Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
File: obceuN8XHmQvGyuQQZAB8fxEXk0.mft (raw, json)
Hash identifier: iWvvYURRDoOE5MO328RBuoyLjLkNzgbDsSEPL5RUElk=
Subject key identifier: 40:74:3C:49:2B:A9:52:1F:88:EE:A0:70:E1:29:AC:8A:F6:65:8C:27
Authority key identifier: A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D
Certificate issuer: /CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d
Certificate serial: 019D99D01DB541DC2EABCAC3A0A3A0935CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
Manifest number: 1188
Signing time: Fri 17 Apr 2026 05:00:46 +0000
Manifest this update: Fri 17 Apr 2026 05:00:46 +0000
Manifest next update: Sat 18 Apr 2026 05:00:46 +0000
Files and hashes: 1: obceuN8XHmQvGyuQQZAB8fxEXk0.crl (hash: EGZTHvL4zdWqW4rnrFXSm7u1gIpwRPj1Q6bWpJxiebU=)
2: xlLzehGeb23GwrEYVRV1RxUYUhY.roa (hash: c1c4Sj/u0qy2xja1j0e40LLkcNGc0g4Li0sbH5urZJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:1d:b5:41:dc:2e:ab:ca:c3:a0:a3:a0:93:5c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d
Validity
Not Before: Apr 17 05:00:46 2026 GMT
Not After : Apr 18 05:00:46 2026 GMT
Subject: CN=40743c492ba9521f88eea070e129ac8af6658c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:95:88:a7:d3:dc:6b:d6:5e:d3:9a:e4:05:41:
d5:04:a7:af:93:5b:2a:a8:09:50:94:0d:f9:3c:4b:
b9:da:e0:42:02:20:60:1c:f3:ca:3e:0f:b6:d8:f5:
80:99:28:a6:18:97:c9:fb:0f:ef:c9:f9:42:5d:1e:
ff:f5:cc:e3:b7:73:cd:2f:1b:5b:45:af:0a:d8:d0:
c9:94:a0:d8:1e:8c:c5:d9:6a:45:53:15:fc:43:81:
d7:50:e1:d1:36:d4:17:13:3e:86:c1:17:5f:c7:28:
b6:87:10:fb:d0:0b:b3:86:04:ed:57:a2:6b:e1:e2:
e4:ef:3d:24:af:e8:40:6d:83:5d:38:ae:eb:3a:07:
b8:4b:da:5a:67:a7:ef:3e:1b:18:b0:57:6d:24:41:
e6:15:a3:ec:5e:95:49:b0:48:a2:8f:e0:d8:94:e7:
51:f9:2d:46:b5:30:80:ce:f3:d0:00:f4:38:d1:49:
b7:99:35:ea:ce:58:08:f0:95:b5:6d:c4:72:6e:8d:
bd:72:5f:e2:71:9c:37:9b:67:e0:71:3a:89:0d:71:
c6:18:de:b9:50:b7:33:f2:bb:bc:a3:7a:db:53:d9:
e5:ba:34:d4:91:7e:e7:33:76:b3:68:62:68:a5:a5:
5a:03:f7:ed:64:05:54:e6:27:ef:9b:4b:fc:88:2b:
22:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:74:3C:49:2B:A9:52:1F:88:EE:A0:70:E1:29:AC:8A:F6:65:8C:27
X509v3 Authority Key Identifier:
keyid:A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:81:e7:07:ee:6c:4e:e3:13:9c:d6:05:d1:29:2d:b2:15:a9:
f3:3b:93:92:fe:66:7e:61:1d:46:59:e9:1d:c7:2f:d2:28:20:
9a:de:03:13:41:dd:93:61:42:79:c8:fc:24:85:d3:6f:5d:96:
ab:ba:a7:8f:6a:cb:6e:d4:24:17:70:f1:42:97:c7:d0:af:c8:
84:37:6f:87:1f:69:e5:90:be:d8:e9:ee:2a:12:59:7e:cf:e0:
77:73:6f:81:45:30:23:1d:7e:f5:41:66:d7:ee:69:7e:cd:b1:
1f:98:47:ad:b4:70:55:f7:07:07:77:c4:69:59:e4:ab:51:a8:
2c:2f:0b:a7:93:62:bf:09:56:e6:f4:39:29:3a:28:50:f5:a7:
d0:87:a5:88:17:a8:d7:dd:62:43:0d:86:5a:91:87:7f:6e:2f:
74:71:1f:ca:55:4e:60:e3:33:4d:ea:0a:5b:9b:c4:4f:90:5c:
9b:03:ae:30:46:2d:9a:56:b1:72:c8:e6:df:f2:8f:bc:64:8e:
90:6e:21:d8:d0:54:5c:b9:3f:15:13:fd:30:f3:6d:e2:eb:9b:
5e:24:60:a8:c2:46:c6:a1:cf:25:22:18:dc:19:c8:e7:8a:7c:
af:5c:b7:32:11:3b:b7:cf:23:9b:ec:a4:95:fb:c3:6a:3a:3a:
68:b0:2c:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0B21Qdwuq8rDoKOgk1yhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjcxZWI4ZGYxNzFlNjQyZjFiMmI5MDQxOTAwMWYxZmM0
NDVlNGQwHhcNMjYwNDE3MDUwMDQ2WhcNMjYwNDE4MDUwMDQ2WjAzMTEwLwYDVQQD
Eyg0MDc0M2M0OTJiYTk1MjFmODhlZWEwNzBlMTI5YWM4YWY2NjU4YzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZWIp9Pca9Ze05rkBUHVBKevk1sq
qAlQlA35PEu52uBCAiBgHPPKPg+22PWAmSimGJfJ+w/vyflCXR7/9czjt3PNLxtb
Ra8K2NDJlKDYHozF2WpFUxX8Q4HXUOHRNtQXEz6GwRdfxyi2hxD70AuzhgTtV6Jr
4eLk7z0kr+hAbYNdOK7rOge4S9paZ6fvPhsYsFdtJEHmFaPsXpVJsEiij+DYlOdR
+S1GtTCAzvPQAPQ40Um3mTXqzlgI8JW1bcRybo29cl/icZw3m2fgcTqJDXHGGN65
ULcz8ru8o3rbU9nlujTUkX7nM3azaGJopaVaA/ftZAVU5ifvm0v8iCsiBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEB0PEkrqVIfiO6gcOEprIr2ZYwnMB8GA1UdIwQY
MBaAFKG3HrjfFx5kLxsrkEGQAfH8RF5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JjZXVOOFhIbVF2R3l1UVFaQUI4ZnhFWGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mMDg4YmQtNTAyOS00OTAzLTk2MTYt
MDY3MmVhMDQ0MGJiLzEvb2JjZXVOOFhIbVF2R3l1UVFaQUI4ZnhFWGswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9mMDg4YmQtNTAyOS00OTAzLTk2MTYtMDY3MmVhMDQ0MGJi
LzEvb2JjZXVOOFhIbVF2R3l1UVFaQUI4ZnhFWGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIHnB+5s
TuMTnNYF0SktshWp8zuTkv5mfmEdRlnpHccv0iggmt4DE0Hdk2FCecj8JIXTb12W
q7qnj2rLbtQkF3DxQpfH0K/IhDdvhx9p5ZC+2OnuKhJZfs/gd3NvgUUwIx1+9UFm
1+5pfs2xH5hHrbRwVfcHB3fEaVnkq1GoLC8Lp5NivwlW5vQ5KTooUPWn0IeliBeo
191iQw2GWpGHf24vdHEfylVOYOMzTeoKW5vET5BcmwOuMEYtmlaxcsjm3/KPvGSO
kG4h2NBUXLk/FRP9MPNt4uubXiRgqMJGxqHPJSIY3BnI54p8r1y3MhE7t88jm+yk
lfvDajo6aLAssA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:17 2026 by rpki-client