Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft
File: obUnWAWCwH8MZ29bQj57p9A0mvM.mft (raw, json)
Hash identifier: QctTVFDNOzSMuN2jnxlrOQ4TgK+tTWbShHvrsO90JVE=
Subject key identifier: D6:22:88:59:67:47:72:CD:D2:FF:36:EE:66:B6:22:D5:DB:66:D0:1D
Authority key identifier: A1:B5:27:58:05:82:C0:7F:0C:67:6F:5B:42:3E:7B:A7:D0:34:9A:F3
Certificate issuer: /CN=a1b527580582c07f0c676f5b423e7ba7d0349af3
Certificate serial: 019DD019D66EA6ED6A4741A7A3C41C5CF226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obUnWAWCwH8MZ29bQj57p9A0mvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft
Manifest number: 83
Signing time: Mon 27 Apr 2026 18:00:47 +0000
Manifest this update: Mon 27 Apr 2026 18:00:47 +0000
Manifest next update: Tue 28 Apr 2026 18:00:47 +0000
Files and hashes: 1: obUnWAWCwH8MZ29bQj57p9A0mvM.crl (hash: s+KFAxs+iKS0Olo/zEyiAlZWdqItGCczNcekYmpA6SU=)
2: t_ByAeaBQNIrFb5bhmau53EuKWA.roa (hash: AwzAqExXrWOFnUsxmRE0E2eT/V7WcGMDYvuPQOqWltg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/obUnWAWCwH8MZ29bQj57p9A0mvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:d6:6e:a6:ed:6a:47:41:a7:a3:c4:1c:5c:f2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b527580582c07f0c676f5b423e7ba7d0349af3
Validity
Not Before: Apr 27 18:00:47 2026 GMT
Not After : Apr 28 18:00:47 2026 GMT
Subject: CN=d6228859674772cdd2ff36ee66b622d5db66d01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:3d:1c:81:77:0f:81:0c:0a:8a:89:ac:6d:
d2:03:cd:b5:d2:88:92:90:01:ad:37:d9:7a:d9:88:
b3:23:db:0e:b3:89:7d:37:bb:c9:9b:23:73:21:0d:
1d:ee:ae:74:ad:42:0b:a2:b7:a7:0b:ba:51:72:7f:
00:33:9c:4e:22:67:ae:f4:36:86:c6:de:91:43:4f:
c9:46:c3:e9:01:01:72:50:eb:68:9b:e1:21:71:34:
e0:d3:60:8f:b5:22:2f:0b:33:d1:af:08:dc:fe:64:
84:9a:2c:cb:d8:f1:ea:03:3a:d0:75:b5:da:c6:a4:
8e:59:31:b2:72:29:6b:9e:49:fa:af:d6:05:de:b0:
b6:b7:ff:3d:5d:54:57:5a:4f:e6:f2:15:4b:d3:fe:
dc:3a:47:f8:81:94:0d:08:62:6b:b4:11:66:d5:56:
17:7b:d3:04:51:6d:2a:76:b5:82:0e:8c:c9:d8:06:
a9:9e:02:1c:79:ba:c4:c2:e3:33:4e:9e:dc:be:0a:
c4:fb:03:79:ef:24:66:71:13:70:b3:46:93:24:cd:
1f:02:71:ec:3d:8a:74:e3:bf:3a:30:3b:f0:bf:52:
03:68:2a:ba:6e:58:f9:fd:09:04:2b:92:78:82:f6:
8a:09:f3:20:0e:ac:90:0c:9a:2d:77:9d:3e:b8:aa:
9d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:22:88:59:67:47:72:CD:D2:FF:36:EE:66:B6:22:D5:DB:66:D0:1D
X509v3 Authority Key Identifier:
keyid:A1:B5:27:58:05:82:C0:7F:0C:67:6F:5B:42:3E:7B:A7:D0:34:9A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obUnWAWCwH8MZ29bQj57p9A0mvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6b:7d:7d:93:42:ab:d9:be:83:d5:bf:af:1c:2e:af:4c:62:
97:4b:10:89:b2:b5:cf:5f:0e:69:cf:bc:aa:3b:f2:05:af:9f:
5e:92:65:32:8e:ed:40:bd:76:81:40:e7:7d:95:f4:b1:f9:ba:
b0:97:6a:38:8b:61:49:f7:a6:2b:1b:95:5c:9a:cb:93:47:87:
b3:c2:76:31:05:18:2b:08:74:5f:cc:9e:ce:9c:a4:c3:8b:d4:
84:ef:7f:1f:6d:cc:c5:c7:fd:1f:cc:8e:a7:cc:4b:1d:1d:83:
69:a9:b6:73:ee:e9:59:61:32:69:94:40:a8:34:bc:cf:c2:c0:
da:7c:ee:38:11:95:f3:0e:1b:0b:79:b8:65:78:af:dc:45:ae:
d1:36:5a:97:5c:04:64:66:b2:94:1a:71:34:48:7f:c3:90:9f:
2c:1b:17:d8:2d:6f:0a:5c:ca:82:6b:98:8c:fd:ab:40:75:05:
ac:1a:73:c5:76:58:31:98:e1:d0:2a:2c:12:07:c0:1a:41:e6:
45:a8:50:82:9a:29:d3:b3:00:d7:4e:19:c4:02:f9:e9:e9:a2:
30:12:62:1c:fb:91:c2:48:eb:c2:6f:a0:e9:3b:c2:20:5a:30:
b4:f2:7e:c0:08:84:37:c6:1e:db:6c:b8:4a:dc:0f:57:e8:14:
7b:8a:91:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:47:23 2026 by rpki-client