Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
File: AObmXtdPBsIjqaScPqbT7uyyOFA.mft (raw, json)
Hash identifier: HLXQnoI6yBYQ58eX5zOgCvugFb5LWk5YlcK0g1jiz9Y=
Subject key identifier: 3A:37:5F:EC:17:D3:AE:83:5F:45:63:F2:10:83:7F:18:89:30:60:3B
Authority key identifier: 00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
Certificate issuer: /CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Certificate serial: 019D984F8E6075B77E8BFC3C096AEBA44AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
Manifest number: 1854
Signing time: Thu 16 Apr 2026 22:00:43 +0000
Manifest this update: Thu 16 Apr 2026 22:00:43 +0000
Manifest next update: Fri 17 Apr 2026 22:00:43 +0000
Files and hashes: 1: AObmXtdPBsIjqaScPqbT7uyyOFA.crl (hash: B+glIyEQ6glsDt6Xcm8o++wMfwEdaFosT5uvIPNjQBI=)
2: P1a-wy-41SGB2vgjhP8VvtqZ32c.roa (hash: 8eDEG1cF3oj7ePCmIr7bInU5XFHVVJIT2TT9CuFv1Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:8e:60:75:b7:7e:8b:fc:3c:09:6a:eb:a4:4a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Validity
Not Before: Apr 16 22:00:43 2026 GMT
Not After : Apr 17 22:00:43 2026 GMT
Subject: CN=3a375fec17d3ae835f4563f210837f188930603b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:56:6a:6f:a3:42:61:f0:93:32:83:b2:e5:06:
7c:42:e6:50:86:2c:2e:00:ea:2b:14:fa:45:0c:2f:
d6:da:11:3f:dd:aa:4b:52:87:1f:f8:71:19:68:01:
08:ef:7a:74:89:d2:05:a2:8e:47:b6:2e:63:1f:20:
46:3b:31:7b:d4:2d:ca:d2:b1:d3:05:38:b0:76:08:
da:ca:46:57:31:45:66:a2:d3:37:54:fb:78:bf:3e:
a7:e7:cb:fa:e0:0e:4c:93:67:46:bb:3b:56:bc:90:
92:7c:20:d5:91:aa:28:21:a9:ff:2b:8e:fa:ae:23:
b2:b4:9d:6b:50:0e:63:47:05:6e:34:9f:ff:13:43:
9c:95:c0:de:47:98:89:27:f4:02:80:61:0c:00:6c:
9d:58:e1:15:1f:6d:ec:fd:5b:f9:6a:34:88:3e:b9:
ef:cd:ff:b3:9f:32:e2:f0:44:8e:b0:b0:9e:8a:69:
21:0e:46:ef:4b:c1:c5:64:89:2c:52:94:85:39:c8:
11:bc:97:68:82:a3:60:99:1f:2e:b9:12:e3:67:cb:
30:31:fa:0b:b9:85:60:75:41:6c:17:82:c7:dd:75:
02:50:2c:00:93:f7:c1:a6:c1:3b:1c:0b:aa:45:89:
7c:f6:e9:9c:61:3e:7b:b6:69:e4:f5:e3:93:7b:f0:
38:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:37:5F:EC:17:D3:AE:83:5F:45:63:F2:10:83:7F:18:89:30:60:3B
X509v3 Authority Key Identifier:
keyid:00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:93:a7:74:4c:47:bc:c0:76:a1:db:c4:cf:b9:3b:52:e4:4c:
d2:08:8b:a1:14:28:72:81:c3:e7:33:ac:ba:fb:51:9d:23:01:
c9:4b:9b:18:24:44:76:1b:43:96:78:93:3a:0a:5a:db:26:7e:
0e:c7:31:85:71:be:de:06:85:30:a7:26:da:42:13:8b:e3:da:
86:4d:68:62:ec:81:98:98:25:34:50:20:5f:82:02:fa:d7:18:
61:e0:55:8f:a6:32:c1:b9:63:1a:40:78:1e:6e:f7:1f:7f:bd:
cc:ea:a2:3a:a3:59:41:26:c7:d2:c7:80:68:fc:ce:14:05:eb:
f2:63:4e:48:cd:49:15:78:7a:99:6b:8c:4c:ac:fe:6b:4a:65:
50:76:21:64:9d:39:6e:89:54:06:75:64:9d:46:71:99:77:eb:
be:1b:67:cf:7b:49:f4:d9:8d:88:41:b6:01:dc:05:bd:8d:6b:
8d:14:10:e1:72:11:8b:07:86:4c:84:d3:91:ce:0e:a9:82:28:
99:5f:f6:bd:84:d4:b0:f9:fc:aa:8e:12:54:df:e9:78:ce:7a:
4c:7e:b6:b3:35:05:95:aa:db:27:8c:7b:b0:46:d9:e2:8d:db:
c7:81:d4:da:cc:c8:e5:b2:e3:e5:6d:e4:22:be:39:dc:37:b5:
8a:0e:0c:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT45gdbd+i/w8CWrrpErZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZTZlNjVlZDc0ZjA2YzIyM2E5YTQ5YzNlYTZkM2VlZWNi
MjM4NTAwHhcNMjYwNDE2MjIwMDQzWhcNMjYwNDE3MjIwMDQzWjAzMTEwLwYDVQQD
EygzYTM3NWZlYzE3ZDNhZTgzNWY0NTYzZjIxMDgzN2YxODg5MzA2MDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VZqb6NCYfCTMoOy5QZ8QuZQhiwu
AOorFPpFDC/W2hE/3apLUocf+HEZaAEI73p0idIFoo5Hti5jHyBGOzF71C3K0rHT
BTiwdgjaykZXMUVmotM3VPt4vz6n58v64A5Mk2dGuztWvJCSfCDVkaooIan/K476
riOytJ1rUA5jRwVuNJ//E0OclcDeR5iJJ/QCgGEMAGydWOEVH23s/Vv5ajSIPrnv
zf+znzLi8ESOsLCeimkhDkbvS8HFZIksUpSFOcgRvJdogqNgmR8uuRLjZ8swMfoL
uYVgdUFsF4LH3XUCUCwAk/fBpsE7HAuqRYl89umcYT57tmnk9eOTe/A4BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDo3X+wX066DX0Vj8hCDfxiJMGA7MB8GA1UdIwQY
MBaAFADm5l7XTwbCI6mknD6m0+7ssjhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yNGRhNmYtNTA1My00MTRlLTkzNzAt
MTZiOWVhZmViNGVhLzEvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yNGRhNmYtNTA1My00MTRlLTkzNzAtMTZiOWVhZmViNGVh
LzEvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpOndExH
vMB2odvEz7k7UuRM0giLoRQocoHD5zOsuvtRnSMByUubGCREdhtDlniTOgpa2yZ+
DscxhXG+3gaFMKcm2kITi+Pahk1oYuyBmJglNFAgX4IC+tcYYeBVj6YywbljGkB4
Hm73H3+9zOqiOqNZQSbH0seAaPzOFAXr8mNOSM1JFXh6mWuMTKz+a0plUHYhZJ05
bolUBnVknUZxmXfrvhtnz3tJ9NmNiEG2AdwFvY1rjRQQ4XIRiweGTITTkc4OqYIo
mV/2vYTUsPn8qo4SVN/peM56TH62szUFlarbJ4x7sEbZ4o3bx4HU2szI5bLj5W3k
Ir453De1ig4MgA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:41 2026 by rpki-client