Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
File: OBXtD6YgyAGqqabxT2WW1-yXUKE.mft (raw, json)
Hash identifier: vRirigJedWj4lBcI+p4pJObS0TQWv/Rke+9R3C6+Mdg=
Subject key identifier: 89:D8:35:96:B3:31:79:A1:14:DB:D2:18:81:DF:C3:E9:1D:2E:E1:A6
Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Certificate serial: 01A08B31BE8646FF39DB859F0F9AD0DFF87D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 12:01:28 +0000
Manifest this update: Thu 10 Sep 2026 12:01:28 +0000
Manifest next update: Fri 11 Sep 2026 12:01:28 +0000
Files and hashes: 1: J5zzAtbu7OO84foJkjfo9mnqe4E.roa (hash: iT6yzwPu2JR2wJ7myEmKqPOSCKR+ROL2NO3QjEH64jQ=)
2: OBXtD6YgyAGqqabxT2WW1-yXUKE.crl (hash: ucS/qi7SNAVVaGfL2T5aIJQm38sKXUoiUj2gkpZBBCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:be:86:46:ff:39:db:85:9f:0f:9a:d0:df:f8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Validity
Not Before: Sep 10 12:01:28 2026 GMT
Not After : Sep 11 12:01:28 2026 GMT
Subject: CN=89d83596b33179a114dbd21881dfc3e91d2ee1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:56:f9:98:5b:1a:97:01:cf:9e:01:f5:10:36:
2e:12:c1:7d:fb:ae:d9:87:a9:47:e4:95:9d:50:1f:
75:72:d9:c7:4a:80:80:70:b2:ee:5d:06:c9:b0:31:
5f:01:e9:9a:55:39:6a:29:b1:d7:64:e0:28:c6:83:
5a:cb:15:65:98:bd:75:74:36:2d:da:06:9a:a3:dc:
16:1a:13:bd:1f:6b:e4:89:4b:f2:fa:8f:f2:18:9b:
65:50:b6:0f:03:c7:44:6d:48:3f:00:6f:b2:82:06:
c2:52:b3:af:7f:c2:e1:22:fe:1e:92:d0:86:6b:0a:
d0:e5:d8:25:3f:49:84:aa:05:33:5a:44:86:8d:fd:
08:1d:ab:92:6a:a8:d0:b7:42:2e:b4:5d:af:9e:1d:
c8:e7:15:f8:1a:cf:85:1a:0e:f9:32:02:a9:a4:8b:
dd:51:dd:af:4c:6f:3b:9c:b5:8c:42:f6:87:48:2a:
53:7c:2b:a6:55:ea:b0:26:9f:1c:b3:00:9e:07:26:
99:06:09:a8:fd:2c:54:6f:cc:21:98:f9:f4:3c:59:
06:54:7a:c6:e7:e5:d3:e9:17:59:a7:97:6a:ec:c7:
8a:6f:ee:d4:db:b9:5b:c3:fe:09:ef:7c:bb:95:d4:
a3:62:fa:c2:cb:e4:30:2b:a8:14:87:85:2c:ab:8c:
92:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D8:35:96:B3:31:79:A1:14:DB:D2:18:81:DF:C3:E9:1D:2E:E1:A6
X509v3 Authority Key Identifier:
keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b2:41:37:1d:6e:40:a6:6a:ea:54:26:9d:5c:8f:0c:82:0f:
a6:bb:68:b6:c4:a6:e0:30:4b:54:98:16:9a:13:4b:89:67:47:
a9:91:61:40:fe:28:7f:21:1a:d0:f6:1c:8b:ea:f5:c7:cd:97:
80:b5:2d:bd:e0:76:8e:94:bb:a6:1d:54:7a:8a:8c:ed:42:c8:
45:0e:05:fc:e1:82:ad:43:b9:b0:04:50:ce:06:30:58:18:24:
44:77:4f:ec:01:c0:bc:16:18:6c:00:e4:55:a4:e4:8e:dc:14:
84:00:ba:0e:3d:3e:4b:da:bf:a8:2a:dc:b1:01:6d:4c:9c:82:
7c:fb:3b:03:48:99:97:2d:56:09:12:df:cc:8f:6e:d3:3e:ca:
b9:9a:16:a0:14:07:88:3f:2c:c2:cc:48:c6:1c:82:c3:29:68:
49:37:7b:03:31:33:d6:79:ff:58:10:3f:20:ba:5a:d7:d9:1d:
31:4f:5f:dd:6c:7a:4e:dc:d7:d5:28:ea:4a:70:43:89:33:ee:
e2:a5:d2:0f:d1:47:60:69:3f:08:63:5c:76:e2:85:f3:e5:d9:
71:87:ba:ac:b7:36:05:a1:64:a8:1e:d9:20:e4:cd:cf:c6:49:
e5:a4:62:24:aa:31:d0:fb:83:ea:6d:7d:19:83:46:9d:fd:73:
71:77:9f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:38:30 2026 by rpki-client