Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
File: OBXtD6YgyAGqqabxT2WW1-yXUKE.mft (raw, json)
Hash identifier: A1DGH6tz/jdz7EaGnI+wmicu+5UW39UKOEU51Q3k/0o=
Subject key identifier: F0:DA:07:14:47:F0:B4:B1:F2:BC:14:89:C2:2A:4D:05:4E:8A:69:74
Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Certificate serial: 019D9BF52F2B248BE494206E6B8BC731E836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 15:00:29 +0000
Manifest this update: Fri 17 Apr 2026 15:00:29 +0000
Manifest next update: Sat 18 Apr 2026 15:00:29 +0000
Files and hashes: 1: J5zzAtbu7OO84foJkjfo9mnqe4E.roa (hash: iT6yzwPu2JR2wJ7myEmKqPOSCKR+ROL2NO3QjEH64jQ=)
2: OBXtD6YgyAGqqabxT2WW1-yXUKE.crl (hash: GY8QSk/7u+Gnle+q/p3tD3f0+pks0faMtekFi/QFDV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:2f:2b:24:8b:e4:94:20:6e:6b:8b:c7:31:e8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Validity
Not Before: Apr 17 15:00:29 2026 GMT
Not After : Apr 18 15:00:29 2026 GMT
Subject: CN=f0da071447f0b4b1f2bc1489c22a4d054e8a6974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:de:1c:d9:6e:1b:e3:99:e7:85:e6:fc:f6:
18:23:92:cc:c5:7c:a1:5c:f8:d5:82:2f:be:c7:92:
9e:3a:fa:1e:07:98:a2:59:6a:90:e6:9f:69:ed:19:
f7:22:ed:fa:0b:98:0c:fa:e0:76:fc:e2:38:38:c0:
b8:6c:ed:4e:10:1e:de:b2:64:4f:ae:94:39:c1:b5:
d9:a5:0e:68:94:28:01:49:34:ad:ed:11:6a:f5:38:
0e:9a:09:0a:b3:e2:8b:85:4f:b2:64:44:32:4d:e2:
54:d8:47:c6:51:c5:57:81:65:67:2f:00:21:31:08:
f0:ec:a8:21:80:23:a2:fb:e8:17:70:4f:95:a1:90:
9b:ac:b9:56:6e:76:f2:f1:cb:ae:a9:4b:6b:5b:e8:
e3:9b:ee:b8:0b:6a:56:53:b7:c1:89:71:3a:fc:30:
fe:00:79:b9:74:d7:58:a7:e7:3e:ad:f7:58:23:a1:
25:05:66:8c:09:42:76:de:82:e8:8a:55:f6:ad:3e:
b3:bd:24:ba:73:bb:67:66:e2:eb:25:83:a1:d8:de:
3a:02:b6:4e:f3:d7:6f:2c:7e:01:dd:1a:0f:df:27:
0c:14:49:6f:e5:3d:79:66:78:d8:39:8b:64:6a:96:
7f:51:ec:fb:75:e4:08:5f:15:90:c1:89:f6:ac:3e:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DA:07:14:47:F0:B4:B1:F2:BC:14:89:C2:2A:4D:05:4E:8A:69:74
X509v3 Authority Key Identifier:
keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:af:38:ea:94:be:82:c4:fe:25:d8:de:cd:e9:b6:f3:7f:61:
ab:e1:87:60:f1:08:14:c3:5a:42:aa:2e:b3:a9:97:c7:a8:e9:
6c:da:6b:23:5d:5d:3c:99:eb:c3:41:d5:bd:a8:3f:f0:d4:98:
d5:42:e3:e0:0d:af:46:2d:34:70:db:38:52:b6:32:2b:0c:2d:
a0:b3:eb:29:fd:93:40:98:e8:8b:d9:2b:b8:bb:60:8d:a4:91:
a3:4e:2e:c7:5e:02:4c:f8:cd:91:14:cb:2d:22:73:cd:63:b1:
eb:12:de:31:f2:32:7b:51:7d:ea:ee:4d:81:5e:e1:20:d2:d9:
9d:1b:51:f5:f5:fb:55:6e:4a:26:52:98:2d:6d:20:5d:d0:82:
2a:fc:8a:5a:56:a1:78:53:d6:05:0d:45:df:a6:87:63:a7:8e:
c1:9d:f1:33:c9:05:94:04:ee:ea:31:9b:ad:11:fc:18:0f:c4:
a5:2d:78:30:ec:84:e8:3f:7b:1f:e3:a6:6d:51:0b:a9:cb:ab:
65:5b:53:da:45:8e:07:41:70:24:85:01:98:7e:df:10:e8:fd:
f3:f5:39:3b:4e:0f:22:d1:1c:ad:86:f7:09:75:b3:bb:13:15:
36:3b:34:41:d4:02:6b:8f:58:b4:d0:58:a3:04:84:8a:c8:55:
6e:c5:b6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:32:01 2026 by rpki-client