Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
File: obkUGttOyjUXWjwq291dU5h1PUw.mft (raw, json)
Hash identifier: SJa6cRKm/8Rbfz3rpTbtM2/HmQyyjIXKWhe2tElAE9o=
Subject key identifier: E7:B5:D5:91:DD:1C:11:9F:B8:A9:4E:66:63:67:3C:27:C2:75:51:33
Authority key identifier: A1:B9:14:1A:DB:4E:CA:35:17:5A:3C:2A:DB:DD:5D:53:98:75:3D:4C
Certificate issuer: /CN=a1b9141adb4eca35175a3c2adbdd5d5398753d4c
Certificate serial: 01A17816347FA7CC9D63EC26BDF9C1817C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obkUGttOyjUXWjwq291dU5h1PUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
Manifest number: 013C
Signing time: Mon 26 Oct 2026 12:01:23 +0000
Manifest this update: Mon 26 Oct 2026 12:01:23 +0000
Manifest next update: Tue 27 Oct 2026 12:01:23 +0000
Files and hashes: 1: 7AMox4S4nEHhmpbXvGZbnJYK6vY.roa (hash: GwF5AtnzW8V2jba5G+d/080MoYMx9miVmeYXvE5ydYs=)
2: obkUGttOyjUXWjwq291dU5h1PUw.crl (hash: BGAo5Xg0Q8WpgeqKtaoOhXCGDNwHg08Hd5zaelQ7T0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/obkUGttOyjUXWjwq291dU5h1PUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:16:34:7f:a7:cc:9d:63:ec:26:bd:f9:c1:81:7c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b9141adb4eca35175a3c2adbdd5d5398753d4c
Validity
Not Before: Oct 26 12:01:23 2026 GMT
Not After : Oct 27 12:01:23 2026 GMT
Subject: CN=e7b5d591dd1c119fb8a94e6663673c27c2755133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:44:15:9f:ba:ef:5c:49:96:15:82:8e:cd:
30:2f:e6:de:2d:50:36:eb:2d:81:fb:2a:71:3d:9b:
a6:7f:bf:fd:da:d6:4b:53:89:61:e5:49:a0:e3:df:
12:0d:7c:5a:99:d0:0f:fd:9c:52:44:f5:7f:3f:7b:
8a:2d:62:f5:ff:bd:32:19:a7:09:da:cf:72:79:fc:
8c:d1:13:8d:21:25:0f:ec:f7:f5:56:d7:4b:d1:26:
bc:0e:08:69:67:6c:f9:67:c3:93:02:8c:6c:c2:57:
1c:89:a8:0f:2d:c2:8e:e5:6f:c6:cd:01:72:1d:3d:
d8:7e:44:a8:78:81:79:af:73:2a:77:bc:56:ba:07:
4d:12:8f:aa:ef:92:61:10:35:c6:0a:40:17:6e:8e:
bf:c0:63:a5:e5:15:76:05:dd:a3:1a:86:a8:04:df:
98:a8:63:8a:e4:c3:52:54:c8:a1:32:72:67:3e:29:
d2:63:e7:d1:7b:7d:31:50:f3:5a:a3:3f:30:a5:e9:
25:c9:ad:f9:f1:7a:40:16:87:d1:e0:8e:55:3e:07:
80:31:67:6b:07:99:8b:04:cd:10:57:11:5b:f1:e3:
f5:ec:93:d8:64:81:30:2b:a3:2e:08:5f:3c:82:f2:
be:23:55:64:d2:da:84:54:b6:07:2b:bd:5c:44:e9:
37:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B5:D5:91:DD:1C:11:9F:B8:A9:4E:66:63:67:3C:27:C2:75:51:33
X509v3 Authority Key Identifier:
keyid:A1:B9:14:1A:DB:4E:CA:35:17:5A:3C:2A:DB:DD:5D:53:98:75:3D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obkUGttOyjUXWjwq291dU5h1PUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:81:62:73:c9:a8:3d:9d:c0:99:a8:ab:cb:8f:79:ed:82:5c:
32:ae:4d:32:d9:28:99:dc:7f:ae:6f:c4:13:99:bf:58:cb:75:
c3:e8:da:de:7a:02:f0:91:08:44:4b:ad:dd:2f:e8:f3:18:96:
f6:fe:32:2a:24:74:f7:8f:66:75:07:89:34:c8:f8:7a:76:85:
de:bd:86:11:0c:9a:75:f1:37:79:b6:56:52:ab:da:d2:56:fd:
7d:8e:42:d8:28:29:30:8e:9a:b9:67:97:5a:dd:c6:07:31:ba:
bc:40:e1:b9:5f:71:4b:2f:fe:9f:34:bc:6e:6e:ea:df:5d:4f:
59:ea:a6:53:52:0d:9f:69:73:62:14:35:ed:ec:af:77:0c:d9:
1c:30:f8:19:ae:43:74:b7:3a:b8:2e:69:16:0d:cd:dc:a7:a2:
e7:46:ca:24:8b:96:51:02:69:1e:b8:37:cb:dd:8b:70:8e:31:
40:aa:f5:41:1a:6b:2b:9c:8d:d6:c9:c6:3b:a6:68:91:da:18:
33:45:a7:3d:ab:f6:3b:6d:aa:5e:ff:fa:53:f5:1b:4c:6a:b4:
0d:1f:a4:6f:e0:a3:7b:53:5d:32:73:14:85:d6:00:63:e4:d2:
d9:23:f0:5f:2b:37:70:b1:a1:16:d5:a7:8d:ba:85:3c:8a:51:
f0:75:c9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:13 2026 by rpki-client