Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
File: obgXVrYRDyp1SVx0yCDg5zTuimw.mft (raw, json)
Hash identifier: 5C0ou5LLve0Nhunu7oAO1BJJxFLeb5LKAPrq9lrRoYQ=
Subject key identifier: C0:0A:D1:59:85:73:16:A2:29:92:F7:28:DD:53:0B:CF:FE:79:B7:D5
Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
Certificate issuer: /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Certificate serial: 019CAC47278CBCE85EE1DF6CF7533CE5A727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
Manifest number: 0D27
Signing time: Mon 02 Mar 2026 02:01:10 +0000
Manifest this update: Mon 02 Mar 2026 02:01:10 +0000
Manifest next update: Tue 03 Mar 2026 02:01:10 +0000
Files and hashes: 1: Lp8SvbEirw77bD6bjqTRJH9RHag.roa (hash: E4a/u2pu0/SKcHKL3Q1hBcB3nQ4uQ6kbjvNNFt2G5aE=)
2: obgXVrYRDyp1SVx0yCDg5zTuimw.crl (hash: nmZtWV8K4Q0fuAGXCWh0QZEQ/CrlUwgiJyf1xY8BWt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:27:8c:bc:e8:5e:e1:df:6c:f7:53:3c:e5:a7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Validity
Not Before: Mar 2 02:01:10 2026 GMT
Not After : Mar 3 02:01:10 2026 GMT
Subject: CN=c00ad159857316a22992f728dd530bcffe79b7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a3:f7:1c:52:76:97:f6:27:66:4f:9d:90:46:
b2:65:fc:49:b1:c1:c0:9b:12:55:2f:5b:00:eb:f6:
d5:8a:1a:90:5e:31:42:98:ad:21:4f:a1:94:2d:e2:
5d:b8:7e:74:4d:f8:a4:3c:b2:ab:3e:31:a1:a7:1d:
f1:4e:80:1d:de:e4:e0:37:77:74:1c:dd:9b:dc:c3:
dc:79:ef:eb:63:9d:de:e9:df:54:e4:2a:db:d8:c1:
84:23:9e:b8:e2:52:ea:c8:aa:01:b2:cc:12:12:0f:
80:8f:df:f9:03:47:64:71:7c:02:54:37:33:5f:e0:
45:a1:47:66:d6:37:60:70:a4:72:d8:24:f1:2c:b1:
ee:43:62:8b:97:b0:f2:5d:ef:9a:9e:71:76:f3:9f:
a5:61:d0:2f:9a:d0:47:9e:e6:8c:67:1e:65:b6:19:
71:c3:b2:8f:02:70:d5:39:0d:13:ef:41:51:66:73:
ed:21:69:99:e7:9a:f8:e0:8e:57:46:a1:58:ac:2f:
87:d6:d9:25:92:09:95:e1:33:78:54:8f:d0:39:2a:
32:91:43:1c:36:af:23:31:b3:cb:3f:80:63:01:65:
73:b2:b9:c8:31:f5:b5:1a:bb:6f:26:cd:4d:e6:8d:
24:0b:20:0c:7c:49:6a:56:a1:cb:71:87:e4:38:06:
32:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0A:D1:59:85:73:16:A2:29:92:F7:28:DD:53:0B:CF:FE:79:B7:D5
X509v3 Authority Key Identifier:
keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0b:1d:93:51:f6:df:3a:35:13:86:51:2c:01:de:24:a3:85:
58:22:9f:23:75:f6:b4:56:eb:e2:fd:4a:ea:5b:55:9a:f8:43:
5b:e2:e4:47:9b:67:03:a4:ad:8a:25:25:e2:15:83:8e:f4:a9:
c2:1c:ad:b3:4e:1a:ed:bf:93:28:63:9c:a3:b8:3e:32:68:51:
3c:27:61:3f:e1:35:ad:17:df:e8:c1:1b:57:0a:e5:0f:85:d8:
8c:d5:f1:83:49:0d:48:c2:de:31:9c:e8:75:ba:1b:cb:8b:55:
13:cc:d1:11:ac:12:da:f9:05:2a:b1:8c:73:4c:56:5b:ac:53:
f5:15:52:54:dd:ed:4f:27:89:0b:29:47:c6:d5:a7:1a:54:75:
9f:57:51:c3:c7:f8:ed:63:07:36:1a:09:27:8c:79:3a:4e:99:
d6:be:0d:0f:1c:fc:e6:97:12:c0:82:ef:b5:42:14:b0:55:12:
98:2f:82:33:d1:73:09:ae:25:ab:b3:63:59:41:0d:4c:1f:92:
c2:41:a7:38:a5:a5:8c:ee:b8:68:6a:6a:4a:54:ac:dd:1c:e8:
cc:81:81:6c:74:97:29:7c:51:7a:43:62:41:4f:e4:b2:17:ab:
b3:07:53:3e:02:e5:33:0b:54:bc:fe:0c:9a:6b:a3:c8:f3:0e:
4f:46:c5:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRyeMvOhe4d9s91M85acnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjgxNzU2YjYxMTBmMmE3NTQ5NWM3NGM4MjBlMGU3MzRl
ZThhNmMwHhcNMjYwMzAyMDIwMTEwWhcNMjYwMzAzMDIwMTEwWjAzMTEwLwYDVQQD
EyhjMDBhZDE1OTg1NzMxNmEyMjk5MmY3MjhkZDUzMGJjZmZlNzliN2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aP3HFJ2l/YnZk+dkEayZfxJscHA
mxJVL1sA6/bVihqQXjFCmK0hT6GULeJduH50TfikPLKrPjGhpx3xToAd3uTgN3d0
HN2b3MPcee/rY53e6d9U5Crb2MGEI5644lLqyKoBsswSEg+Aj9/5A0dkcXwCVDcz
X+BFoUdm1jdgcKRy2CTxLLHuQ2KLl7DyXe+annF285+lYdAvmtBHnuaMZx5lthlx
w7KPAnDVOQ0T70FRZnPtIWmZ55r44I5XRqFYrC+H1tklkgmV4TN4VI/QOSoykUMc
Nq8jMbPLP4BjAWVzsrnIMfW1GrtvJs1N5o0kCyAMfElqVqHLcYfkOAYyEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAK0VmFcxaiKZL3KN1TC8/+ebfVMB8GA1UdIwQY
MBaAFKG4F1a2EQ8qdUlcdMgg4Oc07opsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wODE3Y2ItNmRkMi00Zjc1LThiYjUt
YWJjY2EyYjQ0ZTlmLzEvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wODE3Y2ItNmRkMi00Zjc1LThiYjUtYWJjY2EyYjQ0ZTlm
LzEvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgsdk1H2
3zo1E4ZRLAHeJKOFWCKfI3X2tFbr4v1K6ltVmvhDW+LkR5tnA6StiiUl4hWDjvSp
whyts04a7b+TKGOco7g+MmhRPCdhP+E1rRff6MEbVwrlD4XYjNXxg0kNSMLeMZzo
dboby4tVE8zREawS2vkFKrGMc0xWW6xT9RVSVN3tTyeJCylHxtWnGlR1n1dRw8f4
7WMHNhoJJ4x5Ok6Z1r4NDxz85pcSwILvtUIUsFUSmC+CM9FzCa4lq7NjWUENTB+S
wkGnOKWljO64aGpqSlSs3RzozIGBbHSXKXxRekNiQU/ksherswdTPgLlMwtUvP4M
mmujyPMOT0bFFw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:42 2026 by rpki-client