Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
File: D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json)
Hash identifier: 4tuhvhIpXcrzPbujDqZS+s1vFDtiLiAXeDkHEXMK/DE=
Subject key identifier: FC:C1:84:11:87:AF:FB:85:7D:8C:81:23:46:9A:7C:3F:E6:12:7C:0A
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 019FAA50BA98ABD28A6E40657ED0FDF12E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
Manifest number: 18D6
Signing time: Tue 28 Jul 2026 20:00:45 +0000
Manifest this update: Tue 28 Jul 2026 20:00:45 +0000
Manifest next update: Wed 29 Jul 2026 20:00:45 +0000
Files and hashes: 1: 2og3dcAu_OJTWY5ClPmlGnRIzwU.roa (hash: 74PsLs5h39Lm9vcmo+PFlNAnhQ4jBPxcvEsxXUafgh4=)
2: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: LCm9qoRVa/qNStkf+/z7HFsrOtgTqg8IB2ib6Kq+atU=)
3: VEt141JORS4uXfTBqMEFS8dl95o.roa (hash: 1ZDnuppObmQPK0jPoDm6JuqwCFlMwWQBs72wZZg4jts=)
4: wMPJLylt1ll63S3MrW2IkHP31bY.roa (hash: WHI/AcafVWTXaJ4wP1ApO3kymuMxH23X4WRNK0MlnyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:ba:98:ab:d2:8a:6e:40:65:7e:d0:fd:f1:2e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Jul 28 20:00:45 2026 GMT
Not After : Jul 29 20:00:45 2026 GMT
Subject: CN=fcc1841187affb857d8c8123469a7c3fe6127c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e9:58:b9:bb:3c:ba:b6:af:17:db:95:66:f1:
af:a1:95:b2:5d:5b:bc:3f:a7:e1:a6:1d:eb:6f:9f:
40:3a:bc:f9:51:d6:60:ed:82:94:65:34:bd:61:27:
8d:c1:58:3f:db:5d:ed:f5:c6:4d:ad:fa:09:57:4a:
88:76:6c:59:43:63:62:23:f2:d3:08:22:71:e7:bb:
b8:02:0f:c9:3d:81:c8:92:b8:1b:a9:23:ee:f1:c1:
8b:2b:7e:2d:f9:69:10:50:26:23:1a:d3:67:b7:29:
5a:07:a5:bf:97:80:cb:ff:7a:cd:4f:bc:26:0a:38:
33:8a:2e:c9:dd:c9:5d:0c:4c:9b:83:b9:ce:76:20:
e2:1b:8a:23:b4:e5:6f:9e:ff:26:c6:25:3e:b8:5a:
71:e0:5c:48:c0:19:52:ad:73:c7:a4:1e:7a:39:e8:
b4:60:3f:1e:39:e0:cc:f2:15:30:92:88:ff:3c:82:
ac:55:53:f9:ea:c8:e6:74:b3:f4:d7:7f:06:f0:4c:
3d:23:26:50:49:6c:41:8c:ee:5f:10:a9:73:bd:4c:
83:42:a1:bf:9a:3f:1a:09:4c:60:cc:4b:4a:1d:94:
3b:d5:3a:08:82:63:46:16:aa:58:0d:b4:10:6c:35:
88:a9:54:35:b6:1c:b1:ba:4e:68:85:9d:4c:67:b7:
19:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C1:84:11:87:AF:FB:85:7D:8C:81:23:46:9A:7C:3F:E6:12:7C:0A
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1a:41:5c:1c:03:58:ba:4f:2e:ea:e2:f2:b5:ee:dd:19:b0:
6a:5d:5b:85:93:36:8b:15:33:01:7f:89:71:a8:45:1a:28:54:
9b:e9:17:2d:c2:45:be:ac:b8:68:50:c9:11:77:c2:62:a1:62:
7b:74:4f:b1:32:d3:a4:12:66:98:d5:c4:71:f9:54:b9:42:aa:
76:f5:31:a4:64:f2:56:bc:58:b0:0d:36:b9:2a:39:93:19:10:
9d:79:49:f4:0d:a0:3c:ac:09:c1:c9:65:f1:2d:64:08:6d:56:
94:e3:7d:5a:ff:fe:21:a5:d9:83:ac:7d:43:52:cc:ee:03:75:
d3:01:9f:2c:fc:01:65:8f:4b:6f:f9:9c:f0:ad:67:14:7d:93:
71:c0:9e:81:75:e7:99:86:c1:be:ed:b2:60:79:e2:4c:f1:7e:
81:bd:4a:63:c1:f1:f1:89:b9:33:f4:e5:a9:67:00:4a:8a:7e:
6b:ec:d5:07:eb:ce:39:e9:98:6e:f1:dc:c5:11:3d:dc:4b:ab:
79:98:bb:c0:37:bc:70:6b:0e:93:2e:10:e4:45:41:f3:83:c3:
10:ef:ce:29:be:11:e0:8b:1e:50:01:e6:83:7f:6e:86:32:d5:
ec:ce:be:4c:67:fb:83:e7:41:f5:80:5d:cd:d0:ff:81:5e:19:
94:d4:76:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:14:56 2026 by rpki-client