Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
File: obkUGttOyjUXWjwq291dU5h1PUw.mft (raw, json)
Hash identifier: 98yn5lehbzLoj042V6Q0QVPtga+rMCB2FJuMUv5kRjw=
Subject key identifier: 0A:A8:1F:04:54:B8:63:20:B4:9A:E5:3A:14:48:DF:46:F9:B3:0D:03
Authority key identifier: A1:B9:14:1A:DB:4E:CA:35:17:5A:3C:2A:DB:DD:5D:53:98:75:3D:4C
Certificate issuer: /CN=a1b9141adb4eca35175a3c2adbdd5d5398753d4c
Certificate serial: 01A067CA3F4C3A8D15271EB6B8FB3CF36372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obkUGttOyjUXWjwq291dU5h1PUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
Manifest number: AF
Signing time: Thu 03 Sep 2026 15:01:42 +0000
Manifest this update: Thu 03 Sep 2026 15:01:42 +0000
Manifest next update: Fri 04 Sep 2026 15:01:42 +0000
Files and hashes: 1: 7AMox4S4nEHhmpbXvGZbnJYK6vY.roa (hash: GwF5AtnzW8V2jba5G+d/080MoYMx9miVmeYXvE5ydYs=)
2: obkUGttOyjUXWjwq291dU5h1PUw.crl (hash: URQAcptCD8cfGejSs+1qhB61/nrsX3OyN1DPaHMUKrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/obkUGttOyjUXWjwq291dU5h1PUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:ca:3f:4c:3a:8d:15:27:1e:b6:b8:fb:3c:f3:63:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b9141adb4eca35175a3c2adbdd5d5398753d4c
Validity
Not Before: Sep 3 15:01:42 2026 GMT
Not After : Sep 4 15:01:42 2026 GMT
Subject: CN=0aa81f0454b86320b49ae53a1448df46f9b30d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9f:dc:83:c8:57:ee:42:39:1d:e5:9f:9d:bd:
cd:08:fc:7d:75:0c:6a:5e:59:c1:ae:94:f3:8a:6a:
f8:04:ef:19:78:a3:22:88:a3:e7:54:a7:56:6b:02:
ab:5e:1f:f1:34:09:a1:0d:4c:6b:6a:d9:30:d8:36:
c3:1b:61:00:40:fb:89:90:c6:a9:db:b9:35:66:44:
19:ae:90:ad:a1:fa:45:af:c6:02:96:fe:ae:15:cf:
ed:16:ed:55:b4:11:fe:e4:0d:08:30:3e:55:e5:4f:
9c:e5:bd:bf:63:8c:12:fd:eb:71:63:61:48:de:ad:
40:74:56:e7:7e:c6:20:ce:94:25:df:85:80:26:dd:
58:bb:47:ee:c7:32:9b:c2:98:87:8c:63:cf:e3:32:
56:7b:a4:f9:d0:aa:32:dc:aa:17:ea:71:c0:26:e1:
f5:c8:40:a2:8f:d1:c4:8e:91:6d:27:0a:ef:f1:17:
59:ec:1d:14:46:c4:14:09:b4:08:fa:8e:cc:80:ea:
84:14:fe:65:5d:75:d0:8b:19:a5:ba:55:4a:31:4a:
1d:7c:bf:d2:b1:a8:4d:18:2b:30:13:4b:be:99:fb:
05:2a:71:04:28:da:e3:48:47:33:f8:08:9a:8c:3e:
65:5d:77:99:e5:0b:1e:28:b6:05:73:fd:d8:09:9a:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A8:1F:04:54:B8:63:20:B4:9A:E5:3A:14:48:DF:46:F9:B3:0D:03
X509v3 Authority Key Identifier:
keyid:A1:B9:14:1A:DB:4E:CA:35:17:5A:3C:2A:DB:DD:5D:53:98:75:3D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obkUGttOyjUXWjwq291dU5h1PUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5d:67:5b:a1:b1:d4:6d:1c:c2:02:90:38:b1:1f:2f:e9:bb:
bb:03:8f:dc:df:47:95:cb:62:47:bb:f9:70:8e:e2:59:2d:2b:
e0:59:50:41:2a:87:52:66:0c:00:3f:cf:0a:e4:22:62:c1:92:
fd:03:2c:db:f3:8f:f5:7a:9d:06:cd:07:c6:fe:8f:14:6d:ad:
3d:a5:d0:fe:06:01:c1:13:26:ff:8f:55:ca:36:ac:fb:4a:65:
06:87:47:a0:62:7c:ab:a5:14:cd:dc:c9:a1:cf:2c:ca:93:dc:
75:15:ba:e5:68:1b:aa:9c:5a:84:f5:12:36:10:12:55:fb:ce:
38:56:75:8a:0a:fa:4c:56:ba:ad:9c:14:98:31:00:9a:88:8b:
bf:66:6f:22:5f:36:28:12:77:de:c5:cb:60:c9:b5:2c:9b:7c:
89:05:28:c5:dd:93:18:f6:31:d2:48:3a:e4:aa:66:cd:c2:a2:
62:25:b1:08:45:26:57:2c:e4:c8:ec:28:0c:47:de:31:c9:f9:
c0:34:73:81:e3:e6:01:6f:ff:3a:e6:89:3a:7f:4c:02:33:e9:
d8:95:10:71:33:bb:ee:f3:75:14:8d:c6:e2:12:a1:50:fc:af:
f5:05:49:73:a1:0a:25:0c:08:e1:30:72:f9:f3:83:51:1f:b8:
ef:84:38:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:21:57 2026 by rpki-client