Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
File: D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json)
Hash identifier: 9co5ZSBDSD17Ubda3fIT2WrQc49zZDxvhixbmn3EIm0=
Subject key identifier: 28:26:73:45:B9:39:C4:FA:6C:86:D2:81:06:AD:B1:68:CC:F0:48:D1
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 019D37C0A424C91AA6CB0ADEBD4E9F75C1F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
Manifest number: 1790
Signing time: Sun 29 Mar 2026 04:01:04 +0000
Manifest this update: Sun 29 Mar 2026 04:01:04 +0000
Manifest next update: Mon 30 Mar 2026 04:01:04 +0000
Files and hashes: 1: 2og3dcAu_OJTWY5ClPmlGnRIzwU.roa (hash: 74PsLs5h39Lm9vcmo+PFlNAnhQ4jBPxcvEsxXUafgh4=)
2: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: p5qbGityyERWFxymYT1BJTXseVHfnxxPyQR5X10WitU=)
3: IoieNHiG8u34Xaf6cZuwExSjHiY.roa (hash: 6TOHj18/V3jeZNm1eBZWledHoUVLVjMzbsE5Bn+ZcQo=)
4: VEt141JORS4uXfTBqMEFS8dl95o.roa (hash: 1ZDnuppObmQPK0jPoDm6JuqwCFlMwWQBs72wZZg4jts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:a4:24:c9:1a:a6:cb:0a:de:bd:4e:9f:75:c1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Mar 29 04:01:04 2026 GMT
Not After : Mar 30 04:01:04 2026 GMT
Subject: CN=28267345b939c4fa6c86d28106adb168ccf048d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f5:2c:a3:7c:52:f3:82:6f:eb:eb:43:f4:8d:
13:70:f9:76:4f:30:b8:a0:82:0f:a5:06:8c:82:99:
84:b1:5f:9d:52:2b:f0:27:b2:61:97:87:e0:b6:38:
16:c4:b7:0c:f2:d0:a9:23:8d:fd:37:e9:df:1b:05:
ec:48:63:0b:24:17:d5:d7:7f:01:d5:c0:c8:b0:2d:
0e:39:11:d1:5b:27:ce:16:88:e3:01:f2:1a:35:13:
31:c8:33:9b:fe:2e:cf:57:a2:46:15:0f:00:f8:11:
e1:64:86:a9:17:cb:b7:1e:58:95:22:89:7b:2c:fa:
d0:a8:0f:35:36:31:a4:23:a5:20:29:1e:7a:da:f6:
78:0a:f0:17:f3:4f:40:dd:7c:81:09:36:39:62:e8:
bd:b4:13:c2:c9:be:de:a9:e1:a2:0d:77:55:d3:8c:
5c:3e:13:27:1d:4c:ef:93:e7:83:f6:20:04:a1:66:
c6:f0:8b:de:30:e1:0f:ca:b5:4a:90:ee:42:ab:f7:
9a:ee:d9:e6:ce:28:ab:dc:4a:39:73:8d:de:6d:63:
5d:92:60:87:8f:d1:6b:7d:18:6c:98:b3:a3:40:2b:
e5:b1:52:c3:6e:d6:fb:ca:c9:f8:09:ea:36:fc:a2:
77:26:67:a2:ea:fc:38:f7:52:67:1f:4b:3d:83:6f:
84:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:26:73:45:B9:39:C4:FA:6C:86:D2:81:06:AD:B1:68:CC:F0:48:D1
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c1:8e:f1:ff:4a:3d:97:86:a1:d4:81:72:83:d3:3c:23:44:
4b:2f:9d:30:b2:c1:7d:0b:90:06:4e:06:40:ce:3d:89:29:3b:
d0:18:01:36:86:89:64:bf:72:66:e0:06:8d:45:cf:49:d3:c3:
83:5f:de:ab:60:4d:a4:7e:7e:f9:22:a9:d8:8c:ef:86:2c:28:
10:17:97:ee:d7:24:41:be:03:2d:74:76:72:9e:48:5c:73:b8:
bc:b8:72:8f:b4:0e:27:ed:f6:dc:86:2d:2a:17:7d:cf:74:84:
b0:10:ee:dd:85:71:5d:e9:bd:4a:82:8b:e8:1b:09:1f:3f:85:
c6:4e:ae:0f:05:5c:42:87:2b:93:a0:fc:ae:33:f7:e3:cb:49:
de:92:86:7f:d6:44:d0:1c:3e:55:f5:47:60:ee:53:bb:29:6b:
20:21:4d:67:5d:a5:72:3c:93:32:b0:87:c3:ba:ec:1f:a5:12:
8a:54:b7:92:09:93:30:49:16:b2:a6:0f:59:a4:a2:28:1e:90:
0d:30:84:44:21:8d:d5:af:15:db:b6:28:9b:4b:89:6c:0b:1a:
b1:c3:93:1c:ad:ab:c0:ff:fd:0f:03:f7:b8:ea:eb:be:da:07:
6f:39:36:7f:be:02:a4:14:ee:80:a5:04:b1:5a:06:ea:75:b0:
00:2f:91:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wKQkyRqmywrevU6fdcH3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZTM5YjQxMDc0YzdkNmFkYzhlZTI3NGUyMzlmN2I4ZWIz
NTg1ZTkwHhcNMjYwMzI5MDQwMTA0WhcNMjYwMzMwMDQwMTA0WjAzMTEwLwYDVQQD
EygyODI2NzM0NWI5MzljNGZhNmM4NmQyODEwNmFkYjE2OGNjZjA0OGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PUso3xS84Jv6+tD9I0TcPl2TzC4
oIIPpQaMgpmEsV+dUivwJ7Jhl4fgtjgWxLcM8tCpI439N+nfGwXsSGMLJBfV138B
1cDIsC0OORHRWyfOFojjAfIaNRMxyDOb/i7PV6JGFQ8A+BHhZIapF8u3HliVIol7
LPrQqA81NjGkI6UgKR562vZ4CvAX809A3XyBCTY5Yui9tBPCyb7eqeGiDXdV04xc
PhMnHUzvk+eD9iAEoWbG8IveMOEPyrVKkO5Cq/ea7tnmziir3Eo5c43ebWNdkmCH
j9FrfRhsmLOjQCvlsVLDbtb7ysn4Ceo2/KJ3Jmei6vw491JnH0s9g2+EywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgmc0W5OcT6bIbSgQatsWjM8EjRMB8GA1UdIwQY
MBaAFA/jm0EHTH1q3I7idOI597jrNYXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xM2VhMWYtMGJjMS00NTdjLThhYjUt
MDRlODEyZDQ4ZTcyLzEvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8xM2VhMWYtMGJjMS00NTdjLThhYjUtMDRlODEyZDQ4ZTcy
LzEvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMGO8f9K
PZeGodSBcoPTPCNESy+dMLLBfQuQBk4GQM49iSk70BgBNoaJZL9yZuAGjUXPSdPD
g1/eq2BNpH5++SKp2IzvhiwoEBeX7tckQb4DLXR2cp5IXHO4vLhyj7QOJ+323IYt
Khd9z3SEsBDu3YVxXem9SoKL6BsJHz+Fxk6uDwVcQocrk6D8rjP348tJ3pKGf9ZE
0Bw+VfVHYO5TuylrICFNZ12lcjyTMrCHw7rsH6USilS3kgmTMEkWsqYPWaSiKB6Q
DTCERCGN1a8V27Yom0uJbAsascOTHK2rwP/9DwP3uOrrvtoHbzk2f74CpBTugKUE
sVoG6nWwAC+R9w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:42 2026 by rpki-client