Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
File: OBLJfb0yGVtq-pEUC1UgteDCxb4.mft (raw, json)
Hash identifier: mCzWodbiJRkqdAjEFlGr/RcRo2cakUV/mGnfHM5MKqQ=
Subject key identifier: 8A:16:5D:CA:56:51:94:28:3F:9A:E1:F3:33:DB:97:40:BA:9F:44:06
Authority key identifier: 38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
Certificate issuer: /CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Certificate serial: 019D9B87DED9DC315867CE222C4888269A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
Manifest number: 1608
Signing time: Fri 17 Apr 2026 13:01:05 +0000
Manifest this update: Fri 17 Apr 2026 13:01:05 +0000
Manifest next update: Sat 18 Apr 2026 13:01:05 +0000
Files and hashes: 1: OBLJfb0yGVtq-pEUC1UgteDCxb4.crl (hash: Pc9qQi0pEtj25Ifhhg5FEFyXPDq5BQRpA+9Ubsw4CAA=)
2: nyzykzCSciL9b7XcY2Eb25U1248.roa (hash: y0AO2J7wuOu2+dkp56Hwq0efMMez1I5zXW1sHLiGxC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:de:d9:dc:31:58:67:ce:22:2c:48:88:26:9a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Validity
Not Before: Apr 17 13:01:05 2026 GMT
Not After : Apr 18 13:01:05 2026 GMT
Subject: CN=8a165dca565194283f9ae1f333db9740ba9f4406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:c1:e0:29:25:47:19:5e:54:d5:f3:39:bc:
bc:45:6c:37:77:a8:0b:e7:e6:4b:ad:38:03:73:c0:
45:18:d6:c9:3e:97:5b:5f:54:9d:9f:c8:46:a0:2b:
b6:39:e2:fe:0c:10:02:41:18:a6:9f:f5:f4:b0:34:
b9:a7:55:1e:1b:1d:09:9c:87:b5:c8:4d:06:39:cd:
03:81:f7:12:b9:e4:eb:b8:6b:86:25:2b:17:68:33:
68:6c:73:15:05:c0:c1:2e:68:8a:bf:cf:2e:57:2a:
12:b9:1c:9d:45:6b:c2:96:05:0b:d0:0d:37:99:fd:
ce:9d:71:85:b7:51:4b:6f:24:12:d1:aa:90:ce:c8:
65:8c:37:d4:02:5a:e4:84:46:c6:39:a2:f0:42:9f:
1b:5b:ae:db:e9:6f:57:4d:fc:3d:e6:6d:70:97:b9:
54:42:69:1e:46:44:a6:4c:a9:88:22:a9:28:f2:03:
ca:11:89:67:b6:a9:9e:8c:10:92:ff:ba:75:ef:75:
b4:ac:66:b5:29:90:ff:a6:21:a8:96:ad:d4:69:61:
ef:e8:60:24:bd:98:e2:13:cd:3a:0c:44:aa:03:5a:
02:fc:24:df:fe:7b:4c:3c:be:75:68:4e:5f:bb:78:
0b:6b:d3:a8:de:89:5e:f7:70:90:ed:f3:ec:1c:71:
cd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:16:5D:CA:56:51:94:28:3F:9A:E1:F3:33:DB:97:40:BA:9F:44:06
X509v3 Authority Key Identifier:
keyid:38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0e:c2:0c:df:34:e2:2f:89:32:77:87:47:b1:4e:0e:3e:9a:
ce:a5:f3:0f:a5:96:08:0c:4f:1e:07:3b:24:7d:8f:8a:1f:51:
0d:55:9e:b8:41:06:41:f0:c7:fe:f5:57:c6:42:69:a2:f1:78:
92:66:2a:2d:9e:f7:6b:a8:08:79:b7:95:63:5e:78:0e:d3:92:
89:38:79:1e:07:e3:67:17:ef:75:44:c1:3b:e7:b6:64:1a:af:
26:cc:cf:2a:ce:b4:b8:e1:c7:59:38:57:19:93:57:e8:ac:f8:
29:c6:92:91:48:1b:b2:31:6d:85:9e:2e:15:c9:2d:c7:f1:4e:
df:57:1e:e2:9d:e9:65:41:c7:3e:70:ff:a7:30:5f:58:b0:c6:
bf:97:db:4b:e8:1d:8f:65:40:2c:0a:33:53:ed:80:0a:db:8f:
1b:ff:ce:1d:e2:55:c5:b6:1d:3e:27:ef:f2:fc:a4:bc:b3:f0:
5b:39:f3:91:83:6b:f0:2d:04:ee:d0:37:38:7a:72:f2:b0:62:
86:64:fe:d2:4a:4e:f0:83:de:28:a5:b4:01:f3:5e:9a:80:74:
d1:ee:7d:18:37:8c:a3:a2:e1:c5:f6:84:b8:36:43:a0:cd:9f:
01:ab:0e:cb:a7:2d:66:cd:fd:88:e7:6c:bb:bc:56:7f:25:cd:
8d:b7:41:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh97Z3DFYZ84iLEiIJppRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MTJjOTdkYmQzMjE5NWI2YWZhOTExNDBiNTUyMGI1ZTBj
MmM1YmUwHhcNMjYwNDE3MTMwMTA1WhcNMjYwNDE4MTMwMTA1WjAzMTEwLwYDVQQD
Eyg4YTE2NWRjYTU2NTE5NDI4M2Y5YWUxZjMzM2RiOTc0MGJhOWY0NDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/nB4CklRxleVNXzOby8RWw3d6gL
5+ZLrTgDc8BFGNbJPpdbX1Sdn8hGoCu2OeL+DBACQRimn/X0sDS5p1UeGx0JnIe1
yE0GOc0DgfcSueTruGuGJSsXaDNobHMVBcDBLmiKv88uVyoSuRydRWvClgUL0A03
mf3OnXGFt1FLbyQS0aqQzshljDfUAlrkhEbGOaLwQp8bW67b6W9XTfw95m1wl7lU
QmkeRkSmTKmIIqko8gPKEYlntqmejBCS/7p173W0rGa1KZD/piGolq3UaWHv6GAk
vZjiE806DESqA1oC/CTf/ntMPL51aE5fu3gLa9Oo3ole93CQ7fPsHHHNHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoWXcpWUZQoP5rh8zPbl0C6n0QGMB8GA1UdIwQY
MBaAFDgSyX29MhlbavqRFAtVILXgwsW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0JMSmZiMHlHVnRxLXBFVUMxVWd0ZURDeGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jYjUzZmMtNzA5Ni00NTk0LTkxYjEt
ZDkyNzg1YTYxMjE5LzEvT0JMSmZiMHlHVnRxLXBFVUMxVWd0ZURDeGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jYjUzZmMtNzA5Ni00NTk0LTkxYjEtZDkyNzg1YTYxMjE5
LzEvT0JMSmZiMHlHVnRxLXBFVUMxVWd0ZURDeGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQ7CDN80
4i+JMneHR7FODj6azqXzD6WWCAxPHgc7JH2Pih9RDVWeuEEGQfDH/vVXxkJpovF4
kmYqLZ73a6gIebeVY154DtOSiTh5HgfjZxfvdUTBO+e2ZBqvJszPKs60uOHHWThX
GZNX6Kz4KcaSkUgbsjFthZ4uFcktx/FO31ce4p3pZUHHPnD/pzBfWLDGv5fbS+gd
j2VALAozU+2ACtuPG//OHeJVxbYdPifv8vykvLPwWznzkYNr8C0E7tA3OHpy8rBi
hmT+0kpO8IPeKKW0AfNemoB00e59GDeMo6LhxfaEuDZDoM2fAasOy6ctZs39iOds
u7xWfyXNjbdBuQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:56:40 2026 by rpki-client