Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
File: obBHf50JosdPTEWegLcpr-6zEtQ.mft (raw, json)
Hash identifier: IcfAJDLqa5LDk48TQ+BHuwoodZQxZ7tkHUTKwX2ucPE=
Subject key identifier: E9:F3:14:E7:36:82:14:22:E9:53:9B:87:A1:66:C9:FE:5B:63:17:BC
Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
Certificate issuer: /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Certificate serial: 019D2583CCC7E12540D28E3C9184DE343E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
Manifest number: 0E21
Signing time: Wed 25 Mar 2026 15:01:27 +0000
Manifest this update: Wed 25 Mar 2026 15:01:27 +0000
Manifest next update: Thu 26 Mar 2026 15:01:27 +0000
Files and hashes: 1: GcmnLhUrxsDtpi6IFcCeNgV9CNU.roa (hash: 30rGZU6mCf0D1WtNl4OSSePM1TRDWesSyIJi8OZOjqw=)
2: T9QosLBjVi3O4na1965Ec34JXvw.roa (hash: HSBCkcAnz7XfejtJRKHSAfoqFOLGJkEPluwkxCR0nhA=)
3: obBHf50JosdPTEWegLcpr-6zEtQ.crl (hash: otIFgwao8SAI/WwtchtXmlLFwG/28vGNkgOuAswpJLk=)
4: z_9II5WYBoTBGZ5pgFe4r6CevAw.roa (hash: b3pynxd2lAP3NtJ8uzmF53kEH7MeotRATSOpsRAWQMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:cc:c7:e1:25:40:d2:8e:3c:91:84:de:34:3e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Validity
Not Before: Mar 25 15:01:27 2026 GMT
Not After : Mar 26 15:01:27 2026 GMT
Subject: CN=e9f314e736821422e9539b87a166c9fe5b6317bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:9b:53:6b:b7:f5:12:6a:ef:3f:be:84:25:
7d:b0:26:6d:7a:be:48:5f:95:c7:8e:53:82:07:ea:
b6:18:1d:ea:c5:e6:8c:cf:e7:55:1d:4f:e3:d3:d9:
1a:3c:fc:aa:47:4b:10:c7:a2:19:2c:62:3e:75:66:
a2:89:4a:fe:0b:0b:a1:c9:5c:72:91:41:34:d6:72:
4f:37:1e:bf:57:e3:98:33:7e:7d:05:2a:d6:a8:88:
7d:5e:c0:1b:e2:bf:50:5e:e0:b1:61:ea:16:3a:79:
37:72:0b:de:24:41:65:ed:69:3e:23:d4:d6:51:ac:
51:9b:37:fa:e7:77:25:7a:2e:ef:d9:d6:e7:1a:1e:
38:59:1c:0b:f3:b2:cf:40:13:b3:ae:1d:61:81:22:
3e:f2:aa:ab:58:54:d9:8c:18:00:0b:f0:85:d8:af:
a7:0e:25:02:a7:65:c4:5a:10:70:06:8b:5e:1f:b4:
76:a4:55:b1:b3:bd:4d:72:ca:ec:18:a2:a2:20:64:
d2:32:0e:9e:f4:fa:67:1d:90:67:89:56:09:f2:1d:
33:b1:92:8d:a2:f2:95:1f:59:84:f0:a0:9b:11:15:
a6:6a:e4:d5:3f:fe:e9:79:b8:3d:2d:45:33:10:9f:
d5:c6:3e:4a:f0:e8:fb:26:48:e5:d1:5b:41:28:28:
69:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F3:14:E7:36:82:14:22:E9:53:9B:87:A1:66:C9:FE:5B:63:17:BC
X509v3 Authority Key Identifier:
keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a8:19:07:fa:01:8e:48:51:71:19:f3:34:24:c2:e4:2c:f3:
3e:33:ad:4b:92:65:c5:28:a7:97:d9:53:dd:fc:92:40:42:32:
80:48:d2:64:a6:b4:09:86:5a:81:41:59:2e:0c:54:e4:23:f6:
a8:59:59:23:30:2e:20:e5:86:ad:72:1a:37:0c:6e:b4:6f:16:
42:8f:8b:12:16:76:00:06:02:b2:6a:50:bc:87:ea:bf:06:61:
bc:d5:34:27:70:de:93:17:20:fc:22:22:86:e1:21:28:25:5c:
51:70:c9:90:9f:6f:85:9d:59:11:f4:3f:64:0e:07:75:6e:c7:
d1:57:1e:8e:6b:98:3b:34:3e:27:30:03:2e:f0:42:b4:7a:76:
8b:dc:30:f5:e2:3e:56:56:dc:09:c8:3f:5b:a4:fd:bb:66:34:
23:d8:f0:ed:f1:1b:9f:af:74:51:84:07:7e:a6:fa:2e:da:86:
b5:77:c1:fe:64:7f:56:38:ca:ad:38:af:b9:30:67:ef:a6:41:
28:6b:41:f5:12:15:bf:a6:f4:df:c4:75:1d:c7:4a:37:89:58:
b2:0c:97:55:98:c7:09:ce:05:5e:c4:5c:89:65:d6:bb:c2:db:
96:3f:8f:9a:86:ed:31:d8:52:03:67:33:46:b5:20:df:a3:1d:
87:ac:00:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:26 2026 by rpki-client