Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
File: AObmXtdPBsIjqaScPqbT7uyyOFA.mft (raw, json)
Hash identifier: g9XbDySgmKF8HmMjUHxhlRja2x1s3lA58qyG1I+0pzU=
Subject key identifier: 41:E5:FE:5C:D4:3F:D6:E8:48:9A:C8:30:60:73:D5:FB:4A:0D:1B:08
Authority key identifier: 00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
Certificate issuer: /CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Certificate serial: 019D37C0EA5AC4B4617BFBBC5776BF1619D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 04:01:22 +0000
Manifest this update: Sun 29 Mar 2026 04:01:22 +0000
Manifest next update: Mon 30 Mar 2026 04:01:22 +0000
Files and hashes: 1: AObmXtdPBsIjqaScPqbT7uyyOFA.crl (hash: vYT2Yequw6sBVww1p+/YgdwA6YJN/LVwk8Fuc/qQS0o=)
2: P1a-wy-41SGB2vgjhP8VvtqZ32c.roa (hash: 8eDEG1cF3oj7ePCmIr7bInU5XFHVVJIT2TT9CuFv1Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ea:5a:c4:b4:61:7b:fb:bc:57:76:bf:16:19:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Validity
Not Before: Mar 29 04:01:22 2026 GMT
Not After : Mar 30 04:01:22 2026 GMT
Subject: CN=41e5fe5cd43fd6e8489ac8306073d5fb4a0d1b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:c6:bf:2b:68:23:33:56:41:f8:1b:dc:91:
f9:b3:45:e6:5a:83:4f:69:be:9b:62:01:53:b4:09:
df:04:f1:30:9c:f7:f0:6c:b1:a1:25:b7:c9:de:3b:
bb:26:d2:9b:54:bf:53:8f:4f:0b:fe:b0:d4:d8:42:
b9:6f:98:dd:b3:05:90:a5:c6:8b:e3:57:89:28:01:
eb:81:a1:0a:af:4e:c0:f9:ee:1a:8d:c2:6f:b7:6b:
53:88:e5:78:bb:70:1e:66:32:c8:4d:ad:b0:7c:17:
5f:dd:5e:ca:b8:77:28:17:b4:68:89:be:42:d8:82:
37:58:09:13:4b:79:05:ae:d4:46:03:58:ed:3f:1e:
91:e0:23:8e:72:35:3b:d4:bf:a7:09:5e:5d:83:b4:
36:4e:e6:90:6e:59:1b:73:2b:82:03:27:04:39:ad:
74:96:78:e6:c2:f1:0d:a9:44:b3:a4:1c:cc:11:24:
cb:db:3e:79:fb:6f:df:67:1a:36:36:96:d6:2b:6b:
d2:90:65:72:13:af:1f:7c:b7:c8:6c:47:3d:9c:31:
d5:51:18:60:b7:84:fb:ba:5e:e9:43:16:b2:9f:09:
46:6c:20:ea:a7:92:e2:11:bb:76:2a:25:f6:ff:7d:
60:a7:3a:5b:f0:5e:90:bc:d7:ac:87:c8:19:7c:cb:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E5:FE:5C:D4:3F:D6:E8:48:9A:C8:30:60:73:D5:FB:4A:0D:1B:08
X509v3 Authority Key Identifier:
keyid:00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c1:45:44:66:cf:d3:4e:b5:bc:bb:06:cf:7f:93:4f:26:17:
e8:0e:d3:14:31:5b:51:9e:1d:ea:7b:2e:df:2b:fe:d7:28:29:
41:62:07:5b:bf:3f:27:81:64:a3:7b:ad:64:05:bc:94:da:f4:
c3:e2:71:4c:09:f8:0b:48:97:d1:90:51:70:76:99:ef:37:62:
ea:e6:3f:b8:f2:8f:bd:30:52:34:49:25:a7:a3:31:b8:90:4e:
a0:fe:06:fd:f6:05:be:d8:82:b5:65:10:02:59:b6:d6:de:62:
fa:63:1e:df:05:31:ca:84:3c:c8:12:de:fe:61:7f:11:77:d7:
c2:2e:58:a4:31:c4:1c:e9:2a:80:32:ac:c7:52:ac:1b:c5:0f:
49:3e:8f:73:be:7b:d1:2d:62:3d:ef:dc:61:dc:44:ae:00:61:
97:af:93:2b:77:45:50:93:f6:de:9e:13:00:35:ce:17:82:ac:
e9:fc:86:18:07:a7:23:5b:57:3b:bd:21:a8:80:47:9e:00:64:
85:91:e0:c9:9d:34:cf:6d:56:99:08:65:3e:54:c7:81:3f:21:
52:5d:f2:d1:0f:3e:29:66:16:14:0e:32:8a:ad:e1:7f:58:45:
6d:ad:a5:48:cc:c1:4e:53:05:23:05:82:b7:85:6a:fc:7b:63:
0b:46:01:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:22 2026 by rpki-client