Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
File: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft (raw, json)
Hash identifier: 8povxx0c4BcwfPwIMAgZKG5WLEGJKsOoQbmQrsZrDaQ=
Subject key identifier: 47:B8:63:88:95:D1:AE:6F:EB:15:4F:DC:82:5C:6B:7B:22:B4:80:1B
Authority key identifier: D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
Certificate issuer: /CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Certificate serial: 019D9A06C0C3E8CAA5661BFCC61D138C26B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
Manifest number: 0FD4
Signing time: Fri 17 Apr 2026 06:00:26 +0000
Manifest this update: Fri 17 Apr 2026 06:00:26 +0000
Manifest next update: Sat 18 Apr 2026 06:00:26 +0000
Files and hashes: 1: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl (hash: ga2SwQeziWQn+YDPD7N92YM7Ab4whUQCNBXDkGFWnvs=)
2: jZT-rA7xXgV9ISXMAJBVRKLq758.asa (hash: 1yFM7L3x3s5BQ7YW45Q8MwC00LEtrcdpmLfR0GtoPSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:c0:c3:e8:ca:a5:66:1b:fc:c6:1d:13:8c:26:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Validity
Not Before: Apr 17 06:00:26 2026 GMT
Not After : Apr 18 06:00:26 2026 GMT
Subject: CN=47b8638895d1ae6feb154fdc825c6b7b22b4801b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:8b:0f:ed:18:60:49:48:80:3c:10:57:e0:
da:f3:90:07:df:ba:69:46:85:f6:f0:58:c7:60:04:
e9:21:f0:c2:49:a9:a1:25:26:68:ef:07:ab:47:05:
42:7c:76:75:ea:66:c3:77:54:d8:b6:d4:17:0c:aa:
b8:01:ca:77:7a:aa:d8:13:31:ed:42:7f:94:3f:b3:
b9:a1:ed:bb:00:3f:58:dc:35:e8:51:83:40:cc:87:
bc:08:7e:b5:80:de:f4:aa:7e:d1:44:17:88:d7:9e:
d9:d9:fd:33:63:50:11:77:e3:fb:8f:16:8d:1f:89:
85:f8:65:c1:f7:99:ec:54:c0:d5:c2:a2:1d:37:da:
98:20:ac:a1:a6:49:36:40:92:2a:b3:26:bf:af:7e:
18:69:50:75:1b:f7:17:44:b7:71:ce:2f:cc:5d:49:
c6:f8:dd:38:fd:39:a1:7c:f8:64:2c:73:73:e3:cb:
fa:f0:23:6f:0b:d8:9b:2d:35:90:47:ce:a1:59:2f:
15:89:e6:dc:0b:da:d8:8f:89:d4:ea:d3:5b:a5:87:
e7:4e:6b:90:26:fb:71:b6:18:15:2d:e8:b9:05:40:
27:2f:52:12:af:43:e0:4b:3b:a2:40:4b:b4:3d:d4:
3f:67:a1:7a:b7:a9:86:fa:67:b0:ba:bb:4f:ed:86:
1b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B8:63:88:95:D1:AE:6F:EB:15:4F:DC:82:5C:6B:7B:22:B4:80:1B
X509v3 Authority Key Identifier:
keyid:D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a3:e9:06:70:d6:b7:fa:1b:87:55:a8:e7:f6:6d:86:70:d7:
6c:12:6b:88:ec:b5:fe:be:0d:63:31:c7:8c:50:81:b8:42:5c:
29:01:a4:45:46:06:8f:b1:a1:95:97:89:2b:b7:a4:9c:7a:7d:
5d:fd:14:90:e5:12:17:68:dd:c5:d1:da:74:d3:34:40:dd:ed:
51:5c:d1:34:11:0e:62:85:ff:54:41:66:40:98:93:e9:c6:88:
58:99:3a:21:29:b6:fc:83:b6:89:44:cf:96:0c:8f:eb:92:ee:
b3:ba:fa:af:6d:87:d6:61:ad:7c:22:25:63:c6:34:fe:06:5e:
b0:ea:91:7b:26:64:18:59:b7:f2:33:b9:0a:15:c9:af:20:53:
d8:dd:9c:e3:a0:d4:84:1e:99:93:72:15:90:de:c3:eb:41:0f:
82:9c:62:02:c5:81:fd:b1:a0:37:be:eb:b6:fe:23:56:f3:08:
a4:6d:f2:00:f5:5a:ab:b3:77:bf:da:8b:32:90:98:44:3d:e4:
06:53:81:02:f5:13:6a:87:5f:a8:ab:8d:0e:3b:d4:77:16:90:
48:2f:3f:4a:40:62:f5:f8:d9:34:ef:f7:09:eb:1c:b7:fb:ca:
5d:7e:3d:6c:65:62:54:7f:8c:a1:2f:12:3a:7c:a6:47:76:e2:
3e:eb:10:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:37 2026 by rpki-client