Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
File: obceuN8XHmQvGyuQQZAB8fxEXk0.mft (raw, json)
Hash identifier: 3tQXx3idd3VjnmHNFCpJrFfE11M37Lcx5V5KLIz5SSI=
Subject key identifier: C2:E0:E0:2F:90:9E:AA:D8:70:AD:84:D7:1C:CC:B3:1D:16:6B:E2:45
Authority key identifier: A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D
Certificate issuer: /CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d
Certificate serial: 019D25F108562D923F7B25E250B98681EFBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
Manifest number: 114C
Signing time: Wed 25 Mar 2026 17:00:46 +0000
Manifest this update: Wed 25 Mar 2026 17:00:46 +0000
Manifest next update: Thu 26 Mar 2026 17:00:46 +0000
Files and hashes: 1: obceuN8XHmQvGyuQQZAB8fxEXk0.crl (hash: C+TbyUbx8O+24npjCb4egJkIBHP/n9mwwqGxfv0seFE=)
2: xlLzehGeb23GwrEYVRV1RxUYUhY.roa (hash: c1c4Sj/u0qy2xja1j0e40LLkcNGc0g4Li0sbH5urZJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:08:56:2d:92:3f:7b:25:e2:50:b9:86:81:ef:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d
Validity
Not Before: Mar 25 17:00:46 2026 GMT
Not After : Mar 26 17:00:46 2026 GMT
Subject: CN=c2e0e02f909eaad870ad84d71cccb31d166be245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:de:3d:d3:93:d1:8b:67:2c:cd:c5:8d:f0:
f0:9a:ce:96:5d:98:1c:99:43:e5:9f:bb:31:75:4b:
11:5e:53:74:61:e0:63:5b:11:fd:c6:57:b2:8d:d8:
d5:be:33:75:7f:06:6a:9e:85:3f:af:d4:64:ec:a6:
ef:06:1f:24:ed:c7:a0:a8:00:d9:2d:4a:97:74:61:
8c:8b:f1:75:68:3f:e5:16:ae:ee:ec:77:7c:44:8f:
37:5a:c7:5d:87:6b:85:6d:f5:58:dd:e9:72:56:6a:
b4:ce:8f:2a:ab:86:9a:22:62:40:d8:94:d6:05:e9:
95:ff:3f:60:d6:91:1a:54:c4:54:1c:4f:61:df:65:
33:11:36:5e:b5:e4:72:ee:84:81:cd:f2:f9:bb:c4:
e1:37:20:06:28:76:da:1e:ed:06:17:17:62:46:c4:
66:a4:c4:8e:fb:24:c3:a7:ba:cb:d4:6f:a2:36:73:
3d:5a:68:3f:9f:a8:c2:26:1b:95:b9:85:61:51:80:
09:cc:4a:b3:d6:73:e4:9c:68:ca:cc:1d:27:a5:43:
3f:fc:ed:5b:58:52:1a:38:fc:d6:e1:4f:c7:79:3d:
17:45:e0:d6:b0:20:b0:83:f3:95:98:96:fa:47:39:
3f:a1:9b:d6:a3:42:28:e9:8e:68:48:31:ed:d1:bc:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E0:E0:2F:90:9E:AA:D8:70:AD:84:D7:1C:CC:B3:1D:16:6B:E2:45
X509v3 Authority Key Identifier:
keyid:A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ac:5c:9e:bd:a3:3b:de:14:03:cf:bf:e8:fc:d5:e3:44:0c:
5b:08:bc:65:d0:fe:cd:97:0d:cf:d3:8f:b4:d9:0b:6a:e2:2d:
9b:73:27:53:72:c2:d1:65:26:9d:db:bd:0e:04:28:c1:77:c2:
af:f2:21:be:e8:85:36:6c:4f:e3:7c:52:66:34:ab:23:51:cd:
e9:4f:af:dd:49:50:fd:2e:ad:aa:bb:24:e4:9e:15:05:8c:52:
d2:49:fa:40:0e:c2:05:a4:80:ee:84:f6:93:d6:0c:99:e2:73:
39:27:7f:49:99:f6:fb:3d:0b:b0:a3:de:ee:ab:38:88:17:52:
35:0f:f3:c1:1f:06:31:ff:e0:20:13:d0:5c:b1:e0:e1:9c:dd:
2c:bf:47:27:47:ec:3f:14:8e:db:b7:00:ab:9b:58:40:f0:00:
be:07:9f:4f:cb:f4:79:ce:78:f6:2c:e2:de:b0:a9:22:e7:01:
c0:2c:74:bd:6d:45:84:e2:36:9f:68:88:b9:32:75:3b:e6:79:
0b:91:fb:ff:b5:28:15:f5:cd:8e:82:d7:7e:1a:17:94:9f:be:
e1:ab:67:d3:be:c8:49:ed:34:cb:d4:01:c8:43:19:78:c4:b7:
fa:e5:e9:b8:b2:1f:a5:6b:0d:ea:47:b9:42:0e:3b:1e:0c:cd:
2d:61:08:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8QhWLZI/eyXiULmGge+9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjcxZWI4ZGYxNzFlNjQyZjFiMmI5MDQxOTAwMWYxZmM0
NDVlNGQwHhcNMjYwMzI1MTcwMDQ2WhcNMjYwMzI2MTcwMDQ2WjAzMTEwLwYDVQQD
EyhjMmUwZTAyZjkwOWVhYWQ4NzBhZDg0ZDcxY2NjYjMxZDE2NmJlMjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPXePdOT0YtnLM3FjfDwms6WXZgc
mUPln7sxdUsRXlN0YeBjWxH9xleyjdjVvjN1fwZqnoU/r9Rk7KbvBh8k7cegqADZ
LUqXdGGMi/F1aD/lFq7u7Hd8RI83Wsddh2uFbfVY3elyVmq0zo8qq4aaImJA2JTW
BemV/z9g1pEaVMRUHE9h32UzETZeteRy7oSBzfL5u8ThNyAGKHbaHu0GFxdiRsRm
pMSO+yTDp7rL1G+iNnM9Wmg/n6jCJhuVuYVhUYAJzEqz1nPknGjKzB0npUM//O1b
WFIaOPzW4U/HeT0XReDWsCCwg/OVmJb6Rzk/oZvWo0Io6Y5oSDHt0bw6UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLg4C+QnqrYcK2E1xzMsx0Wa+JFMB8GA1UdIwQY
MBaAFKG3HrjfFx5kLxsrkEGQAfH8RF5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JjZXVOOFhIbVF2R3l1UVFaQUI4ZnhFWGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mMDg4YmQtNTAyOS00OTAzLTk2MTYt
MDY3MmVhMDQ0MGJiLzEvb2JjZXVOOFhIbVF2R3l1UVFaQUI4ZnhFWGswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9mMDg4YmQtNTAyOS00OTAzLTk2MTYtMDY3MmVhMDQ0MGJi
LzEvb2JjZXVOOFhIbVF2R3l1UVFaQUI4ZnhFWGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKxcnr2j
O94UA8+/6PzV40QMWwi8ZdD+zZcNz9OPtNkLauItm3MnU3LC0WUmndu9DgQowXfC
r/IhvuiFNmxP43xSZjSrI1HN6U+v3UlQ/S6tqrsk5J4VBYxS0kn6QA7CBaSA7oT2
k9YMmeJzOSd/SZn2+z0LsKPe7qs4iBdSNQ/zwR8GMf/gIBPQXLHg4ZzdLL9HJ0fs
PxSO27cAq5tYQPAAvgefT8v0ec549izi3rCpIucBwCx0vW1FhOI2n2iIuTJ1O+Z5
C5H7/7UoFfXNjoLXfhoXlJ++4atn077ISe00y9QByEMZeMS3+uXpuLIfpWsN6ke5
Qg47HgzNLWEIvQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:48 2026 by rpki-client