Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
File: obgXVrYRDyp1SVx0yCDg5zTuimw.mft (raw, json)
Hash identifier: 4zxkTSsBsF4QYTszkQw2Vprd/uE+JNdhOSqLDIqs9HE=
Subject key identifier: CE:29:42:EB:31:41:12:6E:97:42:57:BF:BE:CA:66:31:20:99:A0:16
Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
Certificate issuer: /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Certificate serial: 019FACE3D1A6E6E1F4D035D6FF4458BECD3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
Manifest number: 0EB5
Signing time: Wed 29 Jul 2026 08:00:39 +0000
Manifest this update: Wed 29 Jul 2026 08:00:39 +0000
Manifest next update: Thu 30 Jul 2026 08:00:39 +0000
Files and hashes: 1: Lp8SvbEirw77bD6bjqTRJH9RHag.roa (hash: E4a/u2pu0/SKcHKL3Q1hBcB3nQ4uQ6kbjvNNFt2G5aE=)
2: obgXVrYRDyp1SVx0yCDg5zTuimw.crl (hash: bVktXy5ihrTVqNR3BRi3X0cc5mc/55VDaf17/81GYqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:d1:a6:e6:e1:f4:d0:35:d6:ff:44:58:be:cd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Validity
Not Before: Jul 29 08:00:39 2026 GMT
Not After : Jul 30 08:00:39 2026 GMT
Subject: CN=ce2942eb3141126e974257bfbeca66312099a016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:d4:2f:5c:c6:fc:27:5d:f2:00:13:5f:44:
9c:3c:36:0e:e3:a9:54:5f:a0:fb:b9:a9:19:e6:a2:
cc:38:b8:03:97:9d:35:f1:a3:67:ba:5c:73:30:59:
19:1a:51:8f:00:78:bd:56:d1:ba:c5:c4:71:04:29:
cf:ed:7e:8b:2b:d2:e8:23:69:6e:93:26:11:fc:d9:
d1:81:50:c5:c4:f9:da:9d:b5:09:c2:d9:00:fc:13:
c4:46:2b:c4:c6:cf:61:b0:5d:9f:06:2a:5a:eb:0a:
ec:9a:17:7a:88:ba:ed:35:5f:1a:da:51:4f:6d:cb:
59:90:93:b7:49:55:5a:32:0c:6a:24:2c:1e:32:4c:
f1:ae:77:b6:77:f2:a3:ec:3d:da:e2:db:dc:7e:ea:
c4:e8:e1:a1:0b:2e:0d:ee:5d:dd:4b:30:52:82:5f:
82:86:15:44:02:9b:c1:ad:bd:75:46:d0:37:cc:83:
02:35:b6:a4:6c:48:27:7f:f5:ca:1f:54:ec:63:3a:
a1:8e:5f:3d:75:92:c1:b4:a1:38:23:d0:93:95:fc:
82:2e:c7:e6:9c:1d:6b:a7:06:59:88:ba:df:14:8c:
5f:86:c4:67:95:0d:29:70:d4:25:7a:ee:12:2f:70:
cb:5b:56:c6:46:7c:fd:ff:8c:4a:c7:84:35:42:23:
91:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:29:42:EB:31:41:12:6E:97:42:57:BF:BE:CA:66:31:20:99:A0:16
X509v3 Authority Key Identifier:
keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3e:ae:7c:a0:23:fc:0e:57:f2:dd:c7:e2:04:3b:24:0b:7c:
e2:2c:40:0c:95:15:61:6a:21:70:bd:c9:7e:3b:11:be:51:82:
d3:7f:6c:92:da:b4:15:3f:38:82:3a:68:90:e9:6f:15:21:ac:
24:2d:83:62:eb:9c:e8:3b:e7:0c:36:a2:12:88:ea:fb:10:4b:
2b:d5:db:14:2d:50:96:33:01:83:ec:32:aa:16:43:6d:8e:71:
73:0c:9b:8c:77:61:e8:9b:ed:8f:71:04:ef:3a:89:46:6f:c5:
30:47:ac:ac:fb:ed:fb:b7:37:d0:6b:f7:70:a0:0d:9a:42:69:
67:c6:dd:ce:df:4a:77:03:6e:78:d1:fc:25:d5:95:1d:48:ba:
e1:6a:de:c3:6a:2f:ef:e6:db:cd:81:0c:8f:30:a5:34:e2:6e:
c7:76:5f:9b:0e:46:5d:d6:6a:76:fe:6a:ac:63:69:29:ef:ec:
20:ea:c6:80:50:c3:95:c3:d5:2e:39:87:f8:93:e5:59:24:77:
02:81:e4:84:07:0f:60:78:3e:52:c6:47:d0:f9:0a:0d:25:1b:
3c:6e:e7:a2:0b:6b:c1:77:06:d7:22:2b:75:68:eb:8d:bc:42:
34:ce:08:80:89:40:bd:22:34:a8:26:4c:3a:a5:8f:d4:e7:dd:
ce:67:d6:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+s49Gm5uH00DXW/0RYvs0+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjgxNzU2YjYxMTBmMmE3NTQ5NWM3NGM4MjBlMGU3MzRl
ZThhNmMwHhcNMjYwNzI5MDgwMDM5WhcNMjYwNzMwMDgwMDM5WjAzMTEwLwYDVQQD
EyhjZTI5NDJlYjMxNDExMjZlOTc0MjU3YmZiZWNhNjYzMTIwOTlhMDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL/UL1zG/Cdd8gATX0ScPDYO46lU
X6D7uakZ5qLMOLgDl5018aNnulxzMFkZGlGPAHi9VtG6xcRxBCnP7X6LK9LoI2lu
kyYR/NnRgVDFxPnanbUJwtkA/BPERivExs9hsF2fBipa6wrsmhd6iLrtNV8a2lFP
bctZkJO3SVVaMgxqJCweMkzxrne2d/Kj7D3a4tvcfurE6OGhCy4N7l3dSzBSgl+C
hhVEApvBrb11RtA3zIMCNbakbEgnf/XKH1TsYzqhjl89dZLBtKE4I9CTlfyCLsfm
nB1rpwZZiLrfFIxfhsRnlQ0pcNQleu4SL3DLW1bGRnz9/4xKx4Q1QiORPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4pQusxQRJul0JXv77KZjEgmaAWMB8GA1UdIwQY
MBaAFKG4F1a2EQ8qdUlcdMgg4Oc07opsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wODE3Y2ItNmRkMi00Zjc1LThiYjUt
YWJjY2EyYjQ0ZTlmLzEvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wODE3Y2ItNmRkMi00Zjc1LThiYjUtYWJjY2EyYjQ0ZTlm
LzEvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWj6ufKAj
/A5X8t3H4gQ7JAt84ixADJUVYWohcL3JfjsRvlGC039sktq0FT84gjpokOlvFSGs
JC2DYuuc6DvnDDaiEojq+xBLK9XbFC1QljMBg+wyqhZDbY5xcwybjHdh6Jvtj3EE
7zqJRm/FMEesrPvt+7c30Gv3cKANmkJpZ8bdzt9KdwNueNH8JdWVHUi64Wrew2ov
7+bbzYEMjzClNOJux3Zfmw5GXdZqdv5qrGNpKe/sIOrGgFDDlcPVLjmH+JPlWSR3
AoHkhAcPYHg+UsZH0PkKDSUbPG7nogtrwXcG1yIrdWjrjbxCNM4IgIlAvSI0qCZM
OqWP1OfdzmfWig==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:03 2026 by rpki-client