Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
File: obgXVrYRDyp1SVx0yCDg5zTuimw.mft (raw, json)
Hash identifier: BiWEObVzctfOXrX2y6IvmifjIC86CA/57a0pJMAC4pA=
Subject key identifier: 0D:95:A9:74:60:90:94:FA:08:B8:09:AD:3C:FC:9F:4D:70:46:A5:1A
Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
Certificate issuer: /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Certificate serial: 019D375314038D4CCB5897CC75F6020DDCC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
Manifest number: 0D6F
Signing time: Sun 29 Mar 2026 02:01:24 +0000
Manifest this update: Sun 29 Mar 2026 02:01:24 +0000
Manifest next update: Mon 30 Mar 2026 02:01:24 +0000
Files and hashes: 1: Lp8SvbEirw77bD6bjqTRJH9RHag.roa (hash: E4a/u2pu0/SKcHKL3Q1hBcB3nQ4uQ6kbjvNNFt2G5aE=)
2: obgXVrYRDyp1SVx0yCDg5zTuimw.crl (hash: ZpmMYb83FipCsFEDNiQG3XqugijaC9gxxa8ijkOTbzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:14:03:8d:4c:cb:58:97:cc:75:f6:02:0d:dc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Validity
Not Before: Mar 29 02:01:24 2026 GMT
Not After : Mar 30 02:01:24 2026 GMT
Subject: CN=0d95a974609094fa08b809ad3cfc9f4d7046a51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:b8:32:6e:e2:a2:f8:70:ad:bc:28:c9:78:
fb:b2:51:e3:41:7c:87:2e:6b:ad:5e:bd:ee:d9:10:
bb:f8:58:d6:53:53:08:9b:5e:ed:87:d0:3d:eb:8a:
1b:a9:4a:d6:46:4c:d0:ca:f1:86:f0:f4:c3:38:fa:
ce:eb:45:71:86:24:85:a5:ad:af:11:f9:3f:69:53:
14:00:fd:2b:10:5d:42:91:4b:5b:ee:df:09:5f:dc:
fa:98:aa:a5:ef:c5:a2:7e:3d:4a:8e:8f:ec:c4:ec:
cf:68:e7:5c:e4:1e:cc:cb:9b:d7:b4:e0:ce:fd:02:
7f:80:17:b2:7e:92:34:87:df:1e:a3:f9:02:1d:b4:
21:45:5c:50:f0:0a:ab:63:aa:94:05:e1:cc:b5:45:
2e:2b:13:92:86:6a:a2:a5:de:70:37:05:61:e8:6b:
29:9d:19:f8:97:ae:d7:5a:15:65:d2:95:7a:e6:e5:
cf:cd:b1:fc:e1:57:1e:2d:0a:ec:0c:3d:2c:95:f3:
75:e9:0c:d3:28:df:80:4d:74:40:32:ae:10:ac:18:
3f:2b:99:fd:f8:4b:c4:cb:03:e7:30:7a:48:ad:c2:
0c:38:49:c5:8c:94:05:ca:79:96:97:49:11:8a:f8:
cc:61:d2:ed:e0:60:23:fd:61:13:73:bb:ee:7b:f4:
85:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:95:A9:74:60:90:94:FA:08:B8:09:AD:3C:FC:9F:4D:70:46:A5:1A
X509v3 Authority Key Identifier:
keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:60:48:1c:aa:37:7d:be:6e:62:7b:4c:09:93:fb:29:b0:8e:
8b:19:9f:57:75:be:3a:06:90:07:ca:8e:90:d2:af:42:16:73:
34:a9:9d:c4:85:bc:1c:d9:2d:6c:3c:44:66:ea:25:df:0a:4b:
a7:7a:03:d8:61:03:d8:6f:55:09:38:97:7d:d7:42:f7:01:be:
5b:c5:b6:87:07:f8:72:10:9a:91:b1:ab:61:49:2a:67:79:6b:
28:35:3c:b4:08:c1:18:3e:5d:4c:40:a1:a3:25:7a:2f:f6:55:
0c:31:2d:64:a1:b0:84:47:73:38:87:81:b3:a7:71:12:a3:6c:
09:fe:d0:c4:d2:03:c7:57:ad:34:a1:6e:f9:5f:15:40:73:a6:
49:da:2b:d4:19:99:78:55:7c:73:7b:af:02:cb:79:34:e5:2f:
92:39:b4:af:6d:3a:ff:7f:61:2d:4d:88:49:c4:1b:03:58:dc:
59:53:bd:47:b6:38:e7:39:21:e6:8d:49:a5:e2:fb:e4:cf:9f:
1d:84:62:21:11:37:f3:4c:6d:7b:c9:96:96:75:fe:7a:7f:85:
90:8e:d7:13:78:59:e1:36:2d:83:ad:2a:03:6b:c3:f5:e5:d4:
0f:26:75:cf:ca:32:49:3f:31:63:8e:ec:cd:e7:60:6c:4f:0d:
ad:21:f5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:21 2026 by rpki-client