Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
File: obkUGttOyjUXWjwq291dU5h1PUw.mft (raw, json)
Hash identifier: Ac5sIzVHT38vU3Mbo906BfEffa8uzim3rmWrQAa9UL8=
Subject key identifier: B0:16:C7:DE:E8:44:BB:08:FC:E0:A7:FE:AE:E9:0F:52:07:4D:8A:9A
Authority key identifier: A1:B9:14:1A:DB:4E:CA:35:17:5A:3C:2A:DB:DD:5D:53:98:75:3D:4C
Certificate issuer: /CN=a1b9141adb4eca35175a3c2adbdd5d5398753d4c
Certificate serial: 01A0D9BBA32C57CD2148EDA0107F1B280DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obkUGttOyjUXWjwq291dU5h1PUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:02:27 +0000
Manifest this update: Fri 25 Sep 2026 18:02:27 +0000
Manifest next update: Sat 26 Sep 2026 18:02:27 +0000
Files and hashes: 1: 7AMox4S4nEHhmpbXvGZbnJYK6vY.roa (hash: GwF5AtnzW8V2jba5G+d/080MoYMx9miVmeYXvE5ydYs=)
2: obkUGttOyjUXWjwq291dU5h1PUw.crl (hash: Nf+y74fk+C6mbxF1lPvPvuAuytbwhIlft787nrd4XJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/obkUGttOyjUXWjwq291dU5h1PUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:a3:2c:57:cd:21:48:ed:a0:10:7f:1b:28:0d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b9141adb4eca35175a3c2adbdd5d5398753d4c
Validity
Not Before: Sep 25 18:02:27 2026 GMT
Not After : Sep 26 18:02:27 2026 GMT
Subject: CN=b016c7dee844bb08fce0a7feaee90f52074d8a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:ea:55:18:c9:96:d9:95:ac:bc:e0:f0:16:
cc:f3:d6:1f:4d:3d:99:6f:80:29:8e:12:55:ed:7d:
c0:da:07:e3:e2:67:03:09:fe:3f:cc:d8:68:90:c6:
7d:9c:8b:58:00:a3:ce:e8:f7:58:99:e5:70:de:fb:
b9:a5:4d:69:a1:5a:42:07:97:37:c6:a9:1f:d1:b3:
53:e9:2f:87:b5:52:7f:38:fc:5d:6a:a6:7d:b8:8a:
db:ca:1d:ce:68:87:08:15:93:04:a6:b0:07:44:bb:
9d:2a:be:ed:c5:a8:0a:55:19:73:bd:b4:57:7f:1e:
37:d0:e8:64:95:73:f4:58:d9:26:0d:73:16:8b:dd:
5b:16:14:75:d5:97:c9:15:66:17:3d:45:8d:74:8f:
24:47:20:a9:c2:b3:3a:4c:ed:9e:50:ab:ba:60:2d:
29:b5:8b:83:62:6d:87:fe:11:6d:8f:a7:a8:43:5e:
a1:ac:15:63:ed:bc:d4:50:f1:01:c1:fa:70:2f:e4:
c9:f3:84:15:81:19:50:72:20:a9:e0:01:52:fc:36:
5a:f9:b3:ce:61:69:a5:e9:c3:60:a8:ec:fe:40:10:
6c:00:70:81:2d:0b:47:62:2b:f6:c0:fa:d9:d8:cf:
c4:4f:83:97:25:54:ef:c7:bc:12:2c:9e:e6:fe:94:
d6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:16:C7:DE:E8:44:BB:08:FC:E0:A7:FE:AE:E9:0F:52:07:4D:8A:9A
X509v3 Authority Key Identifier:
keyid:A1:B9:14:1A:DB:4E:CA:35:17:5A:3C:2A:DB:DD:5D:53:98:75:3D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obkUGttOyjUXWjwq291dU5h1PUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ab:01:26:2b:38:b9:e7:07:d2:37:b8:b1:ea:57:92:4a:64:
0f:20:db:cb:c4:a1:8d:6e:ca:f0:fa:f0:82:82:95:51:7b:2f:
d3:31:b1:21:ce:c8:8d:60:3b:0a:bf:90:ba:45:c0:8e:2d:4f:
b8:65:31:3c:48:2b:89:ab:36:2f:7b:43:2b:ff:bb:bc:b3:9c:
44:2b:c2:7f:eb:43:c3:73:2b:e1:ae:8e:88:ef:f3:37:21:09:
24:6f:57:63:10:cb:eb:d7:65:a2:60:a1:7a:a0:51:8c:2a:3a:
84:6e:ea:6a:78:50:5c:a8:e0:2f:f6:91:01:41:0b:4f:78:24:
bb:21:b0:21:95:dc:8d:86:a8:46:d3:3b:3c:48:e3:bc:bb:a7:
26:ac:d2:20:55:87:f4:81:f0:d4:0b:80:3c:6b:13:dc:67:31:
40:b4:2b:3e:6f:d5:a9:73:9c:a5:4e:fe:2f:e7:d9:20:ff:8d:
f8:e2:2c:e6:68:71:26:b4:37:bf:39:03:d8:46:38:7f:d7:08:
9f:00:f4:ab:4d:ec:e3:8e:2f:9c:07:de:d4:a3:ea:58:ed:aa:
b5:68:81:68:74:9e:d4:61:e1:24:33:b6:0d:72:08:fb:24:37:
12:1d:ed:1b:53:d2:11:c0:8e:26:6b:77:c5:37:33:2c:81:42:
95:94:4c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:24:31 2026 by rpki-client