Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
File: OBXtD6YgyAGqqabxT2WW1-yXUKE.mft (raw, json)
Hash identifier: 6TIeCs0QM5AYjEkgcnvaId3kK2u+U1sqd++pQFb8DG4=
Subject key identifier: CD:47:A1:BB:BA:28:EB:1A:AE:CF:D5:17:22:60:2E:2C:A5:D9:3C:12
Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Certificate serial: 01A18450DBA76CDDC5C5DABFB54E634524FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
Manifest number: 1ACB
Signing time: Wed 28 Oct 2026 21:00:53 +0000
Manifest this update: Wed 28 Oct 2026 21:00:53 +0000
Manifest next update: Thu 29 Oct 2026 21:00:53 +0000
Files and hashes: 1: J5zzAtbu7OO84foJkjfo9mnqe4E.roa (hash: iT6yzwPu2JR2wJ7myEmKqPOSCKR+ROL2NO3QjEH64jQ=)
2: OBXtD6YgyAGqqabxT2WW1-yXUKE.crl (hash: SBeKkmqhqkbH974yYiUvgeCSbsemKY+7XV5VDE6Z1xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:50:db:a7:6c:dd:c5:c5:da:bf:b5:4e:63:45:24:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Validity
Not Before: Oct 28 21:00:53 2026 GMT
Not After : Oct 29 21:00:53 2026 GMT
Subject: CN=cd47a1bbba28eb1aaecfd51722602e2ca5d93c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:ba:ac:dc:39:fc:27:fd:cb:2a:9d:a6:03:
9e:70:5d:78:65:d1:8c:52:97:0a:f2:12:7e:6c:28:
9f:be:53:2d:5d:4a:0d:b3:ff:18:52:63:80:40:b2:
66:c7:71:95:f8:34:38:fb:99:5b:e0:b2:35:b0:2e:
fb:79:fc:31:de:c9:1e:4c:a4:8a:43:e7:78:74:52:
e4:66:18:7f:81:f3:dc:f0:36:8f:cb:df:10:8d:8c:
ac:31:b4:7a:55:28:25:95:47:2b:f8:41:bc:f8:ab:
e9:39:8b:75:57:f6:3a:a9:73:98:53:8f:37:25:d0:
b1:cb:40:c9:11:60:53:73:de:bd:73:fe:0a:34:8e:
32:6b:96:63:1f:4a:a9:df:be:13:2a:0b:c5:78:ab:
94:0c:8a:39:66:85:b8:30:20:e7:96:68:97:c3:d9:
f2:e9:81:e3:6f:4d:9b:76:80:14:d4:13:d9:8e:77:
58:e5:a2:a3:9e:c7:84:36:e4:0b:e9:83:24:70:99:
43:09:99:38:5b:a2:8e:b7:6b:2c:49:0d:ce:18:e5:
99:46:f8:83:b2:6e:f5:05:19:c0:48:73:f5:52:ce:
6a:8a:00:2f:d9:d5:44:36:c9:c6:27:fe:50:2c:b7:
8f:01:98:40:70:44:08:a7:03:0e:ac:01:45:26:6d:
eb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:47:A1:BB:BA:28:EB:1A:AE:CF:D5:17:22:60:2E:2C:A5:D9:3C:12
X509v3 Authority Key Identifier:
keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:dd:e5:cc:35:3d:86:37:c7:0d:36:0e:92:5d:0c:75:90:86:
54:c6:27:8e:fc:cb:1c:ad:29:c3:e5:b1:f6:f6:e8:29:82:87:
6d:c4:45:b7:9d:29:41:7e:c9:b3:5e:59:2f:2f:24:46:5d:15:
11:d2:c0:31:69:c5:b4:32:f5:99:11:27:8f:35:d4:8a:75:f6:
d7:b1:8e:32:e4:97:9b:6a:0f:b9:6d:aa:c8:2e:0d:66:b8:b0:
a9:2c:2b:1d:bd:b7:98:ef:ad:5a:3b:9c:ba:f3:84:05:bd:3b:
40:47:a5:c1:c4:4b:0e:a7:94:c0:6e:45:62:99:e8:58:48:75:
7e:ae:c1:10:f2:6f:1f:77:1e:06:ff:47:0e:44:84:4e:c2:83:
98:fa:cc:0d:e5:13:8f:91:0d:bd:4f:75:ea:5e:4e:d7:3d:2b:
ef:3a:0d:81:9b:37:11:fd:f1:22:5c:d1:c8:8b:e6:e2:33:9b:
86:82:03:f5:d2:3d:dd:c7:02:57:c4:f5:dc:4f:bd:f1:05:f5:
e5:bd:44:bc:e8:87:98:c5:8f:97:4a:08:01:eb:f7:40:49:d6:
d7:4f:0e:20:9c:72:3a:84:ae:39:70:58:3c:31:85:2c:ca:20:
87:e5:7c:0c:7b:fd:31:a8:1f:78:a8:4b:82:52:01:6a:f8:ec:
7c:12:fd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:53:10 2026 by rpki-client