Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
File: obBHf50JosdPTEWegLcpr-6zEtQ.mft (raw, json)
Hash identifier: eCuSfrUTVNQ7p6LJvKS/FPC1uiDkRg3eqGQg2ROWuCI=
Subject key identifier: 2C:EA:9E:DD:D9:4A:F2:4B:8C:C3:9C:80:22:38:51:45:26:13:0E:62
Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
Certificate issuer: /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Certificate serial: 019DCF75E41CFEE48404C2ABF278E384B5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
Manifest number: 0E79
Signing time: Mon 27 Apr 2026 15:01:42 +0000
Manifest this update: Mon 27 Apr 2026 15:01:42 +0000
Manifest next update: Tue 28 Apr 2026 15:01:42 +0000
Files and hashes: 1: GcmnLhUrxsDtpi6IFcCeNgV9CNU.roa (hash: 30rGZU6mCf0D1WtNl4OSSePM1TRDWesSyIJi8OZOjqw=)
2: T9QosLBjVi3O4na1965Ec34JXvw.roa (hash: HSBCkcAnz7XfejtJRKHSAfoqFOLGJkEPluwkxCR0nhA=)
3: obBHf50JosdPTEWegLcpr-6zEtQ.crl (hash: Z0MtTrdoz762ZmciD+B7Rg4sBTJJj7WtaClKQMVAVng=)
4: z_9II5WYBoTBGZ5pgFe4r6CevAw.roa (hash: b3pynxd2lAP3NtJ8uzmF53kEH7MeotRATSOpsRAWQMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:e4:1c:fe:e4:84:04:c2:ab:f2:78:e3:84:b5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Validity
Not Before: Apr 27 15:01:42 2026 GMT
Not After : Apr 28 15:01:42 2026 GMT
Subject: CN=2cea9eddd94af24b8cc39c802238514526130e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:da:79:a7:34:e2:c2:1c:0d:5b:c9:ca:25:
9d:88:e6:e8:71:9a:48:97:42:4c:53:d8:3c:78:49:
4a:ba:95:5b:c8:fb:3a:5f:a6:74:ae:c8:0a:f5:bc:
a5:f7:dd:83:93:f9:55:d8:dd:5e:4c:50:61:77:21:
15:35:0a:1c:0d:7c:66:c7:54:6c:32:44:43:6f:8a:
1f:83:ef:a7:c2:d6:6a:39:11:b1:11:39:a4:2e:8e:
2d:4d:a6:7a:9f:7d:2d:d8:09:74:54:0e:57:14:06:
22:cf:84:50:0c:64:58:01:50:13:3f:78:d6:34:26:
39:1e:87:c6:fe:df:ec:fa:3b:59:ca:41:e2:5b:72:
8c:8a:bc:5f:0a:86:ae:6b:94:1b:ba:dd:72:82:41:
10:dd:0e:f6:cc:b1:11:bc:02:96:4d:5a:8b:56:b8:
a3:78:88:f8:4b:f7:93:3b:9e:ac:7c:b4:8f:13:1a:
0d:3e:71:cf:61:86:74:0c:1d:ca:ee:d7:80:6e:27:
ee:28:91:a0:f4:29:e3:ac:b2:2b:4b:9c:0f:1a:1b:
71:a9:af:7b:4d:a0:0d:c9:cc:73:8f:0d:ba:e2:e7:
40:1e:4b:fe:7a:79:d4:02:64:06:39:f5:c9:bd:17:
9f:c7:33:68:9e:16:de:64:2e:d5:89:b2:40:fc:25:
64:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EA:9E:DD:D9:4A:F2:4B:8C:C3:9C:80:22:38:51:45:26:13:0E:62
X509v3 Authority Key Identifier:
keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f7:24:33:6b:1c:f9:d6:b9:09:0a:c0:2d:a1:c8:68:8b:06:
2b:8d:f1:c0:82:b9:eb:30:ae:1e:ca:77:ce:e1:b0:bd:80:c3:
7e:48:3f:f1:65:0c:da:56:7f:8b:49:f4:db:8c:01:ea:49:b6:
99:44:75:d9:4f:d2:0b:78:77:a9:dd:ce:19:65:60:51:fd:61:
68:c5:92:a3:b5:e1:64:56:dd:a4:c0:af:56:09:5f:02:73:ed:
f5:84:57:9e:f2:54:8d:06:8a:fd:7a:4d:2f:03:a2:ed:af:84:
2b:2b:84:d1:6e:64:59:c3:d3:91:88:06:9e:6d:6b:26:01:7a:
2d:8a:e7:0d:1f:a1:38:62:97:a6:94:5b:1b:39:91:a1:84:63:
1b:0b:19:e4:53:9c:f8:dc:8b:e3:41:ea:99:a6:6f:ba:20:11:
08:16:f7:a4:cc:95:78:3b:e5:09:97:0d:e4:0d:00:5c:64:01:
7e:3e:be:64:05:62:d1:0f:57:dc:2c:7d:ab:2e:ce:1e:2a:bd:
3a:4a:b5:63:89:f4:13:50:42:93:9a:03:7c:52:3c:03:a3:40:
b2:fb:b6:53:11:d3:d7:ec:b5:1a:8c:00:f1:5b:ba:6b:20:ec:
5f:99:df:28:fd:59:75:9a:00:49:5c:24:92:3c:e3:20:f4:40:
4a:7e:1e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:26:17 2026 by rpki-client