
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
File: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft (raw, json)
Hash identifier: gOVlBAAopxD5bXB+igX8TBTGOad7+gMIwbHSI1RJGEs=
Subject key identifier: AB:31:6C:95:A9:5D:CA:E2:0B:E6:A6:BC:20:FB:1A:28:18:D7:5D:49
Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
Certificate issuer: /CN=dce6e13e413baf381b625131e924e947843436f5
Certificate serial: 019D9850B6A2504A68AE124E1D290B85F8FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
Manifest number: 0D50
Signing time: Thu 16 Apr 2026 22:01:59 +0000
Manifest this update: Thu 16 Apr 2026 22:01:59 +0000
Manifest next update: Fri 17 Apr 2026 22:01:59 +0000
Files and hashes: 1: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl (hash: E7ZRXooRCI9ZEsrG2wc+wsD0PaNBopGrKsH0Q2n3hWw=)
2: WaiBRN4zqeNTstFb2Bj7FDDnj4A.roa (hash: R2F3HKnWVo0NsS1fo82XPlwTKBu5M4Ho2YxFKIfZuWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:b6:a2:50:4a:68:ae:12:4e:1d:29:0b:85:f8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce6e13e413baf381b625131e924e947843436f5
Validity
Not Before: Apr 16 22:01:59 2026 GMT
Not After : Apr 17 22:01:59 2026 GMT
Subject: CN=ab316c95a95dcae20be6a6bc20fb1a2818d75d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:94:3c:7e:86:ab:99:d7:1a:4b:92:0a:fa:97:
24:91:d1:98:2f:98:02:c9:30:05:eb:a3:04:8f:46:
49:0a:c9:5f:00:25:cb:98:e9:ae:eb:48:09:c7:03:
b3:dc:17:ca:32:05:03:e2:02:08:55:25:1c:f8:56:
56:10:80:b5:3a:43:4c:aa:09:f6:ba:bf:39:ce:d3:
85:eb:54:15:24:d9:4d:a1:06:12:8f:88:e4:c9:50:
79:3e:5c:0f:d2:0d:58:4d:71:5b:5a:73:33:66:71:
c4:14:cb:fa:7e:c4:f3:00:be:fb:b2:89:a0:68:68:
1a:8c:f5:ab:94:0d:98:f4:dc:92:c1:f4:f2:76:fd:
79:35:0c:11:bf:92:f9:4b:e5:52:fe:1d:af:d5:d1:
6f:ce:0e:4c:e7:9a:92:90:fd:cb:02:61:fa:4b:67:
bc:9b:37:07:a7:e2:36:11:14:72:68:14:12:17:55:
72:a8:d4:8e:70:be:99:77:9c:bf:28:df:ba:22:ac:
a7:06:08:7d:ff:f9:ff:e8:23:c3:e4:50:1a:bc:a5:
6d:ce:15:da:d1:d6:4b:a4:0f:31:5b:76:63:97:88:
e5:c8:08:e4:41:45:40:88:0d:50:ff:f5:be:9e:4f:
69:f6:24:aa:1a:2f:7f:1c:3a:51:e5:01:5b:d4:e5:
cc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:31:6C:95:A9:5D:CA:E2:0B:E6:A6:BC:20:FB:1A:28:18:D7:5D:49
X509v3 Authority Key Identifier:
keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:72:53:cc:65:b8:1c:48:6c:e8:3a:42:b3:5f:7a:be:93:e0:
c2:77:f8:dc:e9:f0:90:78:c7:10:42:71:19:6a:6f:cc:f9:4c:
6b:64:22:ba:00:41:ae:50:5c:dc:40:fc:30:b7:b0:6e:ee:7b:
19:8d:0c:ec:94:9d:30:44:47:fa:32:d2:4a:24:ab:42:28:52:
c0:5e:5a:42:c2:31:6d:64:ad:65:06:6b:21:02:1e:bc:7e:00:
52:e8:fb:32:ba:2a:78:f9:dd:f6:b9:a9:2d:49:fb:df:c9:12:
a5:02:d5:49:8c:c0:51:26:87:16:e2:8f:1c:4b:34:95:3b:ad:
94:51:c7:29:3c:70:61:46:aa:fd:1d:09:f9:3f:41:15:5b:45:
ae:09:be:c6:2a:ac:50:2d:45:2f:33:95:5c:96:bf:bf:d4:96:
23:2f:6a:d2:95:39:2f:31:32:06:b5:70:86:2a:d0:31:8b:bc:
65:59:3c:91:df:1a:4c:4d:43:62:ed:4d:fe:d8:ea:d8:bd:81:
08:86:b1:50:4c:dc:f7:af:9b:36:1a:b7:ff:90:2e:08:9b:de:
8b:bb:34:58:21:7f:45:91:3b:ce:52:4d:35:28:c7:4f:da:75:
3d:ba:e9:b2:e7:79:0e:e7:ce:1b:8d:07:41:a4:1d:9e:db:b8:
17:91:31:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:03 2026 by rpki-client