Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
File: OBgMB0--WYgkxwAxlbMKpKNmFSw.mft (raw, json)
Hash identifier: k534HiyQdKGrgm5uDBZcTXdJJvgUc0gcHjm0pyV4080=
Subject key identifier: 8F:4A:0F:DC:C8:44:FE:B0:66:34:8C:09:8B:16:8B:7A:86:69:1B:EF
Authority key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
Certificate issuer: /CN=38180c074fbe598824c7003195b30aa4a366152c
Certificate serial: 019D98BD6E5AB033CE76E8E620F19983AF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
Manifest number: 1561
Signing time: Fri 17 Apr 2026 00:00:44 +0000
Manifest this update: Fri 17 Apr 2026 00:00:44 +0000
Manifest next update: Sat 18 Apr 2026 00:00:44 +0000
Files and hashes: 1: FTU-IVO2NNBlXW4Q2EwJJORm_is.roa (hash: yMyznpEegGljCcs/jnznmQ+oneu3veLngWC/HBD66uk=)
2: OBgMB0--WYgkxwAxlbMKpKNmFSw.crl (hash: +pqd3J3o+H7huEYWxhcxvFInk0vtjKN0lho+w/ZW3GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:6e:5a:b0:33:ce:76:e8:e6:20:f1:99:83:af:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38180c074fbe598824c7003195b30aa4a366152c
Validity
Not Before: Apr 17 00:00:44 2026 GMT
Not After : Apr 18 00:00:44 2026 GMT
Subject: CN=8f4a0fdcc844feb066348c098b168b7a86691bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:50:c6:4b:a2:e1:00:ba:53:8a:0f:fd:f7:
07:34:af:87:b6:d6:41:c1:b1:8e:b7:71:98:90:3b:
e6:c9:37:36:c1:cd:48:00:84:5e:8a:51:57:dc:ee:
45:f9:b7:64:88:81:05:12:dd:2c:06:0a:ed:a7:a3:
2c:f9:f4:2a:b5:f0:e4:b4:c4:8e:dd:cc:cc:e7:fd:
11:dc:7d:bb:02:fa:a4:85:c0:e5:ac:0e:19:4c:f2:
bd:8c:57:b8:a6:bc:f1:9a:e4:b4:70:d8:a7:97:ab:
6e:db:ec:14:f8:9c:a6:81:4c:2d:bc:0f:9e:7d:fb:
d7:42:9b:25:36:a9:bf:07:8d:7f:ef:7f:cb:35:f9:
11:40:b9:0d:0f:9d:fc:d1:43:d1:43:35:2f:61:d1:
7c:8d:e3:a5:d7:05:2d:cb:df:a0:42:cf:ec:fc:41:
cd:2c:eb:b8:52:2f:57:8c:e8:2c:48:d5:61:10:85:
8d:de:5f:9b:4b:15:5a:24:cd:2c:47:f6:2b:4a:02:
96:f0:d1:7a:65:11:83:52:db:8c:ee:4a:e8:a8:a1:
a5:4c:84:6f:58:43:20:cd:6b:14:3e:cf:b8:d1:00:
24:bd:27:6f:1a:94:85:69:4f:97:53:b8:ae:e7:3f:
50:8a:af:4a:3b:80:44:3f:46:00:aa:54:c5:81:d5:
2c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4A:0F:DC:C8:44:FE:B0:66:34:8C:09:8B:16:8B:7A:86:69:1B:EF
X509v3 Authority Key Identifier:
keyid:38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:79:fb:b3:69:ed:28:c4:2b:70:7c:3a:9f:03:6e:45:20:18:
cd:9d:15:60:a0:73:1e:2f:e7:c7:b7:84:5e:63:d8:6d:5e:f8:
ff:72:45:67:e0:02:23:32:a6:a2:a1:cc:bc:08:9b:c7:e6:f2:
dd:dd:59:bf:dc:9e:49:72:03:9a:b9:d4:6d:24:40:d8:96:e8:
72:5c:cd:87:ed:1e:29:42:0b:b9:ec:1c:60:9e:0f:6d:0d:6b:
fa:d0:ab:23:75:27:b1:34:c6:3f:e5:0d:ff:c3:af:70:6c:c5:
9e:20:32:97:ae:84:cd:29:64:65:45:e0:a3:4d:f2:9d:4f:54:
ba:91:53:ba:0a:e2:a7:f5:a2:ee:13:46:ba:d9:b4:04:18:27:
a6:f0:ec:95:4c:22:31:33:7d:40:5a:e6:22:da:4d:10:57:ba:
e9:66:68:75:0e:08:7a:19:5e:43:93:28:3e:67:7a:ae:ce:7d:
60:d1:0a:f7:4e:1d:85:20:c6:8a:0c:56:d4:ea:b6:5f:8a:0a:
3a:04:1b:0e:b5:92:5f:59:21:5a:98:d5:3a:9a:8d:20:69:56:
74:ab:65:73:cb:28:17:fb:4b:b5:05:d7:99:fc:16:80:02:dc:
5b:a4:e8:42:6e:20:92:4b:96:f0:3c:b6:95:0e:87:0f:d3:38:
c3:89:4d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:31 2026 by rpki-client