Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
File: obTdg_xezSEPT2hPtr9A-zFg2yE.mft (raw, json)
Hash identifier: qHs3kGmztxFXxEzKNZS8eBuWfMPRLTDSpe8nF4yWhrk=
Subject key identifier: 21:E4:61:1E:0A:59:D7:E4:26:64:00:BC:F5:55:8D:E2:75:A0:57:88
Authority key identifier: A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
Certificate issuer: /CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Certificate serial: 019D9A06F984973BE25141505E6A7AC4C4DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
Manifest number: 1709
Signing time: Fri 17 Apr 2026 06:00:41 +0000
Manifest this update: Fri 17 Apr 2026 06:00:41 +0000
Manifest next update: Sat 18 Apr 2026 06:00:41 +0000
Files and hashes: 1: dBabbU_-55VgkgCDNbAuPVfiCeE.roa (hash: qiqQK8VaMW7uW5BkkgRu/GeJE6DlW/Q47O03oOWKZIA=)
2: obTdg_xezSEPT2hPtr9A-zFg2yE.crl (hash: qbh+KjDsMXKe/W0x25ixFYxhHNw4yEIJiW7j08e8kCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:f9:84:97:3b:e2:51:41:50:5e:6a:7a:c4:c4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Validity
Not Before: Apr 17 06:00:41 2026 GMT
Not After : Apr 18 06:00:41 2026 GMT
Subject: CN=21e4611e0a59d7e4266400bcf5558de275a05788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:f2:e7:37:95:de:3d:4c:36:07:8b:f1:b4:
74:a1:52:ee:1f:ba:47:b0:72:19:52:73:88:f5:fb:
53:c8:f3:ee:d8:be:ac:0b:cf:e9:75:38:14:36:35:
20:7d:57:46:d4:05:e8:94:0e:ef:43:a5:b6:51:12:
30:f4:e2:ea:8a:38:da:cd:9a:73:a7:0c:b3:f7:71:
05:5f:ff:de:ea:82:b8:32:3f:e2:4e:fa:c1:05:79:
f0:15:b8:ad:67:82:bf:f0:b6:b1:4e:96:89:69:cc:
a7:25:23:6b:b2:4f:c9:44:cc:50:f8:78:04:6e:27:
c0:6b:bc:a7:08:4b:06:f1:99:5d:95:04:5f:a3:12:
72:e0:97:c1:9d:42:54:8c:b0:e5:a8:58:63:d7:27:
f8:f5:86:29:e1:79:0a:c4:fc:3a:b4:70:0e:d4:7f:
69:7c:0c:ff:0c:9e:00:90:67:96:06:09:f7:24:ac:
4b:25:fe:20:e6:c6:82:07:68:1a:3e:72:75:09:6c:
e7:b3:58:cb:d2:94:fd:db:d7:86:04:4f:90:3d:77:
43:92:78:cd:08:08:28:eb:13:17:e3:22:0d:65:89:
15:c5:fc:30:49:97:78:b6:de:74:6c:78:06:f7:36:
78:dd:56:13:ec:bf:24:d5:fa:8f:a5:73:d9:e5:32:
3b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E4:61:1E:0A:59:D7:E4:26:64:00:BC:F5:55:8D:E2:75:A0:57:88
X509v3 Authority Key Identifier:
keyid:A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:76:18:28:01:40:cf:28:89:32:11:d3:99:84:cf:e9:02:4b:
24:d9:e9:9f:62:fd:35:62:e4:9b:6f:86:d9:5b:9c:26:7e:93:
e4:47:a8:66:7b:da:2e:b1:48:bb:b6:0e:de:60:e5:1e:ea:38:
d2:ed:78:87:11:b8:1c:93:ae:56:93:06:6b:88:b2:40:94:e8:
d8:0f:36:be:cb:bf:b2:4f:c4:0e:94:30:66:c5:55:53:73:98:
2b:31:4e:4e:73:21:f0:fa:e5:43:ea:ed:c5:63:ba:91:6c:3b:
68:b6:02:bf:2f:86:2c:42:3c:de:f1:19:59:b4:a7:c6:76:5a:
b8:c2:ae:ec:12:6f:f2:3d:85:b6:3c:99:1f:32:5d:75:2a:02:
8d:84:6e:f1:c2:d0:f8:4a:27:01:a7:92:fe:9e:3d:51:23:7d:
83:99:1a:dc:1a:b7:8e:13:17:ea:e3:e2:66:50:73:53:1d:70:
60:e4:13:6e:9d:dd:07:32:15:aa:d0:05:4c:65:0b:0e:ea:8c:
8b:d4:47:e5:61:4c:f0:18:66:a7:27:b7:14:55:f3:f7:e8:fd:
1c:0d:2b:08:f5:26:e1:3c:54:50:07:ce:8f:aa:08:c8:45:f1:
3d:c0:0e:49:ae:47:d0:ae:84:b5:46:db:7e:ec:e3:9e:f3:68:
f5:4e:8e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:41 2026 by rpki-client