Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
File: OBbhmySn6M_xifq6wohSzYdIo4A.mft (raw, json)
Hash identifier: oepl9Jw9yPOiiotMeC8WAPkpAk6DjkaZUi7KpzDTy6Q=
Subject key identifier: F8:E5:51:57:43:49:CB:D4:B9:0A:3A:06:67:C2:B2:BB:A3:CD:76:CE
Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
Certificate issuer: /CN=3816e19b24a7e8cff189fabac28852cd8748a380
Certificate serial: 019D2696616FB7769F66B9E69CEEAA62F9E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 20:01:22 +0000
Manifest this update: Wed 25 Mar 2026 20:01:22 +0000
Manifest next update: Thu 26 Mar 2026 20:01:22 +0000
Files and hashes: 1: 10zU5k5ICxgrM5-Ip5yncI3GNGs.roa (hash: LEG/jSgiyt7BovVPDQkdWrVInvTbnRp5DG6v8hbqY1s=)
2: OBbhmySn6M_xifq6wohSzYdIo4A.crl (hash: XohBls/ztb31/GFj07IaLrTCLMSRcNsIKJ2k4DENuW0=)
3: QmWmoP1KHfrR9eTOqZ6x9ezRXSY.roa (hash: xqu4qFo0DMMx0+rjC1DPBvqtwUrbm4PocY0IAf7sGdo=)
4: pm2S8QCe4l9WpfwvU_iLSL0zIlI.roa (hash: siFYWGu9y7ejpY470okiO/aX4nO9BjP28kUxghwfExg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:61:6f:b7:76:9f:66:b9:e6:9c:ee:aa:62:f9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380
Validity
Not Before: Mar 25 20:01:22 2026 GMT
Not After : Mar 26 20:01:22 2026 GMT
Subject: CN=f8e551574349cbd4b90a3a0667c2b2bba3cd76ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:5f:ea:9d:db:4f:d8:0b:00:ef:5c:83:34:
48:50:41:2e:b8:2a:8e:df:07:42:40:1e:08:d4:d3:
f7:b9:01:9b:17:a7:29:d6:ec:8a:c5:55:11:1b:2b:
56:db:fa:ab:4d:e0:41:e4:a6:f1:d7:9d:62:d8:d4:
24:d2:09:cb:af:ed:bc:45:00:81:4b:50:6c:8e:56:
52:99:67:1d:c3:74:73:aa:2a:c4:0a:ea:d7:1f:e9:
b0:c5:f9:0f:08:b4:5d:60:fd:17:51:b7:e7:58:74:
bd:14:3c:86:09:54:14:5f:0a:1e:1c:21:5d:78:77:
f1:fc:43:ec:6b:38:40:c7:d5:47:d0:96:62:61:29:
6b:d9:c8:e2:f5:2c:3e:50:e1:e5:b7:ca:37:da:36:
ef:3c:21:c9:ec:49:e9:2a:fd:94:dc:6f:99:2a:0d:
f4:68:25:6e:63:ef:e8:28:ba:ce:80:9b:16:96:03:
7d:27:19:3c:27:64:8d:d5:42:0b:20:e1:2a:91:a9:
52:2c:a8:e0:c5:e0:a0:43:c6:6f:17:5a:ef:78:6e:
23:6d:5a:37:74:1a:02:39:1a:49:8c:f2:16:bd:5a:
d2:0a:aa:3c:57:f8:d7:ed:6e:fc:bc:3f:7a:f4:b8:
2a:13:2f:11:48:0a:1e:7c:82:17:41:9d:ba:b5:6e:
03:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E5:51:57:43:49:CB:D4:B9:0A:3A:06:67:C2:B2:BB:A3:CD:76:CE
X509v3 Authority Key Identifier:
keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cf:b3:c2:1f:e2:bd:7b:29:45:1a:34:59:b3:26:13:80:95:
94:91:5b:ea:f1:d7:3d:ff:3a:91:c2:d8:9d:71:3a:85:1a:0d:
ce:83:88:79:af:43:40:e3:19:6d:76:13:41:a6:c0:d4:6a:6a:
a4:4d:85:bc:a8:0c:a3:5a:8b:84:03:fd:b7:9d:c2:63:9b:44:
1a:2f:eb:68:e8:4a:77:80:55:d8:8b:a4:7e:89:dc:0d:62:61:
06:01:b1:21:35:6c:01:b5:e3:1f:74:5e:eb:51:c7:cf:c6:57:
48:19:d1:79:e3:05:01:02:54:41:c7:e6:ec:64:5f:70:1f:f0:
3e:2b:87:bf:5f:a4:ce:86:1e:73:bb:5e:f2:50:12:f4:7b:22:
38:75:79:d4:9f:02:41:c2:a4:de:d8:7f:ee:34:16:be:7a:ca:
07:9d:a4:60:8d:d0:7a:1c:6e:29:f9:ae:5e:94:73:fa:96:3f:
8d:e3:b8:7e:1c:52:f5:f3:5b:60:41:8e:6c:c6:8d:92:82:65:
fa:15:30:8d:2f:f3:70:91:e1:ed:45:09:c6:96:36:d0:4f:c4:
96:b9:b4:f3:72:3a:0b:65:c9:e3:fd:0e:91:a5:25:de:84:f1:
31:72:eb:d2:7a:c1:0f:c4:a9:7c:81:72:50:44:99:6c:71:1c:
75:e4:04:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:18:41 2026 by rpki-client