Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
File: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft (raw, json)
Hash identifier: 5yua8rK+iehooSA9rZU7FDOBLwpwhI6Kr4+O4bOPRJU=
Subject key identifier: 2D:C4:5C:BB:E6:C3:58:12:4C:B7:4A:60:FC:D0:31:E7:CB:1B:8E:33
Authority key identifier: A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
Certificate issuer: /CN=a01012ec845500718cab76c9dd0af010890de26d
Certificate serial: 019D9AABB27507F698CD94FD7B3D74679616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
Manifest number: 1264
Signing time: Fri 17 Apr 2026 09:00:36 +0000
Manifest this update: Fri 17 Apr 2026 09:00:36 +0000
Manifest next update: Sat 18 Apr 2026 09:00:36 +0000
Files and hashes: 1: cyts1p2wCvnwn0Aiq887XNaaeB4.roa (hash: 35IzE+3xgtlfUeRGehmvu6jrdJGF2F8RsbhMs7R8PLM=)
2: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl (hash: c+seyWTxf316ESPirjp6Y99+mVITAzAlEoDIyEtXUuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b2:75:07:f6:98:cd:94:fd:7b:3d:74:67:96:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01012ec845500718cab76c9dd0af010890de26d
Validity
Not Before: Apr 17 09:00:36 2026 GMT
Not After : Apr 18 09:00:36 2026 GMT
Subject: CN=2dc45cbbe6c358124cb74a60fcd031e7cb1b8e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:3e:98:ba:03:f5:7c:fd:dc:8b:61:d3:a4:
12:83:f5:bf:5d:cf:54:28:c1:9b:08:8a:22:65:f8:
8a:67:ad:f0:b7:12:87:b0:d2:f0:98:d3:c6:50:1c:
75:88:e7:13:b5:20:91:9d:4c:3b:eb:e8:3f:79:b8:
c7:c2:ad:58:1f:af:49:dd:73:c7:25:81:0c:48:87:
d4:b1:8f:bb:69:79:17:b5:0f:a5:34:69:31:83:ff:
d9:5c:2c:c4:20:9e:59:d7:6d:bd:bd:9c:75:e6:76:
23:c8:06:6d:ae:f6:c2:93:a9:23:80:fa:2d:bb:16:
74:da:59:0e:04:7e:89:41:83:33:cb:16:82:aa:7a:
f1:aa:16:d9:40:f4:8f:a8:e8:4e:99:64:b5:23:a1:
f7:b4:f0:f7:92:ba:0e:ba:24:35:f2:4e:cd:2b:08:
13:ed:03:7d:67:0d:f5:02:36:44:50:20:25:39:4f:
30:7c:11:21:e6:81:69:1b:dd:00:c9:a6:c9:15:5a:
b0:ee:00:8b:80:12:a9:bc:41:67:36:3e:b8:51:c1:
eb:ae:36:3e:d0:00:1a:08:05:9b:e5:6e:98:0d:d6:
95:77:33:fd:42:86:16:16:e1:92:ea:fd:42:55:2a:
d3:c7:1c:c0:8f:bd:9c:64:69:15:10:8f:a2:e0:60:
79:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C4:5C:BB:E6:C3:58:12:4C:B7:4A:60:FC:D0:31:E7:CB:1B:8E:33
X509v3 Authority Key Identifier:
keyid:A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:47:0e:bd:24:16:7b:27:26:fe:42:84:02:fa:e1:31:e5:59:
fa:c2:9d:9c:65:87:25:06:4a:74:88:36:8b:e6:42:31:60:95:
f7:4e:09:fc:ba:eb:83:5c:52:df:4e:d5:d7:31:8b:ea:ee:41:
23:4a:ed:a9:d8:bd:d2:20:85:c0:14:5e:19:cb:61:9e:5e:0d:
af:a3:27:89:fc:f7:f9:3d:9d:ea:0f:ab:b7:28:4e:a1:99:4d:
01:86:0c:cd:bf:db:23:4e:fd:ad:42:d0:11:54:16:8d:01:53:
64:ba:d0:f3:5a:d1:f8:fd:62:03:54:30:14:5c:6b:98:4a:70:
6e:46:ae:7a:84:f7:88:53:29:08:c5:0e:9e:dd:e2:5d:cf:60:
24:44:c0:d6:24:c4:a1:c1:91:50:f3:59:0e:e9:ba:0c:d5:ba:
e9:00:93:bd:53:4c:c3:ff:c0:c4:95:df:ed:9c:e1:3c:d2:35:
d4:60:a3:4a:99:48:53:92:94:28:12:c0:53:31:b0:b1:f9:72:
bc:c3:5b:1d:82:8a:d6:ea:77:7d:57:ed:cc:75:5a:24:96:49:
cb:c4:4e:c4:fd:f9:d9:8d:12:6e:72:00:45:3f:62:1a:0c:de:
44:ca:55:bb:51:59:90:09:ef:44:96:d9:d7:7e:d6:7a:09:80:
a3:8a:46:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:58:24 2026 by rpki-client