Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
File: OBgMB0--WYgkxwAxlbMKpKNmFSw.mft (raw, json)
Hash identifier: +PhmW9Yq7Bw+JT67W+Lekg+Fjl5ciK3OguL3Lm0t5rw=
Subject key identifier: 2D:8D:BE:54:69:D8:B1:2C:49:B9:A9:1B:B3:41:3B:8C:6E:A4:A2:20
Authority key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
Certificate issuer: /CN=38180c074fbe598824c7003195b30aa4a366152c
Certificate serial: 019D26CCFCC65B7EF80FA9E59E93CA91EA12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
Manifest number: 1526
Signing time: Wed 25 Mar 2026 21:01:01 +0000
Manifest this update: Wed 25 Mar 2026 21:01:01 +0000
Manifest next update: Thu 26 Mar 2026 21:01:01 +0000
Files and hashes: 1: FTU-IVO2NNBlXW4Q2EwJJORm_is.roa (hash: yMyznpEegGljCcs/jnznmQ+oneu3veLngWC/HBD66uk=)
2: OBgMB0--WYgkxwAxlbMKpKNmFSw.crl (hash: OQsk5hO130KG8MBeIWnd7r+EJ7w3cuw2pFFOQDAEOrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:fc:c6:5b:7e:f8:0f:a9:e5:9e:93:ca:91:ea:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38180c074fbe598824c7003195b30aa4a366152c
Validity
Not Before: Mar 25 21:01:01 2026 GMT
Not After : Mar 26 21:01:01 2026 GMT
Subject: CN=2d8dbe5469d8b12c49b9a91bb3413b8c6ea4a220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:11:11:eb:08:be:ae:ca:4f:1b:32:b1:77:8f:
08:f3:40:84:16:15:76:1f:44:71:ae:3e:37:d2:1b:
62:70:0a:50:ff:1a:d9:50:6f:1a:99:7b:0a:e0:e7:
20:89:5b:18:c1:0a:d7:06:55:f8:32:81:97:17:2f:
da:65:7a:34:b4:f7:d1:b7:83:45:d2:71:d3:f4:5a:
42:04:1e:cf:21:3e:7e:59:f3:50:8f:e9:d4:ee:96:
61:2d:7a:84:c4:62:7d:25:ed:53:63:81:ec:fb:81:
55:92:51:fe:1c:28:5d:40:d9:21:eb:e2:0a:42:21:
80:ed:3e:12:c1:56:c7:c1:3b:52:a0:02:0a:1e:8d:
f8:c8:19:1e:94:cf:c1:e5:1b:da:ef:d7:95:5b:2f:
09:c2:07:a4:a6:e9:fc:b4:c6:1a:e2:89:a1:7f:ab:
59:2f:a0:d0:a1:f7:6b:34:43:f5:73:4a:b5:d6:38:
cc:2d:bf:1a:5c:09:39:56:21:11:96:10:c5:eb:d4:
ae:56:80:70:8e:43:cb:a2:6c:6a:94:ac:10:36:c7:
f6:a7:bf:08:7c:df:ca:61:ab:b7:12:d8:53:47:8a:
49:30:9e:76:97:07:96:f6:7c:f7:07:c0:6c:3a:1c:
2f:53:59:2a:16:d9:d4:5f:bd:ad:90:a2:9d:ef:ba:
04:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8D:BE:54:69:D8:B1:2C:49:B9:A9:1B:B3:41:3B:8C:6E:A4:A2:20
X509v3 Authority Key Identifier:
keyid:38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:75:72:5b:4b:6b:42:64:b7:96:d4:a8:e6:24:c5:5b:77:e3:
ad:33:3f:5e:34:18:61:54:1a:50:3a:8e:be:ba:c6:49:e6:8a:
bd:af:d0:fe:fa:0d:9f:45:90:03:c3:95:9a:7b:2d:0c:f7:12:
39:b9:1f:30:65:62:8c:bc:3e:bf:f1:cc:1d:8b:d6:d2:10:1d:
71:89:6c:b8:64:a0:95:3b:b9:02:24:6b:ee:90:a0:fb:65:9f:
33:76:ac:b4:60:7b:9a:40:52:df:7b:cf:d6:08:8b:d4:25:9b:
5f:94:92:ba:ed:93:f1:79:c9:86:7c:4f:5c:05:97:f5:55:d3:
1b:c5:20:ae:dd:3f:ea:7d:91:40:2e:a4:d9:bc:cd:bf:5d:ab:
5c:db:fe:9c:da:fb:dc:d2:35:e0:18:7f:3e:9d:34:44:f5:2d:
07:af:f2:fc:02:dd:79:3e:51:42:93:89:06:1d:4f:94:bd:b3:
11:01:3b:3f:ee:c9:97:df:e3:4b:20:d7:12:64:02:db:d4:56:
41:35:04:6d:12:cf:8c:5c:e5:c7:cb:1f:dd:65:74:2c:fb:08:
47:f5:7b:59:9c:f3:4a:0b:4b:81:cf:dc:5f:5b:31:91:32:ed:
be:31:6b:84:26:72:e3:d5:72:36:b6:45:47:bc:57:12:20:6a:
ac:64:75:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:56 2026 by rpki-client