bd:42:7b:fc:2c:39:6c:c8:
e3:e8:54:0d:11:db:ea:62:b4:15:a6:41:82:19:4c:
d1:d3:ec:cb:d5:24:48:31:b1:90:87:59:25:91:43:
a5:34:4d:84:0b:e2:a2:c9:80:0d:b5:09:34:05:92:
b8:75:df:89:78:52:12:96:fd:19:15:66:38:b2:22:
e1:0c:3a:8f:d1:ea:57:31:6f:b6:8f:d0:3b:2d:58:
03:7e:bd:ff:4f:ea:60:80:d4:41:67:4e:31:2e:a3:
10:37:e0:24:11:22:b3:89:55:38:e7:ed:e3:c0:8b:
e3:15:fa:7a:97:08:0a:e4:ed:40:31:45:30:c4:6b:
14:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CE:6A:FE:38:BF:B6:1D:64:0D:24:2C:6A:7B:86:14:27:0F:6D:36
X509v3 Authority Key Identifier:
keyid:A1:B5:27:58:05:82:C0:7F:0C:67:6F:5B:42:3E:7B:A7:D0:34:9A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obUnWAWCwH8MZ29bQj57p9A0mvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b1:73:0d:3e:a7:48:56:20:b5:fc:9b:95:10:a1:6b:48:07:
94:8f:6a:7f:e9:04:25:6b:6e:1e:8f:11:cf:b3:50:d6:38:59:
2a:80:02:02:86:4d:a4:31:4e:fe:90:e0:e8:77:85:f5:18:e2:
1d:85:6e:fc:86:ce:07:8c:bb:ec:04:56:9a:47:6d:bc:6e:70:
81:6e:fb:ce:e0:13:05:af:fb:52:7d:f6:56:b0:1d:6b:dc:1f:
25:6d:b9:e5:60:aa:0a:38:02:97:2c:d3:23:87:aa:3a:8d:a9:
3b:54:f7:db:6c:70:db:98:34:d1:37:7e:53:1a:b7:9a:5b:89:
93:2c:41:f3:1f:62:fb:6a:9e:4f:20:e6:f3:9e:c9:fc:b2:50:
f2:6c:7b:87:20:9d:5e:37:10:84:d3:54:73:86:f2:0f:89:7f:
30:ae:05:b7:d1:31:12:1a:b5:7d:50:5b:5a:39:eb:76:51:1d:
44:74:2e:84:b8:02:f5:18:64:82:b6:01:03:dd:be:40:f1:05:
9f:57:c4:36:9b:9a:29:20:6f:cc:1d:73:9b:e7:3a:9a:26:2d:
60:34:c6:ee:59:16:52:42:de:a2:6e:9d:b8:5d:bc:0c:8c:e2:
ee:97:94:9f:2b:a9:d2:a8:78:b2:3f:9d:35:ea:ac:29:9d:76:
ce:72:e1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:26 2026 by rpki-client