Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft
File: obUnWAWCwH8MZ29bQj57p9A0mvM.mft (raw, json)
Hash identifier: N302hPMjz0VbOhS6+AsAGcrg56nQevN198NzWBIDs58=
Subject key identifier: 52:9E:41:03:F7:E2:EE:D6:B1:02:77:9C:6B:75:3D:9B:05:80:EE:E1
Authority key identifier: A1:B5:27:58:05:82:C0:7F:0C:67:6F:5B:42:3E:7B:A7:D0:34:9A:F3
Certificate issuer: /CN=a1b527580582c07f0c676f5b423e7ba7d0349af3
Certificate serial: 019DA59D4D4AB8A4177F0C39DA1BB736A906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obUnWAWCwH8MZ29bQj57p9A0mvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft
Manifest number: 6D
Signing time: Sun 19 Apr 2026 12:00:42 +0000
Manifest this update: Sun 19 Apr 2026 12:00:42 +0000
Manifest next update: Mon 20 Apr 2026 12:00:42 +0000
Files and hashes: 1: obUnWAWCwH8MZ29bQj57p9A0mvM.crl (hash: QIr8rAWSXg2LJB3BRB465Qy1sQX941sHTW7Rs1B4eGY=)
2: t_ByAeaBQNIrFb5bhmau53EuKWA.roa (hash: AwzAqExXrWOFnUsxmRE0E2eT/V7WcGMDYvuPQOqWltg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/obUnWAWCwH8MZ29bQj57p9A0mvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:4d:4a:b8:a4:17:7f:0c:39:da:1b:b7:36:a9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b527580582c07f0c676f5b423e7ba7d0349af3
Validity
Not Before: Apr 19 12:00:42 2026 GMT
Not After : Apr 20 12:00:42 2026 GMT
Subject: CN=529e4103f7e2eed6b102779c6b753d9b0580eee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:40:3f:43:c9:eb:cd:cb:56:40:b7:7c:2d:
b6:42:08:48:40:bb:26:b3:48:62:4d:e0:1c:32:60:
b1:84:44:4d:51:a1:91:9c:7c:60:02:6d:03:14:f0:
c0:6c:1d:43:99:1a:74:b6:f3:72:d7:7e:27:ed:61:
38:7a:bb:dc:72:1e:62:f6:99:b4:c7:f0:bb:e7:b8:
9b:1f:09:e9:60:b4:df:89:db:8f:5f:96:09:6e:96:
c4:9a:36:53:72:b6:a6:b3:1e:f2:66:af:23:d9:0a:
98:5c:c7:4b:79:59:39:45:b5:e8:c8:25:2a:4e:08:
23:11:d9:b2:5d:37:70:57:59:d6:92:44:8b:df:4f:
dd:41:79:d6:2d:f0:e3:22:16:33:03:a9:06:17:b0:
47:c1:17:7e:b6:3b:24:30:2e:bb:4c:61:4b:73:65:
e2:33:3d:3e:35:76:ee:ec:71:a7:22:0a:d3:e2:17:
fe:1f:40:39:5a:e7:99:95:b6:6f:0d:59:b9:16:5a:
3d:4e:c5:ef:8d:3d:89:de:64:ff:d1:0d:9d:dd:bd:
33:d5:33:00:4c:dc:5e:33:47:fc:2b:47:d6:cf:ac:
8c:e0:38:d9:93:63:9c:e8:b0:a4:cd:fe:87:58:b2:
b7:25:96:4b:0b:6a:a1:93:14:ae:d3:d2:6e:02:c7:
31:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9E:41:03:F7:E2:EE:D6:B1:02:77:9C:6B:75:3D:9B:05:80:EE:E1
X509v3 Authority Key Identifier:
keyid:A1:B5:27:58:05:82:C0:7F:0C:67:6F:5B:42:3E:7B:A7:D0:34:9A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obUnWAWCwH8MZ29bQj57p9A0mvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ab:66:36:e6:fa:c2:09:b8:9e:f3:6b:aa:2e:fe:c8:91:a3:
ec:51:91:36:91:f7:41:4d:0c:ab:49:96:77:96:e9:ee:b2:88:
9f:0d:ab:86:52:d7:d8:30:99:f9:15:e3:8f:cf:a9:20:a2:2f:
1e:30:e1:34:d4:68:54:21:44:f2:cc:24:f7:73:93:8a:fb:ea:
38:1d:9e:6b:dd:d0:5a:84:a0:f0:61:65:81:7a:54:0c:10:f1:
4e:5a:83:3c:80:e8:a2:41:ef:0e:64:e7:7b:f3:12:3d:53:fa:
5b:39:71:6f:36:e5:00:59:e8:df:b7:86:7c:de:d8:09:be:a9:
02:f1:f9:d4:2a:25:84:b6:d0:96:b7:e0:68:1f:25:6c:98:93:
46:cb:42:08:36:6b:dd:97:2d:e2:43:cb:70:33:6c:19:9f:9c:
ee:a7:5b:03:55:c4:b1:8c:7b:47:a1:71:23:31:d9:b5:0b:9a:
66:41:97:24:7a:13:38:27:e1:f9:9e:b4:b7:94:47:00:44:82:
51:a1:42:29:02:b1:02:c2:24:66:cf:39:67:bd:fc:1b:5f:7e:
36:6e:32:25:00:66:71:e7:e0:ec:64:99:00:e2:85:73:ea:3d:
57:26:18:4a:c4:ce:de:bb:93:fa:37:68:89:27:2c:50:0a:35:
2d:81:f2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:39:25 2026 by rpki-client