Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
File: OBXtD6YgyAGqqabxT2WW1-yXUKE.mft (raw, json)
Hash identifier: pNW1DT7EaTAWamzLnrHEU2NR7eG4dO6wa29QnlvUQfI=
Subject key identifier: 54:4F:3B:5E:8F:58:94:8B:2F:1C:47:ED:1E:34:6F:C5:72:20:71:5D
Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Certificate serial: 01A139000CE22B50CD602F5A1DB789583EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
Manifest number: 1AA4
Signing time: Wed 14 Oct 2026 06:01:06 +0000
Manifest this update: Wed 14 Oct 2026 06:01:06 +0000
Manifest next update: Thu 15 Oct 2026 06:01:06 +0000
Files and hashes: 1: J5zzAtbu7OO84foJkjfo9mnqe4E.roa (hash: iT6yzwPu2JR2wJ7myEmKqPOSCKR+ROL2NO3QjEH64jQ=)
2: OBXtD6YgyAGqqabxT2WW1-yXUKE.crl (hash: c/3dJ3ymILhuwbSPo7Z54XTc86aP1zjKePLkTTKywY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:00:0c:e2:2b:50:cd:60:2f:5a:1d:b7:89:58:3e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Validity
Not Before: Oct 14 06:01:06 2026 GMT
Not After : Oct 15 06:01:06 2026 GMT
Subject: CN=544f3b5e8f58948b2f1c47ed1e346fc57220715d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:0e:f2:8b:21:ba:b9:cd:ec:64:25:84:c4:
94:87:3d:8e:f8:2f:1c:af:f6:6f:bd:83:af:ab:1f:
61:7c:d7:fa:66:8f:01:18:3a:5d:78:5e:cd:e2:e0:
61:e7:cb:14:7f:2b:b3:37:50:7c:0a:37:98:a8:a6:
7b:de:8c:e3:7e:78:ff:50:2e:93:b6:a1:5b:18:1a:
e0:e9:ec:21:7a:1b:6e:9d:5d:e2:77:43:8e:3a:b6:
47:54:35:e9:0c:b8:78:dd:a7:38:48:4e:54:7f:5e:
11:24:a6:1a:b8:87:30:cf:fd:b2:e4:41:3c:94:25:
b7:90:26:fe:f6:24:2f:9a:d3:68:0e:17:32:de:de:
87:80:d3:d3:82:d5:80:ed:87:4c:ff:a2:90:5f:11:
5e:b6:4f:1b:e7:93:e2:1f:40:e5:f5:a2:4d:39:ed:
13:b9:65:4d:03:16:09:68:e0:64:aa:bf:93:2d:22:
3c:d7:01:8e:4f:47:8a:52:4e:33:f1:ae:67:22:14:
d8:c4:be:93:f3:12:64:c1:84:4c:ab:2c:50:36:8b:
79:6d:63:84:26:24:5e:b7:af:0b:28:87:82:4b:24:
52:a0:a3:ff:4a:3a:d5:e8:79:f8:85:95:16:f8:72:
bd:24:4d:17:84:81:fe:bd:3a:83:5a:4b:cf:bb:b7:
b9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4F:3B:5E:8F:58:94:8B:2F:1C:47:ED:1E:34:6F:C5:72:20:71:5D
X509v3 Authority Key Identifier:
keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c7:18:55:ce:cf:2c:c9:c2:fa:f9:da:96:97:7e:f8:55:c0:
2f:36:fe:b8:ae:32:28:29:05:c5:91:8d:0c:b3:e5:3d:45:eb:
bb:e4:e2:f5:cc:23:42:a3:5b:28:32:5d:ad:8d:a6:f2:52:0e:
1b:3e:a4:ec:97:bd:11:88:8a:56:90:df:8a:6f:3f:ad:6d:35:
c8:f1:a6:0c:81:e4:93:16:e0:71:4a:02:58:08:55:5c:40:9f:
19:f1:53:15:30:c9:bf:08:60:c1:e7:0d:30:8b:a4:f9:e7:89:
92:4b:1d:b4:3c:08:80:04:a4:d7:90:ee:46:c0:a4:70:da:90:
72:ae:75:c0:b2:0b:52:de:e7:3e:0c:77:5c:96:86:9f:c7:64:
3c:5e:97:3a:32:81:f0:7e:86:da:46:70:31:4d:a2:63:cf:13:
95:66:0b:5f:62:63:70:7d:e9:18:4a:f8:21:b3:8d:de:21:9e:
0a:55:ec:08:0b:c7:1c:24:0f:12:5c:cd:e2:f6:96:0a:d0:a4:
59:31:71:a0:f6:c3:2b:3a:70:d8:36:63:ff:33:f9:bc:9d:78:
af:09:cc:8a:5b:34:f6:fd:c2:06:83:b5:19:80:de:1d:0a:c9:
4a:19:8b:66:13:ea:79:c9:71:ad:47:08:f1:8b:e6:b4:6c:7f:
47:e2:5b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:21:02 2026 by rpki-client