Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
File: D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json)
Hash identifier: 0caqxiSQjTcy8rjo25miXn/ZfrEUhzPhcMBgc0ppmrI=
Subject key identifier: FD:45:2A:AC:CF:56:6A:12:CF:9E:91:60:7B:08:57:6D:F1:F7:6D:93
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 019F197A5EC1B742AE396499DEA5EC9BFD67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
Manifest number: 188B
Signing time: Tue 30 Jun 2026 17:01:17 +0000
Manifest this update: Tue 30 Jun 2026 17:01:17 +0000
Manifest next update: Wed 01 Jul 2026 17:01:17 +0000
Files and hashes: 1: 2og3dcAu_OJTWY5ClPmlGnRIzwU.roa (hash: 74PsLs5h39Lm9vcmo+PFlNAnhQ4jBPxcvEsxXUafgh4=)
2: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: DhDG1jiKutflzl5dPJZtByI2z1CEA0LROlDloTlvFIk=)
3: VEt141JORS4uXfTBqMEFS8dl95o.roa (hash: 1ZDnuppObmQPK0jPoDm6JuqwCFlMwWQBs72wZZg4jts=)
4: wMPJLylt1ll63S3MrW2IkHP31bY.roa (hash: WHI/AcafVWTXaJ4wP1ApO3kymuMxH23X4WRNK0MlnyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:5e:c1:b7:42:ae:39:64:99:de:a5:ec:9b:fd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Jun 30 17:01:17 2026 GMT
Not After : Jul 1 17:01:17 2026 GMT
Subject: CN=fd452aaccf566a12cf9e91607b08576df1f76d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c2:6a:f4:30:7a:9d:cd:56:7c:65:3e:8d:08:
b4:8f:55:75:a8:ef:a1:89:47:23:76:3a:91:df:8a:
13:1f:54:0a:bd:f1:f6:c7:c3:b3:7d:fa:16:70:b1:
fa:9a:a4:ed:4e:de:a1:db:39:a3:a6:e2:f6:38:32:
34:05:f4:b7:a7:a7:42:0d:5b:b4:f8:15:30:e5:3d:
0f:46:d6:f2:f6:dd:ac:fa:2e:6c:4d:ad:d2:d2:2d:
ad:a9:93:4b:78:ee:7d:65:b4:64:63:fe:1c:ad:77:
8e:6f:87:7d:33:af:5b:09:e3:18:9b:76:53:25:93:
e9:b5:e0:a3:39:34:f4:d6:e0:95:0e:03:20:c8:e6:
77:c0:70:39:8b:3c:b9:78:cc:a5:fe:ce:b6:0c:7d:
26:14:76:64:e4:24:a4:e0:5a:9a:e4:1a:13:b5:0c:
5e:fc:7a:06:22:ce:20:4b:b5:ec:76:2c:c4:91:3a:
da:86:5d:0d:a3:21:85:9d:22:ba:fa:dd:a9:36:47:
df:0e:96:cb:e3:c6:d6:ca:cb:08:4d:ca:a5:fa:5b:
f3:9a:63:9d:5b:df:b1:23:8a:e1:09:e0:34:32:ff:
4b:af:64:ef:a4:e4:93:38:f5:04:74:23:b0:c6:7f:
02:52:4f:34:c6:4a:33:af:3c:10:bf:8b:c5:62:72:
37:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:45:2A:AC:CF:56:6A:12:CF:9E:91:60:7B:08:57:6D:F1:F7:6D:93
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8c:a9:d8:f8:e3:71:4e:87:56:88:99:cb:57:6b:1e:ce:e5:
77:89:aa:06:f3:f6:86:d0:47:cd:b6:63:1f:0f:66:75:93:16:
36:e2:3d:53:2d:d2:7f:8e:13:6c:ae:08:98:86:ac:22:31:2c:
1a:dc:15:ed:ed:6c:50:a6:5e:31:41:da:83:3e:00:f8:b0:e5:
f7:8c:49:2b:49:16:95:7a:3e:9b:43:8f:08:8d:44:d1:18:2f:
b9:1c:34:72:3c:68:6d:0d:9f:84:3f:f5:6a:49:eb:c2:d9:82:
6e:34:11:2d:b2:c4:30:48:4d:c7:82:4e:7d:5f:38:67:a0:ed:
b7:1b:d7:8d:00:1a:56:f8:21:18:4a:9a:d8:20:61:ad:ad:19:
3c:aa:ce:3e:11:47:59:68:48:19:39:1a:6d:79:28:c4:1c:69:
51:96:e7:c4:8c:2a:7f:f5:13:81:f8:59:1e:5c:d3:65:71:ac:
26:0c:ef:de:2a:7a:18:90:df:d7:ce:1a:9c:6f:17:3e:79:49:
a3:17:71:b2:af:13:4e:76:46:a6:7e:c8:2f:34:7b:7c:05:9d:
7c:f4:45:51:03:53:7f:b4:c3:8e:37:5e:05:cf:82:ed:04:38:
a7:fe:e8:1f:fe:1e:81:0a:ca:ad:ba:03:3c:43:c2:41:e5:49:
3b:64:f3:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Zel7Bt0KuOWSZ3qXsm/1nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZTM5YjQxMDc0YzdkNmFkYzhlZTI3NGUyMzlmN2I4ZWIz
NTg1ZTkwHhcNMjYwNjMwMTcwMTE3WhcNMjYwNzAxMTcwMTE3WjAzMTEwLwYDVQQD
EyhmZDQ1MmFhY2NmNTY2YTEyY2Y5ZTkxNjA3YjA4NTc2ZGYxZjc2ZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcJq9DB6nc1WfGU+jQi0j1V1qO+h
iUcjdjqR34oTH1QKvfH2x8OzffoWcLH6mqTtTt6h2zmjpuL2ODI0BfS3p6dCDVu0
+BUw5T0PRtby9t2s+i5sTa3S0i2tqZNLeO59ZbRkY/4crXeOb4d9M69bCeMYm3ZT
JZPpteCjOTT01uCVDgMgyOZ3wHA5izy5eMyl/s62DH0mFHZk5CSk4Fqa5BoTtQxe
/HoGIs4gS7XsdizEkTrahl0NoyGFnSK6+t2pNkffDpbL48bWyssITcql+lvzmmOd
W9+xI4rhCeA0Mv9Lr2TvpOSTOPUEdCOwxn8CUk80xkozrzwQv4vFYnI3pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1FKqzPVmoSz56RYHsIV23x922TMB8GA1UdIwQY
MBaAFA/jm0EHTH1q3I7idOI597jrNYXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xM2VhMWYtMGJjMS00NTdjLThhYjUt
MDRlODEyZDQ4ZTcyLzEvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8xM2VhMWYtMGJjMS00NTdjLThhYjUtMDRlODEyZDQ4ZTcy
LzEvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4yp2Pjj
cU6HVoiZy1drHs7ld4mqBvP2htBHzbZjHw9mdZMWNuI9Uy3Sf44TbK4ImIasIjEs
GtwV7e1sUKZeMUHagz4A+LDl94xJK0kWlXo+m0OPCI1E0RgvuRw0cjxobQ2fhD/1
aknrwtmCbjQRLbLEMEhNx4JOfV84Z6DttxvXjQAaVvghGEqa2CBhra0ZPKrOPhFH
WWhIGTkabXkoxBxpUZbnxIwqf/UTgfhZHlzTZXGsJgzv3ip6GJDf184anG8XPnlJ
oxdxsq8TTnZGpn7ILzR7fAWdfPRFUQNTf7TDjjdeBc+C7QQ4p/7oH/4egQrKrboD
PEPCQeVJO2Tzew==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:42 2026 by rpki-client