Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
File: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft (raw, json)
Hash identifier: 3oEN5CTtxPLhXmj9CEqn5CcPdvp7K4TnJU1Hb2pbgWU=
Subject key identifier: D9:FD:C6:BA:8C:65:E2:B5:FF:93:39:56:D5:BC:EC:9E:7C:89:0E:37
Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
Certificate issuer: /CN=a018d68115dc4b730f157906b04426e599b3a8ca
Certificate serial: 01A147299D4F1B436AAB0A22D4CC16C3099F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
Manifest number: 1072
Signing time: Sat 17 Oct 2026 00:01:11 +0000
Manifest this update: Sat 17 Oct 2026 00:01:11 +0000
Manifest next update: Sun 18 Oct 2026 00:01:11 +0000
Files and hashes: 1: YNzgRRzWdr4v8acL2_mrerBZEBY.roa (hash: 0vVcOkUILWsiRv1XZ/svhufbrbQADvOSN3QtFvRS5U8=)
2: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl (hash: Ya7q90XvLpJCGgsuGANQ75pcq2uOkk8iBY4ljj1MnQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:29:9d:4f:1b:43:6a:ab:0a:22:d4:cc:16:c3:09:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca
Validity
Not Before: Oct 17 00:01:11 2026 GMT
Not After : Oct 18 00:01:11 2026 GMT
Subject: CN=d9fdc6ba8c65e2b5ff933956d5bcec9e7c890e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:32:ef:61:2b:28:9c:fb:82:bf:ba:94:6e:
ac:ed:92:4a:eb:e8:26:1a:22:95:73:a2:00:b8:31:
1f:26:45:b3:00:dc:52:73:ca:17:58:13:f3:40:c1:
9e:8d:96:20:6a:71:a2:cf:74:95:d4:72:c9:fa:a7:
fb:c1:8c:d7:09:4a:a0:6b:48:de:13:32:9e:6c:3c:
79:15:fa:f2:af:7f:b8:00:80:cc:b2:cc:80:26:30:
d9:01:5e:cc:65:b5:28:4f:0d:e3:0c:0c:cf:51:ad:
3c:29:d1:89:03:a5:07:f6:b9:e9:b5:94:56:6e:c3:
66:1a:06:cd:a0:bf:76:f5:66:40:8b:61:a0:a7:7d:
42:15:74:65:63:f8:0c:b0:d2:37:9c:ad:61:55:97:
be:d6:71:10:29:0d:63:eb:6a:8f:95:f1:b9:38:22:
7f:06:f7:b8:e3:8a:0d:59:fa:54:53:f0:ce:6b:a2:
6e:f2:6c:38:32:05:51:eb:6d:1e:95:c4:51:78:0d:
77:96:04:b8:74:cb:f1:5c:9c:88:42:42:8b:d0:9a:
54:c1:b4:8a:7c:14:ff:4e:c0:4a:48:ce:99:6b:ea:
f6:52:e4:64:a8:3a:12:f0:3e:6b:5d:38:31:6f:c0:
f4:88:be:0f:76:e8:75:f8:94:7d:04:c3:61:0d:35:
65:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FD:C6:BA:8C:65:E2:B5:FF:93:39:56:D5:BC:EC:9E:7C:89:0E:37
X509v3 Authority Key Identifier:
keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d4:36:8a:67:2e:a8:7c:50:22:41:82:1c:73:9b:6d:eb:52:
0a:e0:76:8b:6a:aa:f3:38:1a:6a:f4:a6:27:89:23:28:63:72:
32:bf:25:34:32:9b:66:5f:61:8a:0e:ed:ff:b6:b0:72:0a:13:
12:ae:0d:b8:e7:42:68:5a:65:1f:2f:a9:1d:65:96:4c:79:14:
4b:6d:6d:c4:a9:97:dd:b7:90:e3:2c:14:fb:d1:ab:bc:b0:31:
f8:af:f3:06:e2:65:53:b9:e5:32:52:f0:90:78:96:7d:7a:ab:
b6:04:51:7d:bd:49:41:40:c4:bc:d6:55:ad:55:c3:b7:d1:11:
89:6f:70:3c:ed:fd:6c:66:89:19:81:63:77:dd:e6:36:2e:bb:
d7:fd:c8:14:12:d2:15:a0:fb:ce:fe:8e:81:72:bf:bb:10:c0:
c4:99:c8:ea:28:8f:0a:ab:87:9b:d2:d8:b8:6e:1e:94:96:03:
36:84:ca:e1:ea:bd:5a:35:32:0b:72:33:1a:62:7d:32:cb:e5:
91:9e:ba:8d:fa:91:16:b7:e0:d0:2d:81:62:25:1e:99:32:de:
c7:d8:39:96:b5:b1:d3:54:10:9a:61:ea:1a:54:07:31:9b:ca:
08:d9:27:06:59:9a:93:f9:01:5a:00:a1:8c:27:33:b3:a6:08:
2b:bf:2b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:06:33 2026 by rpki-client