Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
File: aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft (raw, json)
Hash identifier: ov0kzdIpzTuILwe34hQSLs0SKi5E2I61wFnBxXn3qL0=
Subject key identifier: 0B:E7:B0:EA:F8:56:D0:D6:40:3D:33:C4:C9:88:8C:02:FB:7A:A7:5B
Authority key identifier: 68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
Certificate issuer: /CN=68e078b5181be5fbe914b412a412096bc8d71549
Certificate serial: 019D26CCD87931D4AAC201B7E735D3114B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 21:00:52 +0000
Manifest this update: Wed 25 Mar 2026 21:00:52 +0000
Manifest next update: Thu 26 Mar 2026 21:00:52 +0000
Files and hashes: 1: 6nS7ChSMwS0NiVMZWHlnkhrttP8.asa (hash: iXhlJdpfjIUYJ5YZ/S4lqTUks7mtZzgak62hVEHY6bM=)
2: aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl (hash: CPgR0m2bS8O3mRzxEwps6qpNXf9BD4cY+bIcHZlF6Qs=)
3: kh97mCRCb1gM-n6T2L16tRWt1No.roa (hash: Uv7w0anQc7bmfRwWtut6B/CD6qt0gTfBsNdk/bWiZ00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d8:79:31:d4:aa:c2:01:b7:e7:35:d3:11:4b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e078b5181be5fbe914b412a412096bc8d71549
Validity
Not Before: Mar 25 21:00:52 2026 GMT
Not After : Mar 26 21:00:52 2026 GMT
Subject: CN=0be7b0eaf856d0d6403d33c4c9888c02fb7aa75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:09:94:6b:75:99:10:6d:1f:6e:78:fa:14:
87:e0:82:c6:09:39:bb:f3:b3:be:a3:18:9f:f0:74:
eb:78:cc:c8:9a:62:7b:74:e3:c1:a7:d1:19:50:4e:
90:e0:07:bd:ed:a7:fb:b3:78:a3:1a:58:e3:38:5e:
8b:18:04:19:f0:e1:50:ea:59:83:cf:90:f7:7c:95:
f1:76:07:f3:45:3b:9c:97:44:36:65:d6:f0:34:aa:
c5:fe:3b:03:5a:c7:45:b0:89:df:0f:68:8f:96:87:
3a:cd:52:9f:63:98:69:eb:ba:aa:b6:fb:9e:74:bb:
57:66:04:cf:d7:a5:f2:5d:df:07:bd:ad:10:d9:3a:
1c:1f:d7:1a:aa:43:16:2e:fb:69:45:4c:0d:60:3c:
c0:03:f0:0c:25:23:d3:75:c0:bd:13:f1:d3:47:06:
3b:c7:6d:c2:d7:e7:d0:e6:d5:31:45:6b:03:67:fd:
f5:aa:e5:c8:26:58:30:28:b4:31:d3:ca:12:4d:0e:
36:e5:7f:13:76:e6:96:5b:46:f6:08:1c:f1:45:ce:
f9:53:a5:0e:e7:50:e1:b3:b1:a1:d5:09:d7:1b:6d:
0c:1c:dd:33:3b:6d:dd:e4:4e:26:e0:5e:db:83:6f:
df:c9:c2:d6:66:11:3f:cc:26:be:45:0b:68:5b:06:
16:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E7:B0:EA:F8:56:D0:D6:40:3D:33:C4:C9:88:8C:02:FB:7A:A7:5B
X509v3 Authority Key Identifier:
keyid:68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:10:af:3b:83:ab:b4:52:01:43:80:df:86:f5:b5:03:a1:4e:
45:7f:a0:05:c2:9d:34:0f:57:a2:9f:f4:de:a8:a2:82:29:68:
57:c7:ca:1d:40:cf:65:ad:13:bb:ff:5b:50:56:8f:76:c1:5e:
09:76:ec:6c:ad:2d:f0:a4:66:f5:32:11:e3:c1:db:e9:df:2a:
4e:58:b7:81:09:c5:81:2d:3d:38:8f:92:52:ba:31:c1:99:a2:
5c:50:26:fd:ed:ec:28:7e:2f:1f:c5:96:6e:70:8c:90:bc:22:
8b:a3:0f:59:28:67:0c:d5:ad:48:f0:4b:d7:7f:ec:b3:0b:bf:
37:7b:20:1e:a4:c4:e1:95:bf:9e:9f:48:00:e7:02:06:9f:59:
0e:8a:fd:9b:0f:04:0a:1e:2b:5d:43:fd:c9:19:7f:f2:6f:11:
95:c8:f8:e5:39:12:2d:e0:e7:da:bd:d0:f3:9b:fc:2b:e7:95:
8a:66:72:d5:54:98:f5:7c:fe:e6:a7:54:a7:19:d4:ff:fc:13:
bf:a3:86:9f:b2:77:b7:39:d1:ca:03:32:62:77:e3:8d:fa:27:
52:91:ba:87:9f:1f:7b:61:e4:8e:cb:f3:e7:fe:b4:f4:6c:04:
39:0e:38:8b:f4:a4:81:e2:33:0d:67:94:3e:cf:aa:de:1c:d9:
ae:06:14:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:45 2026 by rpki-client