Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
File: obtQVKF8yU__wrwpWhW_74qQQwo.mft (raw, json)
Hash identifier: h6zUxOklUr+qpyDJ531OmcZaf3zwFIXiFW9kW8GPPpk=
Subject key identifier: 22:78:74:BF:16:7E:EE:56:33:46:86:19:FC:CC:3C:7B:72:1B:B6:57
Authority key identifier: A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A
Certificate issuer: /CN=a1bb5054a17cc94fffc2bc295a15bfef8a90430a
Certificate serial: 01A0D1FFE4F59A4ACA0D582FC21523E3AD68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
Manifest number: 0A82
Signing time: Thu 24 Sep 2026 06:00:03 +0000
Manifest this update: Thu 24 Sep 2026 06:00:03 +0000
Manifest next update: Fri 25 Sep 2026 06:00:03 +0000
Files and hashes: 1: 7PC27OPKTmB0TCcSiVXYJK9WFIs.asa (hash: yw12opdZtS3FAbe5nCehts1Uh2Vll7TupGePhAN8/WY=)
2: obtQVKF8yU__wrwpWhW_74qQQwo.crl (hash: xAc/kwmYk0BnYe8V5TCVglqCLoalkiN5vgCczO123Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:ff:e4:f5:9a:4a:ca:0d:58:2f:c2:15:23:e3:ad:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1bb5054a17cc94fffc2bc295a15bfef8a90430a
Validity
Not Before: Sep 24 06:00:03 2026 GMT
Not After : Sep 25 06:00:03 2026 GMT
Subject: CN=227874bf167eee5633468619fccc3c7b721bb657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:71:20:e7:19:9c:c2:fc:a5:b8:a8:2d:fc:65:
64:69:a0:50:76:e6:33:f1:4d:db:ec:38:af:70:6d:
86:f4:9e:9a:1b:4b:68:0b:79:63:b7:f9:e7:eb:10:
9f:62:0e:cc:21:d4:95:bc:a0:7f:29:f8:d5:3f:5a:
8c:c8:e4:ae:cc:6b:bd:15:c3:85:2f:47:e3:8b:13:
f7:ef:4e:ba:3a:70:ab:23:f8:d7:14:3c:60:75:5c:
5c:c7:6e:6a:a0:34:6d:ef:f3:b5:07:83:fa:dd:22:
7d:e0:fa:b8:58:45:3e:1a:28:cb:9e:63:f4:1a:cd:
19:4e:cd:ea:80:fa:11:05:7e:1e:66:c7:4b:e3:d3:
86:95:f0:f7:41:b8:be:7a:93:8e:20:5a:bb:12:3d:
62:3f:65:20:6a:21:2a:9c:14:fc:0c:80:31:d1:17:
d4:50:9f:72:a5:67:2e:23:88:0a:16:5f:d4:23:f0:
60:a2:41:f8:f8:82:58:f6:53:91:0c:43:69:6e:85:
7e:36:6c:d9:b7:81:12:7c:b6:c6:a5:d4:b5:99:b0:
a9:cf:e3:f6:68:51:ba:50:5c:e1:b1:c2:a6:ee:23:
2b:af:20:42:88:c5:6f:5f:ec:8e:cd:d0:9b:f8:b3:
d8:ab:58:8d:87:d5:d7:dc:b3:88:87:49:5b:06:9d:
78:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:78:74:BF:16:7E:EE:56:33:46:86:19:FC:CC:3C:7B:72:1B:B6:57
X509v3 Authority Key Identifier:
keyid:A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ac:63:a6:82:56:de:ca:c9:88:69:70:77:9b:e5:20:b0:63:
cc:83:d4:4b:95:71:fa:55:5b:37:4d:13:cb:78:eb:d2:a8:fa:
68:6f:6a:ef:28:ec:bd:c6:7d:c7:ac:c0:b6:44:b8:dd:8a:64:
df:0e:d7:30:e7:19:ee:03:65:50:a4:20:5a:60:c4:14:3a:f3:
99:d2:cd:10:d5:d5:cd:f2:40:35:3f:f5:1d:7d:1d:6e:22:aa:
1f:e7:e0:1f:68:34:76:98:b5:df:72:89:1e:90:b8:f3:16:c6:
d3:c3:62:c2:12:8f:86:23:f5:b8:af:16:79:1a:c3:6f:68:60:
81:5d:ea:fc:36:c4:56:09:eb:21:ac:29:25:4d:8c:1a:b7:7a:
f4:cb:87:6c:90:4d:4e:1e:80:49:4b:4a:89:12:a0:61:1d:7c:
af:69:66:23:56:6f:ad:ab:8c:67:76:cc:62:d4:35:7d:a3:4b:
d9:33:e9:a6:cc:cd:a4:4d:27:cf:ca:ca:41:39:ed:e5:3e:e5:
ab:e8:5f:7e:c2:dd:98:dc:0c:c9:37:01:ea:99:4a:02:8f:f9:
a2:80:df:54:11:38:15:d5:4a:e1:b2:a6:98:7a:3d:ad:a6:3a:
0f:72:34:3d:bf:66:6a:22:54:cd:bd:75:06:24:40:19:be:37:
41:c1:7b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:47:56 2026 by rpki-client