Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
File: OBXtD6YgyAGqqabxT2WW1-yXUKE.mft (raw, json)
Hash identifier: zsu5x/03ClKEqBaoPtu0ofO8CDTAATlEw/2n3o0OvRM=
Subject key identifier: E2:97:2E:91:F0:3C:FC:3D:89:C2:1C:3B:8B:B6:1C:B8:52:F8:1B:0F
Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Certificate serial: 019EC17FDA4AA2BF3EAAB9803D72CF5965D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 15:00:41 +0000
Manifest this update: Sat 13 Jun 2026 15:00:41 +0000
Manifest next update: Sun 14 Jun 2026 15:00:41 +0000
Files and hashes: 1: J5zzAtbu7OO84foJkjfo9mnqe4E.roa (hash: iT6yzwPu2JR2wJ7myEmKqPOSCKR+ROL2NO3QjEH64jQ=)
2: OBXtD6YgyAGqqabxT2WW1-yXUKE.crl (hash: GqusrqXWrypMmlN/xcPDrVw/fn3hPHiPNBzSNIjM3fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:da:4a:a2:bf:3e:aa:b9:80:3d:72:cf:59:65:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Validity
Not Before: Jun 13 15:00:41 2026 GMT
Not After : Jun 14 15:00:41 2026 GMT
Subject: CN=e2972e91f03cfc3d89c21c3b8bb61cb852f81b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:15:ad:b8:5e:48:3e:81:41:ad:08:e8:70:
30:e2:a9:70:02:be:11:84:28:d8:69:c4:54:0a:32:
dd:ad:33:0f:eb:34:f5:75:1d:47:d5:e8:0c:3b:fc:
19:80:53:60:76:16:25:2a:32:a7:66:66:37:5f:70:
55:16:60:5e:17:2a:9a:d3:55:30:c2:c9:93:8d:26:
c0:ee:09:20:67:d7:70:d0:fc:cb:03:54:1c:44:1f:
55:20:b3:90:ae:af:3c:76:91:65:a7:5c:66:11:51:
06:40:4a:f4:a9:7e:c8:0e:9f:6b:ad:fa:0d:6a:e3:
90:b2:bf:11:cd:49:9a:1b:d1:6f:03:4e:60:d9:98:
85:ca:74:e4:25:04:9f:87:f5:ad:0e:76:4e:24:30:
cc:cd:6a:96:4d:a7:03:53:27:cc:6f:7b:41:80:5b:
a7:2a:87:c1:cc:cf:29:97:b7:71:a7:4a:85:52:48:
f6:5f:27:ef:8b:62:29:45:af:42:91:6c:af:60:b6:
71:aa:01:f8:55:9a:52:c4:e8:c5:23:cc:08:92:66:
3f:45:5d:91:d0:28:1d:64:b7:1c:14:74:37:8c:40:
aa:15:63:59:9a:1a:be:22:25:b3:98:b8:9d:19:64:
bf:19:cb:c6:90:54:04:c5:b2:e3:18:57:c7:49:a3:
e3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:97:2E:91:F0:3C:FC:3D:89:C2:1C:3B:8B:B6:1C:B8:52:F8:1B:0F
X509v3 Authority Key Identifier:
keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:13:4c:25:65:18:a1:92:ee:fa:55:84:9f:a1:11:28:6b:ce:
66:03:5c:6e:a7:d4:8d:14:8f:7b:ce:e9:c8:fd:a6:fa:2e:72:
5b:1e:ce:07:e9:a0:0f:4e:15:dc:4e:7c:03:80:ad:3a:25:0e:
d6:8a:11:f0:b9:e0:ca:7f:c5:28:52:2b:49:88:49:63:be:1f:
b4:d3:e3:26:9b:92:8e:cf:7b:da:64:cf:a8:b3:ac:14:ae:9f:
23:94:58:68:74:af:0f:d3:46:de:be:06:d3:3c:8f:f1:07:c8:
bc:47:70:73:e2:13:b3:c9:53:6f:1b:3d:63:93:81:89:f9:30:
be:d7:0a:5b:61:34:35:c0:f1:33:69:af:1d:5f:5d:b9:25:a1:
ec:29:08:13:80:64:4b:96:6a:92:f8:a8:af:44:a9:48:a3:74:
dc:f0:bc:01:36:c6:4b:89:bd:95:fe:02:86:e3:fa:51:bf:66:
26:4b:66:9a:90:58:5f:97:43:b5:7b:1b:a7:63:88:eb:f3:3b:
fe:fd:ea:01:ce:75:94:9e:88:08:a6:25:ee:bd:7a:44:e6:00:
de:57:1d:ae:b9:76:3b:ac:b3:e0:2a:92:9f:6e:7e:04:94:ba:
7b:8b:a3:6c:62:2f:72:c5:5d:86:7d:e2:60:97:c9:86:41:eb:
70:da:30:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bf9pKor8+qrmAPXLPWWXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MTVlZDBmYTYyMGM4MDFhYWE5YTZmMTRmNjU5NmQ3ZWM5
NzUwYTEwHhcNMjYwNjEzMTUwMDQxWhcNMjYwNjE0MTUwMDQxWjAzMTEwLwYDVQQD
EyhlMjk3MmU5MWYwM2NmYzNkODljMjFjM2I4YmI2MWNiODUyZjgxYjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBsVrbheSD6BQa0I6HAw4qlwAr4R
hCjYacRUCjLdrTMP6zT1dR1H1egMO/wZgFNgdhYlKjKnZmY3X3BVFmBeFyqa01Uw
wsmTjSbA7gkgZ9dw0PzLA1QcRB9VILOQrq88dpFlp1xmEVEGQEr0qX7IDp9rrfoN
auOQsr8RzUmaG9FvA05g2ZiFynTkJQSfh/WtDnZOJDDMzWqWTacDUyfMb3tBgFun
KofBzM8pl7dxp0qFUkj2Xyfvi2IpRa9CkWyvYLZxqgH4VZpSxOjFI8wIkmY/RV2R
0CgdZLccFHQ3jECqFWNZmhq+IiWzmLidGWS/GcvGkFQExbLjGFfHSaPj1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKXLpHwPPw9icIcO4u2HLhS+BsPMB8GA1UdIwQY
MBaAFDgV7Q+mIMgBqqmm8U9lltfsl1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0JYdEQ2WWd5QUdxcWFieFQyV1cxLXlYVUtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zMmRhNDAtMGNiZi00MjQ0LWIxYTQt
ZjM1YTQ0NTYzNWNhLzEvT0JYdEQ2WWd5QUdxcWFieFQyV1cxLXlYVUtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8zMmRhNDAtMGNiZi00MjQ0LWIxYTQtZjM1YTQ0NTYzNWNh
LzEvT0JYdEQ2WWd5QUdxcWFieFQyV1cxLXlYVUtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxNMJWUY
oZLu+lWEn6ERKGvOZgNcbqfUjRSPe87pyP2m+i5yWx7OB+mgD04V3E58A4CtOiUO
1ooR8Lngyn/FKFIrSYhJY74ftNPjJpuSjs972mTPqLOsFK6fI5RYaHSvD9NG3r4G
0zyP8QfIvEdwc+ITs8lTbxs9Y5OBifkwvtcKW2E0NcDxM2mvHV9duSWh7CkIE4Bk
S5Zqkvior0SpSKN03PC8ATbGS4m9lf4ChuP6Ub9mJktmmpBYX5dDtXsbp2OI6/M7
/v3qAc51lJ6ICKYl7r16ROYA3lcdrrl2O6yz4CqSn25+BJS6e4ujbGIvcsVdhn3i
YJfJhkHrcNowQg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:37:55 2026 by rpki-client