Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
File: obtQVKF8yU__wrwpWhW_74qQQwo.mft (raw, json)
Hash identifier: gXBDxL3EsFTkW+K+CTG6E9tPMU5QNs8Sak3HoXTwscM=
Subject key identifier: 45:74:D1:82:81:71:E1:60:F5:58:93:F7:24:0E:7C:27:70:24:9F:12
Authority key identifier: A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A
Certificate issuer: /CN=a1bb5054a17cc94fffc2bc295a15bfef8a90430a
Certificate serial: 01A128E7E0DBD2850FA837B11FF4C2FFE975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
Manifest number: 0AAF
Signing time: Sun 11 Oct 2026 03:00:47 +0000
Manifest this update: Sun 11 Oct 2026 03:00:47 +0000
Manifest next update: Mon 12 Oct 2026 03:00:47 +0000
Files and hashes: 1: 7PC27OPKTmB0TCcSiVXYJK9WFIs.asa (hash: yw12opdZtS3FAbe5nCehts1Uh2Vll7TupGePhAN8/WY=)
2: obtQVKF8yU__wrwpWhW_74qQQwo.crl (hash: asaPjsezi40ZQG8C4kVitlmHsHYPlKSg2nNW7odhrn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e7:e0:db:d2:85:0f:a8:37:b1:1f:f4:c2:ff:e9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1bb5054a17cc94fffc2bc295a15bfef8a90430a
Validity
Not Before: Oct 11 03:00:47 2026 GMT
Not After : Oct 12 03:00:47 2026 GMT
Subject: CN=4574d1828171e160f55893f7240e7c2770249f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:83:4e:9f:7f:89:ea:48:88:75:7e:78:d8:35:
5a:cb:3b:27:8e:7d:f4:d9:5d:d3:62:6f:ea:70:b0:
f3:f2:4c:d5:43:77:99:dc:c2:c7:c9:cc:44:46:de:
d6:3b:f5:fe:62:32:9c:be:51:ef:4b:b2:16:b7:ad:
b2:e4:52:fc:d4:b1:b3:41:99:3d:95:21:da:73:b1:
7c:a1:d6:7c:58:4d:a7:04:4a:24:bc:56:59:be:39:
1d:45:51:ec:4c:f4:4d:4f:e1:c9:d2:c4:04:f8:0c:
49:32:54:8a:a3:8b:fe:8b:9f:43:9a:e2:14:1b:04:
f4:07:c8:83:c1:51:9b:97:6e:9e:be:a0:82:4e:71:
4c:10:83:b5:c7:a8:a4:fa:07:53:12:06:a5:55:0c:
24:1d:02:79:c9:dc:70:a8:a5:56:ac:5f:5e:96:4d:
75:e6:7b:e3:3b:1d:66:a1:d9:1b:1b:57:0f:c6:f8:
eb:c7:40:91:9c:1e:0c:a4:b3:ac:c1:3e:87:94:99:
2a:7e:05:03:67:49:41:b1:07:7a:67:42:a5:44:d6:
40:e7:29:9b:ae:85:1b:a5:cd:ca:52:9f:6a:05:96:
92:b9:50:39:19:14:48:72:28:fa:0d:dd:0e:f3:fe:
33:8d:92:1a:d9:5f:d4:26:c2:b8:00:08:0a:48:e9:
eb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:74:D1:82:81:71:E1:60:F5:58:93:F7:24:0E:7C:27:70:24:9F:12
X509v3 Authority Key Identifier:
keyid:A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ab:4f:b1:1d:ff:7b:24:db:f6:32:02:62:57:ab:cf:d1:f0:
a1:24:43:9e:56:2e:e6:cf:bd:e8:6b:42:4a:e3:41:af:a3:a6:
ef:56:92:c6:fc:cc:04:50:40:cc:3a:5d:a7:8c:67:d0:b5:32:
bd:a1:00:f4:e2:12:d5:33:01:75:d2:4c:6b:24:f1:68:f3:a4:
e2:73:8b:c3:8f:e5:39:c2:d1:32:db:59:05:03:7b:50:e7:9e:
58:66:00:de:7d:8d:97:d6:42:39:76:22:49:cd:42:a4:6f:64:
e0:51:c3:a2:f1:89:b4:01:07:cc:1a:63:dc:00:9f:5e:3f:19:
d3:ca:14:cb:45:7f:fe:19:27:15:2d:76:ad:b0:6d:07:15:f8:
c6:39:3a:44:55:ce:b8:9f:c4:99:f8:89:fb:3e:93:03:c4:05:
eb:5e:f8:c8:06:62:5e:1a:66:2b:97:ae:50:0e:20:4b:31:89:
26:e2:ff:d4:44:d1:eb:82:2a:e4:53:44:9d:35:bf:9f:c3:e8:
e4:95:ec:a5:72:7d:8f:e4:13:e0:95:2d:cb:75:b8:fb:14:c6:
bc:c8:3a:c3:5c:50:c9:de:42:d2:5e:f6:97:9e:af:3c:9a:da:
69:81:62:26:4d:2e:82:57:1e:b6:75:60:99:9d:52:6e:3c:f7:
64:77:00:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:34:10 2026 by rpki-client