Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
File: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft (raw, json)
Hash identifier: iMzjCBY/M0zCBKOlPYFr8va+squZ3u/cGSZz65i11DY=
Subject key identifier: 0B:E4:D3:04:3C:5E:4C:CF:15:26:F5:C9:EF:71:DE:EC:46:91:31:0F
Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
Certificate issuer: /CN=dce6e13e413baf381b625131e924e947843436f5
Certificate serial: 019DDDD6ABB0EB5973A0758521C73C496A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
Manifest number: 0D74
Signing time: Thu 30 Apr 2026 10:02:06 +0000
Manifest this update: Thu 30 Apr 2026 10:02:06 +0000
Manifest next update: Fri 01 May 2026 10:02:06 +0000
Files and hashes: 1: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl (hash: KfAX5Li390QrUxnA2GyfvemuwnD/G2DEGV6oZgE4tJI=)
2: WaiBRN4zqeNTstFb2Bj7FDDnj4A.roa (hash: R2F3HKnWVo0NsS1fo82XPlwTKBu5M4Ho2YxFKIfZuWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:d6:ab:b0:eb:59:73:a0:75:85:21:c7:3c:49:6a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce6e13e413baf381b625131e924e947843436f5
Validity
Not Before: Apr 30 10:02:06 2026 GMT
Not After : May 1 10:02:06 2026 GMT
Subject: CN=0be4d3043c5e4ccf1526f5c9ef71deec4691310f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:fd:a2:76:ea:19:61:dd:f1:8b:f3:45:58:
8e:ca:f8:55:78:8a:b0:f1:e0:71:a5:7f:2f:8e:1b:
e7:49:e6:eb:1b:f0:e9:73:d7:ec:b6:ed:43:50:3c:
04:9a:6b:ef:8a:a1:e5:10:99:7d:69:c1:3e:1a:24:
05:7c:5d:54:13:13:24:15:3d:3c:63:fe:b6:6d:43:
47:1a:f5:be:33:a0:d3:90:99:ca:83:36:97:bf:3e:
89:77:ef:0c:ae:e1:fc:2e:06:d4:69:a8:65:00:60:
4c:ef:1a:b1:05:85:ab:54:92:91:26:a7:44:03:e9:
7b:3f:18:00:a6:4d:33:17:62:59:d0:d8:e2:d8:5c:
5d:18:bc:f4:3e:5f:b2:41:71:c7:12:21:87:d6:f6:
e2:a5:77:97:89:e8:6c:66:7b:c2:e8:9c:9c:21:55:
11:3c:17:c5:31:d1:a1:69:e5:fe:b1:21:2f:cd:c4:
f8:ac:c5:18:77:5a:49:37:dd:b0:7a:c7:5c:28:e6:
56:c2:f3:0b:ae:30:81:e1:1c:0e:cc:77:eb:1c:b4:
bf:8e:75:4e:bd:dc:14:bd:4f:ae:1b:c4:c8:70:d7:
89:40:b9:ea:3b:e4:ba:4d:76:d5:0d:eb:d3:ae:47:
dd:ba:eb:bd:f1:73:cd:18:0c:a8:b0:77:7e:05:03:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E4:D3:04:3C:5E:4C:CF:15:26:F5:C9:EF:71:DE:EC:46:91:31:0F
X509v3 Authority Key Identifier:
keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8d:3b:e1:53:89:4a:99:c9:f0:65:8d:1f:04:38:78:3a:86:
6e:02:2b:d7:7e:4f:68:70:3e:d5:5d:8b:db:0f:e6:3c:ac:67:
66:55:ae:9e:ed:ed:de:e5:f4:61:43:5f:ec:ad:d7:16:e2:30:
ba:40:49:db:c9:a1:94:58:e2:4c:4c:5a:8a:3d:af:63:5e:77:
4c:96:9b:b3:88:59:2e:31:d8:d4:95:2b:29:1f:f9:b6:2c:b8:
7c:da:1d:3e:e0:66:97:9e:d9:d6:04:c6:23:e6:92:a8:95:0e:
0f:98:cc:14:2b:b2:57:b0:16:e4:dc:1d:c0:20:9e:3d:c7:98:
d5:ed:02:aa:80:f3:7d:f7:c6:4e:28:50:16:27:bc:55:4c:41:
2b:be:50:2f:97:d1:14:85:49:ce:e8:e2:d4:d8:76:8b:04:10:
2f:33:3c:a9:af:80:22:95:d3:8f:4d:2f:29:4e:f0:84:ff:32:
6d:52:d7:34:d5:7e:e4:49:e2:e9:3e:af:b6:15:70:13:9d:3c:
87:d8:62:8b:82:59:61:68:95:8b:56:0a:6f:ab:ca:c7:e4:38:
dd:dc:ec:ae:4b:cd:a4:94:05:ef:ad:2d:c5:a8:7c:02:ad:e2:
0c:d9:52:11:f4:5b:91:cb:79:5f:2c:38:f9:f3:c1:35:f8:06:
db:e7:41:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:46:29 2026 by rpki-client