Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
File: obtQVKF8yU__wrwpWhW_74qQQwo.mft (raw, json)
Hash identifier: 62kjJLDXGK11Gws3abbLj2ugUq5RQnX2Feo8UUcxMK8=
Subject key identifier: 21:73:64:AE:BC:56:12:0A:04:91:BE:B8:06:07:C7:52:24:3F:88:7B
Authority key identifier: A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A
Certificate issuer: /CN=a1bb5054a17cc94fffc2bc295a15bfef8a90430a
Certificate serial: 01A1347DFD65C0E4E2AD4F142D411B8A3405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
Manifest number: 0AB5
Signing time: Tue 13 Oct 2026 09:00:34 +0000
Manifest this update: Tue 13 Oct 2026 09:00:34 +0000
Manifest next update: Wed 14 Oct 2026 09:00:34 +0000
Files and hashes: 1: 7PC27OPKTmB0TCcSiVXYJK9WFIs.asa (hash: yw12opdZtS3FAbe5nCehts1Uh2Vll7TupGePhAN8/WY=)
2: obtQVKF8yU__wrwpWhW_74qQQwo.crl (hash: 6AOpDLyxnd8TYjmRNshAciMBQF20lkQlL5dOmLlNxHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:7d:fd:65:c0:e4:e2:ad:4f:14:2d:41:1b:8a:34:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1bb5054a17cc94fffc2bc295a15bfef8a90430a
Validity
Not Before: Oct 13 09:00:34 2026 GMT
Not After : Oct 14 09:00:34 2026 GMT
Subject: CN=217364aebc56120a0491beb80607c752243f887b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:20:9f:25:03:7f:f7:e4:cc:50:b6:1e:12:b5:
a0:9a:5f:38:18:7c:30:f0:c3:9c:ca:c3:77:e7:ea:
d4:f7:b8:0c:44:82:ad:00:b1:76:d5:e5:12:bd:d0:
c4:7b:54:a2:e4:84:a7:43:f7:5f:91:9f:70:f4:d1:
bf:3e:19:ea:96:c3:77:00:a9:3a:65:19:9e:b9:51:
fd:5f:38:9a:3d:ef:da:e4:4c:02:ac:24:2b:80:1d:
f1:ba:3e:1d:6b:57:a0:13:59:75:06:7d:43:fc:8f:
a0:ff:ae:51:fe:a3:88:4b:0a:48:a1:1b:fd:ba:c8:
5d:d4:0c:eb:dd:c3:d8:c4:80:82:8b:c7:5d:87:57:
86:8a:3e:a6:8b:a7:a1:28:91:3c:c7:6c:cb:47:2e:
9f:2f:a1:8e:c9:22:0d:34:bd:f5:61:73:46:29:47:
2e:c9:11:b2:f4:6b:01:56:90:14:35:15:b3:cf:3c:
5f:cc:bc:61:ba:76:49:08:3d:89:e6:95:cf:05:22:
27:5d:44:99:2d:a5:3a:5e:86:2e:2a:d8:f9:8c:51:
95:8b:9a:b5:60:65:b9:b0:94:11:d3:f8:c2:dd:d6:
dd:af:2c:a9:f9:34:f4:ed:f0:3c:ce:e4:47:d9:58:
45:41:3e:f9:8f:43:5d:4f:4d:34:43:87:2f:c4:47:
ca:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:73:64:AE:BC:56:12:0A:04:91:BE:B8:06:07:C7:52:24:3F:88:7B
X509v3 Authority Key Identifier:
keyid:A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5e:9d:94:c4:dc:84:a5:6e:00:f9:ec:ed:3c:95:7e:86:6d:
38:87:b8:05:3f:ba:80:e0:6f:c6:b3:18:35:49:8b:e8:7c:4e:
d5:15:d8:e8:be:d5:42:bb:d1:50:d5:19:61:f0:c5:50:0d:d3:
e8:c3:ca:82:31:9c:6c:97:dc:ed:ab:70:80:14:99:67:82:17:
74:ac:f3:b3:19:f4:b3:3a:12:c9:d0:96:17:92:98:2d:f7:b5:
2f:f4:3e:c4:b0:9d:57:d5:b5:22:b2:79:56:7e:65:25:9e:26:
95:17:ad:7f:a9:63:46:98:ca:30:2d:ad:82:bf:af:c3:b5:4b:
00:68:f0:9a:10:ab:61:78:02:0e:45:31:b3:87:04:0b:5c:6f:
ca:0b:58:fe:96:78:9b:44:fc:cc:0a:26:7b:26:79:60:ea:d2:
2b:e5:3d:ec:7b:aa:70:80:a3:e8:03:ce:12:ed:5b:38:a5:f1:
91:d3:34:e5:48:13:94:5e:fa:4f:36:9d:e6:80:65:e9:b8:c7:
f6:ec:1b:38:db:f3:1f:11:4c:b1:05:a5:4f:ae:e1:c9:f1:e5:
fc:a1:0f:55:de:8d:a8:bf:16:44:59:80:70:95:19:60:1c:3b:
f8:ad:7b:0a:59:df:54:ce:19:c3:a8:0c:9e:65:1c:a3:dc:e2:
2f:7e:83:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE0ff1lwOTirU8ULUEbijQFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYmI1MDU0YTE3Y2M5NGZmZmMyYmMyOTVhMTViZmVmOGE5
MDQzMGEwHhcNMjYxMDEzMDkwMDM0WhcNMjYxMDE0MDkwMDM0WjAzMTEwLwYDVQQD
EygyMTczNjRhZWJjNTYxMjBhMDQ5MWJlYjgwNjA3Yzc1MjI0M2Y4ODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyCfJQN/9+TMULYeErWgml84GHww
8MOcysN35+rU97gMRIKtALF21eUSvdDEe1Si5ISnQ/dfkZ9w9NG/PhnqlsN3AKk6
ZRmeuVH9XziaPe/a5EwCrCQrgB3xuj4da1egE1l1Bn1D/I+g/65R/qOISwpIoRv9
ushd1Azr3cPYxICCi8ddh1eGij6mi6ehKJE8x2zLRy6fL6GOySINNL31YXNGKUcu
yRGy9GsBVpAUNRWzzzxfzLxhunZJCD2J5pXPBSInXUSZLaU6XoYuKtj5jFGVi5q1
YGW5sJQR0/jC3dbdryyp+TT07fA8zuRH2VhFQT75j0NdT000Q4cvxEfK/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFzZK68VhIKBJG+uAYHx1IkP4h7MB8GA1UdIwQY
MBaAFKG7UFShfMlP/8K8KVoVv++KkEMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2J0UVZLRjh5VV9fd3J3cFdoV183NHFRUXdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hMzBjMTAtMWMyZC00NzhjLTljZjgt
NzIyNTVkMjQ5YzVkLzEvb2J0UVZLRjh5VV9fd3J3cFdoV183NHFRUXdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9hMzBjMTAtMWMyZC00NzhjLTljZjgtNzIyNTVkMjQ5YzVk
LzEvb2J0UVZLRjh5VV9fd3J3cFdoV183NHFRUXdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo16dlMTc
hKVuAPns7TyVfoZtOIe4BT+6gOBvxrMYNUmL6HxO1RXY6L7VQrvRUNUZYfDFUA3T
6MPKgjGcbJfc7atwgBSZZ4IXdKzzsxn0szoSydCWF5KYLfe1L/Q+xLCdV9W1IrJ5
Vn5lJZ4mlRetf6ljRpjKMC2tgr+vw7VLAGjwmhCrYXgCDkUxs4cEC1xvygtY/pZ4
m0T8zAomeyZ5YOrSK+U97HuqcICj6APOEu1bOKXxkdM05UgTlF76Tzad5oBl6bjH
9uwbONvzHxFMsQWlT67hyfHl/KEPVd6NqL8WRFmAcJUZYBw7+K17ClnfVM4Zw6gM
nmUco9ziL36DAw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 12:48:27 2026 by rpki-client