Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
File: obeZgyScHV-GGfE1xtbn43379WI.mft (raw, json)
Hash identifier: GPWTJlOAQLdSaFMmKBaiyzYBSTtPN/WoAacidvuj9uo=
Subject key identifier: 1A:4F:41:24:4A:E8:55:CA:4E:4C:11:53:76:80:BF:7C:ED:D8:FA:9B
Authority key identifier: A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62
Certificate issuer: /CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562
Certificate serial: 019CAB6AE160E88F1123E4EE26E801DE7FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
Manifest number: 104A
Signing time: Sun 01 Mar 2026 22:00:34 +0000
Manifest this update: Sun 01 Mar 2026 22:00:34 +0000
Manifest next update: Mon 02 Mar 2026 22:00:34 +0000
Files and hashes: 1: obeZgyScHV-GGfE1xtbn43379WI.crl (hash: Fi37Dptw4DALhv01RWMO9uvd4JIn36BUT86vPu1W3ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:e1:60:e8:8f:11:23:e4:ee:26:e8:01:de:7f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562
Validity
Not Before: Mar 1 22:00:34 2026 GMT
Not After : Mar 2 22:00:34 2026 GMT
Subject: CN=1a4f41244ae855ca4e4c11537680bf7cedd8fa9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dd:7c:92:83:12:fa:91:16:46:24:ed:32:f1:
5a:fb:da:1b:a1:13:d2:6a:be:ae:4a:b3:2c:01:63:
fe:11:2f:dc:8a:9e:85:30:c8:7e:00:3e:18:97:89:
1f:1d:67:41:b3:66:45:e2:41:dd:8c:3d:94:a7:6c:
01:b1:e0:01:e2:23:68:e0:b1:fd:ed:e6:35:05:04:
af:40:2f:b9:b8:d6:3f:ab:30:93:a6:b4:22:f6:a5:
ca:08:c8:19:68:3e:96:1d:ea:a8:5d:6e:9b:16:05:
86:f0:c2:78:f9:83:a6:bb:74:17:28:59:ed:65:86:
49:aa:dd:68:94:56:6c:92:b0:d2:8f:98:e3:81:7c:
a5:d5:13:ca:be:d7:e8:03:e9:a8:e1:4e:73:3d:90:
2c:db:ed:24:99:0e:e2:07:82:67:a3:c0:46:47:03:
6b:fd:1e:9e:96:0e:c3:64:28:aa:c8:47:64:29:0b:
91:8a:eb:89:d6:45:d8:4f:bb:b5:ca:f6:79:6a:cc:
c8:2c:8c:a2:0b:29:67:06:a8:7d:4d:f9:e8:4a:80:
a3:b1:3a:ce:22:cc:9d:0d:46:ed:25:78:e7:a4:d5:
bd:e5:4c:ce:de:88:a5:0d:8e:46:fa:94:54:de:09:
08:79:be:f8:48:6f:19:cc:d7:5c:4a:04:08:af:34:
89:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4F:41:24:4A:E8:55:CA:4E:4C:11:53:76:80:BF:7C:ED:D8:FA:9B
X509v3 Authority Key Identifier:
keyid:A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e5:1f:48:e1:a9:f9:ec:38:5c:a8:09:ac:8e:45:51:6c:13:
13:67:67:63:a2:8e:ec:f0:92:20:62:7d:e9:98:d7:2f:02:79:
45:4f:2c:b2:b4:b7:90:12:e9:e7:2c:d7:62:08:9d:36:69:4c:
dd:9d:f9:56:5b:d2:c3:2d:12:97:57:e8:03:d9:18:be:b5:ba:
c5:a2:60:6e:9f:09:41:b4:4d:d8:e4:0b:b4:b0:05:7c:c4:12:
34:ba:7f:fc:ad:3f:c8:03:0d:ca:79:24:95:9a:92:50:26:9c:
ea:0e:ac:a3:38:29:0a:46:7f:40:e7:f1:6a:3e:94:4c:1c:a3:
b1:33:5f:1f:9f:d0:c2:81:6b:26:94:25:98:42:0f:c5:cd:55:
22:bd:5a:a3:e2:79:7f:91:a0:36:d5:e6:38:cd:3f:b2:f6:dd:
38:1a:1a:71:1a:87:0c:90:bd:34:b3:34:00:fe:21:b5:06:64:
74:e2:d9:45:59:18:c0:2f:3b:9f:e4:55:5f:7b:ea:18:7b:d3:
97:7c:e9:e0:48:e3:db:1c:0e:ea:93:4a:2a:a8:8d:ce:a7:37:
91:df:0c:00:e7:4c:35:bf:ed:cc:1e:54:64:38:93:33:02:d6:
b6:c5:4c:1c:f6:27:a7:b1:16:c5:09:fc:d2:0a:a8:d2:f2:e1:
42:c6:cc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:57 2026 by rpki-client