Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
File: obeZgyScHV-GGfE1xtbn43379WI.mft (raw, json)
Hash identifier: onP+RIytpzP2eWC6eIaSi17wDge0ISCuJBUxMzVGB5k=
Subject key identifier: 07:04:15:10:C8:77:91:DC:CE:9A:47:1C:C2:53:1F:B5:18:3B:2B:6A
Authority key identifier: A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62
Certificate issuer: /CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562
Certificate serial: 019D98F452867328099D25A95744CC16E323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
Manifest number: 10C5
Signing time: Fri 17 Apr 2026 01:00:41 +0000
Manifest this update: Fri 17 Apr 2026 01:00:41 +0000
Manifest next update: Sat 18 Apr 2026 01:00:41 +0000
Files and hashes: 1: obeZgyScHV-GGfE1xtbn43379WI.crl (hash: amAiNi3ZqUZJ5fBTZ7jmvPFNFkwTG4j/yFm9i/JyEGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:52:86:73:28:09:9d:25:a9:57:44:cc:16:e3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562
Validity
Not Before: Apr 17 01:00:41 2026 GMT
Not After : Apr 18 01:00:41 2026 GMT
Subject: CN=07041510c87791dcce9a471cc2531fb5183b2b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:36:5d:b3:77:38:4d:d2:5a:b5:3a:65:f8:
e9:1c:6e:c8:fb:1a:e1:76:a1:eb:87:ed:7f:eb:e7:
76:57:84:7b:f6:a9:57:98:6f:af:55:03:33:63:f5:
9d:85:d3:92:72:08:4b:70:fd:e1:d4:84:36:72:07:
83:fb:42:ce:cd:6e:e2:be:3a:b2:bb:0a:53:76:b9:
42:9f:b0:25:42:a6:e7:79:78:cf:6b:fd:fa:21:2a:
f3:82:f6:3b:32:72:05:46:77:fc:05:87:79:41:8e:
f5:ec:2d:3b:f8:b4:c8:66:45:80:8b:e1:70:7a:5d:
99:85:23:a5:97:7c:09:8e:8b:46:1b:47:aa:be:6f:
e2:8d:ef:24:12:01:c2:f4:b5:e3:a4:cd:b1:29:de:
98:16:9f:46:bb:19:2c:fe:ae:d5:c0:50:fe:be:f8:
61:1f:75:11:3e:05:dd:de:98:64:92:42:01:4c:f9:
e3:f5:6a:f1:17:3a:b9:10:2d:69:8b:6b:94:45:47:
c2:30:45:d4:6b:31:93:46:b3:62:61:0d:44:ef:50:
cd:ea:09:3e:69:65:ac:9c:93:12:79:dd:1f:5e:43:
b4:a1:c3:15:7f:e2:41:f8:8c:8f:4d:36:a2:7e:04:
36:0b:8b:98:bd:db:81:4d:0f:40:53:b5:05:6b:ea:
3f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:04:15:10:C8:77:91:DC:CE:9A:47:1C:C2:53:1F:B5:18:3B:2B:6A
X509v3 Authority Key Identifier:
keyid:A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f2:27:00:3f:41:70:4a:ed:f8:c1:3b:d1:31:10:dd:aa:49:
ee:09:ce:0b:dc:e8:a1:e9:f0:d4:a6:0b:88:8e:e9:17:30:72:
97:fc:89:cb:f8:7b:ab:d3:07:95:7c:32:e5:75:ff:36:0b:cb:
13:fc:eb:7c:2d:74:7a:82:9f:ef:cd:e1:4a:8a:2c:ae:a6:b9:
a0:b4:18:17:3e:1d:11:65:30:b7:56:7c:5b:08:c6:42:b4:0f:
2e:2d:0b:c2:07:6f:4d:27:09:dd:02:16:d5:d9:52:05:bc:05:
13:fa:68:9f:c5:a9:cb:7d:b9:81:20:e7:47:90:c4:bc:c5:04:
c0:6c:a0:37:67:2a:a6:c1:60:c0:23:4a:3e:ff:7c:4b:69:06:
f3:be:69:42:bf:52:eb:e1:15:e7:c4:03:cc:85:fb:e8:6a:a4:
61:92:ce:df:5a:9b:51:8f:ea:d8:d1:54:87:97:e6:9a:77:c3:
1a:a6:69:19:c7:52:87:01:65:bc:3e:8a:7c:b3:b7:63:58:29:
67:af:a1:88:84:23:d4:98:95:23:da:3c:ce:25:13:1e:f4:f5:
28:be:49:77:5b:2b:d5:ad:20:60:df:2e:6c:13:8d:f6:83:96:
d5:2f:3e:56:1f:4d:c4:81:31:c4:d8:32:3a:b6:6a:07:6f:42:
8a:dc:26:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:08 2026 by rpki-client