Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
File: obTdg_xezSEPT2hPtr9A-zFg2yE.mft (raw, json)
Hash identifier: +N8IfewlSLHP8Vdan1lcdtyl8dFsiZwE7lH6+r/FNx8=
Subject key identifier: 81:22:22:D3:A9:75:76:A2:F3:84:42:15:A0:4B:E0:AE:23:73:72:E2
Authority key identifier: A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
Certificate issuer: /CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Certificate serial: 019CAA9017AABFEFCDF1E955A6BA17ABA985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
Manifest number: 168D
Signing time: Sun 01 Mar 2026 18:01:35 +0000
Manifest this update: Sun 01 Mar 2026 18:01:35 +0000
Manifest next update: Mon 02 Mar 2026 18:01:35 +0000
Files and hashes: 1: dBabbU_-55VgkgCDNbAuPVfiCeE.roa (hash: qiqQK8VaMW7uW5BkkgRu/GeJE6DlW/Q47O03oOWKZIA=)
2: obTdg_xezSEPT2hPtr9A-zFg2yE.crl (hash: /OCpF+K0wTsbUUPDYcGD1C02uKLmwXuvkq1k3QoFYTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:17:aa:bf:ef:cd:f1:e9:55:a6:ba:17:ab:a9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Validity
Not Before: Mar 1 18:01:35 2026 GMT
Not After : Mar 2 18:01:35 2026 GMT
Subject: CN=812222d3a97576a2f3844215a04be0ae237372e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9e:d6:88:de:4d:9d:0c:4e:a3:9e:ca:0f:5a:
eb:51:32:a3:33:62:87:6e:6d:cc:56:dc:9e:99:74:
f0:7a:0e:5c:0a:6f:d8:ef:c6:44:ac:36:d3:90:8e:
52:0d:e3:72:df:ba:52:c1:ac:80:ac:32:d6:f9:cb:
6c:85:fb:d4:dd:68:53:b3:53:40:85:8f:72:6d:ce:
78:0d:56:4c:02:6d:61:e9:7f:95:74:b8:ba:15:97:
13:29:79:1a:12:94:56:f5:bd:64:6d:c9:3a:c8:83:
84:8f:a9:ee:d5:3e:60:4e:c6:a3:df:9d:c6:fd:cd:
10:f9:e2:89:1a:ae:9a:f1:90:d1:5e:9f:9a:24:38:
f7:ee:dd:b3:17:83:c3:bf:70:72:c2:14:1b:7c:f4:
4b:69:3e:96:f7:20:09:e4:c0:4c:cd:2c:ae:7d:f8:
f0:4d:03:c0:84:27:3d:e9:e7:59:25:e7:a8:15:a6:
09:ea:0b:4d:d1:40:c4:fd:71:ad:9b:07:a4:75:b3:
ce:b9:99:2b:a9:c9:37:29:a2:af:0d:2c:98:66:3e:
f0:cf:ae:0b:e9:5b:37:8c:a9:9f:ad:5a:77:48:1e:
8a:51:cb:10:e1:76:d1:f4:c7:d5:a4:db:1b:a5:fe:
f0:a4:48:d9:eb:51:32:d3:39:ef:34:a5:22:1f:0f:
83:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:22:22:D3:A9:75:76:A2:F3:84:42:15:A0:4B:E0:AE:23:73:72:E2
X509v3 Authority Key Identifier:
keyid:A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6a:db:26:96:f2:b9:64:dc:21:40:e3:3e:e9:e8:eb:4c:9e:
62:c7:2d:4f:0e:ed:bd:c8:a9:11:9f:d1:e1:e2:a8:58:cd:d2:
85:d4:b8:6f:32:77:d9:c5:3f:21:ee:8c:e8:fe:e3:19:fc:5d:
a7:bd:ea:23:00:b9:35:a3:1a:e7:50:b0:2f:f0:fc:1a:81:38:
e6:70:28:2c:e2:56:ab:f3:72:a0:38:3a:a2:89:c5:45:e7:22:
58:1f:86:27:67:f1:37:38:c0:9f:af:2c:f1:b2:82:24:79:48:
02:e8:bf:aa:eb:d6:d4:bc:c1:cf:bc:f4:88:10:4b:35:ff:2a:
47:9b:97:47:7a:44:68:e4:34:f4:b4:7f:93:fd:e8:b6:e1:e4:
85:41:43:f1:14:ec:69:d8:b1:6c:43:ad:a3:78:ac:73:5a:d8:
ad:90:9e:bc:73:4b:8c:f5:80:cf:ba:c1:5a:b9:37:86:c8:c5:
d4:7b:04:f0:16:a2:b0:cf:1c:0b:0c:05:b2:61:25:c6:9b:2a:
12:e2:35:ff:8b:d0:9c:f0:06:1c:61:89:cc:4b:59:d9:e6:58:
21:81:67:7b:8a:2e:02:b3:ca:82:b4:a2:29:a2:9e:49:72:1e:
98:3a:ac:63:b1:16:ed:62:43:90:1f:97:4c:5b:7a:4c:aa:23:
a4:01:b4:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqkBeqv+/N8elVproXq6mFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjRkZDgzZmM1ZWNkMjEwZjRmNjg0ZmI2YmY0MGZiMzE2
MGRiMjEwHhcNMjYwMzAxMTgwMTM1WhcNMjYwMzAyMTgwMTM1WjAzMTEwLwYDVQQD
Eyg4MTIyMjJkM2E5NzU3NmEyZjM4NDQyMTVhMDRiZTBhZTIzNzM3MmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ7WiN5NnQxOo57KD1rrUTKjM2KH
bm3MVtyemXTweg5cCm/Y78ZErDbTkI5SDeNy37pSwayArDLW+ctshfvU3WhTs1NA
hY9ybc54DVZMAm1h6X+VdLi6FZcTKXkaEpRW9b1kbck6yIOEj6nu1T5gTsaj353G
/c0Q+eKJGq6a8ZDRXp+aJDj37t2zF4PDv3BywhQbfPRLaT6W9yAJ5MBMzSyuffjw
TQPAhCc96edZJeeoFaYJ6gtN0UDE/XGtmwekdbPOuZkrqck3KaKvDSyYZj7wz64L
6Vs3jKmfrVp3SB6KUcsQ4XbR9MfVpNsbpf7wpEjZ61Ey0znvNKUiHw+DbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEiItOpdXai84RCFaBL4K4jc3LiMB8GA1UdIwQY
MBaAFKG03YP8Xs0hD09oT7a/QPsxYNshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JUZGdfeGV6U0VQVDJoUHRyOUEtekZnMnlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xNDZmOGEtZTA2OC00OGNhLWEzODgt
ZmIxODZiOTQzMzRmLzEvb2JUZGdfeGV6U0VQVDJoUHRyOUEtekZnMnlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xNDZmOGEtZTA2OC00OGNhLWEzODgtZmIxODZiOTQzMzRm
LzEvb2JUZGdfeGV6U0VQVDJoUHRyOUEtekZnMnlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2rbJpby
uWTcIUDjPuno60yeYsctTw7tvcipEZ/R4eKoWM3ShdS4bzJ32cU/Ie6M6P7jGfxd
p73qIwC5NaMa51CwL/D8GoE45nAoLOJWq/NyoDg6oonFReciWB+GJ2fxNzjAn68s
8bKCJHlIAui/quvW1LzBz7z0iBBLNf8qR5uXR3pEaOQ09LR/k/3otuHkhUFD8RTs
adixbEOto3isc1rYrZCevHNLjPWAz7rBWrk3hsjF1HsE8BaisM8cCwwFsmElxpsq
EuI1/4vQnPAGHGGJzEtZ2eZYIYFne4ouArPKgrSiKaKeSXIemDqsY7EW7WJDkB+X
TFt6TKojpAG0gA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:30 2026 by rpki-client