Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
File: obeZgyScHV-GGfE1xtbn43379WI.mft (raw, json)
Hash identifier: l18sOkMRmbXy31+RfB6UPbpyEM+qP3zhi7FjqfKU1b8=
Subject key identifier: 4B:B0:5C:B9:D3:25:0C:C4:F6:D7:24:C9:D9:47:FA:CC:6E:10:9B:3E
Authority key identifier: A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62
Certificate issuer: /CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562
Certificate serial: 019D38655E8DEBD2FF46418F8649006D71E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
Manifest number: 1093
Signing time: Sun 29 Mar 2026 07:01:00 +0000
Manifest this update: Sun 29 Mar 2026 07:01:00 +0000
Manifest next update: Mon 30 Mar 2026 07:01:00 +0000
Files and hashes: 1: obeZgyScHV-GGfE1xtbn43379WI.crl (hash: 7Yre7aJ1wJIi8ISYYuzC/3fs5GBryvUNUn6aPkS1Zbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:5e:8d:eb:d2:ff:46:41:8f:86:49:00:6d:71:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562
Validity
Not Before: Mar 29 07:01:00 2026 GMT
Not After : Mar 30 07:01:00 2026 GMT
Subject: CN=4bb05cb9d3250cc4f6d724c9d947facc6e109b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:79:40:08:3b:f1:b0:a7:0b:8b:fd:ed:36:
7c:72:d5:74:f5:14:1a:e2:6f:1b:90:ad:32:2e:ba:
14:b6:cf:1e:f1:0c:14:23:b1:c7:5e:8c:00:57:40:
99:d9:e4:ac:dd:b1:fa:e1:8b:01:ce:c4:a6:7c:e6:
e3:64:46:c5:2e:a9:57:9c:c0:e2:d2:b6:3a:07:ec:
00:ac:73:8f:55:b8:22:02:20:55:97:5e:f8:05:f9:
7c:df:77:dc:7b:0f:79:d7:7b:0a:cd:88:23:c4:12:
b5:9c:95:38:43:d5:4a:d4:a1:77:43:7e:dd:80:8f:
f2:50:a0:37:54:da:f8:8c:57:e3:b5:68:20:9d:2a:
1e:b0:39:c2:62:6b:e2:37:26:60:14:33:1b:5e:94:
26:a6:ec:c3:ee:f1:79:69:a3:f9:a7:70:c4:2d:a5:
b9:6f:58:70:34:e5:f7:c3:85:39:45:69:6f:fd:cd:
16:84:c4:72:19:db:d0:89:2b:6f:ce:9f:58:49:a1:
df:35:98:18:49:e8:0c:fe:a9:e5:4f:f9:b0:19:b8:
70:83:37:14:1c:cd:fc:71:46:b4:44:86:76:7d:3a:
52:2b:50:97:a4:ef:b3:aa:94:b0:ad:66:9d:25:69:
51:67:74:d0:c3:a4:3f:54:f0:73:d5:d5:3f:c5:a5:
b1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B0:5C:B9:D3:25:0C:C4:F6:D7:24:C9:D9:47:FA:CC:6E:10:9B:3E
X509v3 Authority Key Identifier:
keyid:A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:56:3c:ba:3f:6a:19:d5:2e:bd:d5:74:f6:25:64:dc:b5:af:
a0:ba:d2:2f:e7:b0:8a:69:87:db:0a:60:25:65:76:ab:f6:6b:
97:c4:46:95:f8:59:f4:8c:99:0c:7e:be:c5:c5:de:15:05:ee:
5b:84:1b:82:29:f3:b5:dc:22:6e:19:df:3d:f2:52:eb:11:08:
6e:6b:ce:3c:47:b3:6e:cb:32:97:5d:ea:09:a7:cf:69:98:5f:
f3:50:98:ac:25:13:1d:e2:bf:26:0b:21:3e:32:81:2a:0c:52:
29:a4:00:32:12:05:56:6b:90:22:11:be:4e:ba:41:75:85:4f:
a0:ce:7b:9e:bf:c7:26:00:97:f1:01:0e:53:80:d8:93:27:3a:
e8:68:44:47:2b:02:37:34:92:47:c2:46:02:68:e4:9d:1d:61:
d8:5f:b3:26:a0:96:79:d1:f9:ec:a6:62:91:14:46:c5:4c:b3:
d7:e5:31:de:40:12:6f:87:e3:62:7a:a8:be:40:0e:16:cd:de:
6a:82:62:45:f5:73:aa:bb:99:0b:c8:cd:05:8a:26:59:de:db:
47:0a:a1:85:80:b8:df:8b:6e:a6:70:02:74:fe:32:c7:fb:89:
86:52:b9:60:1f:4a:bb:57:f8:f9:1f:c4:24:7b:f5:76:ba:b2:
59:27:6c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:54 2026 by rpki-client