Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
File: obOdgkR51Np7EvZcFeXEJyX1Jgs.mft (raw, json)
Hash identifier: ma22YfaeCelHhcQuimSgJ4Ws5pTFZXaTcLqbMQetrsk=
Subject key identifier: C9:A1:D6:ED:A8:E7:A1:F1:BB:10:4F:4C:FE:24:01:DD:E4:5A:99:A2
Authority key identifier: A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
Certificate issuer: /CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Certificate serial: 019D273ACF3FF8A0C910D865A0189DA618B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
Manifest number: 131C
Signing time: Wed 25 Mar 2026 23:00:58 +0000
Manifest this update: Wed 25 Mar 2026 23:00:58 +0000
Manifest next update: Thu 26 Mar 2026 23:00:58 +0000
Files and hashes: 1: ckHYyGr3Mw8Qija2YP60OUa1ew0.roa (hash: ublouyar7OpXVPh6lwDgL3vowMyRYwZv2+erG4mp4zU=)
2: obOdgkR51Np7EvZcFeXEJyX1Jgs.crl (hash: cEtIbDHhs8dGqyAIXqCO+ezvfjmjlgRkhxc8guSZU2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:cf:3f:f8:a0:c9:10:d8:65:a0:18:9d:a6:18:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Validity
Not Before: Mar 25 23:00:58 2026 GMT
Not After : Mar 26 23:00:58 2026 GMT
Subject: CN=c9a1d6eda8e7a1f1bb104f4cfe2401dde45a99a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:c8:ae:11:c3:e5:40:b4:0b:87:77:ee:d1:
ca:e2:b2:1d:f5:a8:c4:81:03:eb:8b:fc:22:58:49:
5c:d4:55:c5:26:4f:74:29:72:45:98:fe:f4:b9:65:
2e:86:3d:44:39:33:6b:34:f5:6d:28:a8:12:ac:64:
ac:bd:47:d3:a5:f4:a2:38:72:65:26:d1:58:dc:bb:
d5:7f:4c:2d:7d:06:b8:06:50:e7:c2:54:5f:6b:d9:
03:33:c0:c2:4b:d7:86:95:d9:ac:d6:a2:17:12:62:
29:c8:a0:71:d7:62:e9:63:69:cf:89:bc:91:db:98:
84:c9:d1:d8:32:d6:c0:98:3f:1e:cf:46:70:19:7c:
a4:d8:5d:24:aa:20:16:2b:92:72:24:dc:46:b3:e3:
a5:1c:5d:5c:7f:19:96:e9:d5:2e:f6:fa:06:f5:8c:
4f:e4:a1:a2:00:86:a6:28:a8:cd:bf:b1:29:81:5b:
5e:52:6b:5c:52:86:16:6a:a1:33:7f:33:b6:96:e4:
9a:2d:b5:c0:59:ac:6b:0b:48:35:73:d5:35:6e:3f:
2c:09:a3:33:89:9b:37:c6:54:24:fa:e1:66:d3:ce:
34:b9:50:40:b0:fb:f0:aa:8e:d0:9c:01:0a:ae:82:
e9:2b:2f:02:44:0d:6b:31:f8:38:77:a2:04:a8:72:
7b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A1:D6:ED:A8:E7:A1:F1:BB:10:4F:4C:FE:24:01:DD:E4:5A:99:A2
X509v3 Authority Key Identifier:
keyid:A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2d:ad:59:de:fc:10:69:9b:b2:83:ad:d3:5d:f1:12:79:d1:
cf:6b:af:f1:d2:e7:01:d6:25:62:c6:8d:91:ab:d4:10:a7:21:
54:05:93:75:2e:5a:16:27:23:bf:29:e9:8f:a4:8a:50:6a:5a:
c0:84:4d:7f:d5:e4:43:1f:b7:ca:41:4b:e8:5f:f3:81:53:25:
17:16:3e:9d:2d:d6:bb:b1:f0:d9:98:38:0e:47:69:1d:b7:3a:
5e:c2:77:95:b3:78:24:28:c9:96:80:8b:b0:5c:c9:ae:d5:48:
95:01:62:d7:6e:a0:2a:19:19:a3:a2:40:71:4c:e5:30:79:47:
25:11:2e:9b:13:36:28:fb:09:06:d3:c1:2b:6e:76:1b:d6:26:
56:7f:b5:e1:fa:cd:e3:1b:6d:b1:9d:ab:cd:99:0a:73:cf:ce:
08:86:b0:42:15:0a:dd:23:fd:d4:e1:36:67:46:e0:10:b8:8a:
ff:e9:12:d7:40:b7:2b:03:7a:70:73:b2:8d:23:e7:5c:70:e1:
b4:8f:69:fe:4b:79:fe:b1:73:79:28:39:ec:3f:d0:45:e4:ce:
98:38:db:d2:93:93:1b:80:a4:dd:75:cb:68:28:9b:3c:2f:2c:
a9:e3:eb:1c:db:f1:af:ca:b5:49:ad:59:2d:76:f9:1d:9b:01:
ed:29:ae:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:38:11 2026 by rpki-client