Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft
File: OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft (raw, json)
Hash identifier: cRxsoXcp5dXG0aM+hTmek0u+WMpzGFC/TOmhNx5Wg4I=
Subject key identifier: 74:BD:31:CE:B4:19:68:17:FC:02:78:47:25:A8:BC:33:A0:FA:18:D6
Authority key identifier: 38:18:31:50:AF:29:0D:0F:6D:25:B0:36:13:6F:1C:BF:6B:0F:17:C9
Certificate issuer: /CN=38183150af290d0f6d25b036136f1cbf6b0f17c9
Certificate serial: 019D26CD5D4AF1B19A78E92271D2B457409E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgxUK8pDQ9tJbA2E28cv2sPF8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft
Manifest number: 01B1
Signing time: Wed 25 Mar 2026 21:01:26 +0000
Manifest this update: Wed 25 Mar 2026 21:01:26 +0000
Manifest next update: Thu 26 Mar 2026 21:01:26 +0000
Files and hashes: 1: OBgxUK8pDQ9tJbA2E28cv2sPF8k.crl (hash: EJkT0Ww3u0iD3lWwybZ+1O0YSTW1W859UVkTU0P8StI=)
2: PvWEdvUsvJApSHZ3R-d_9QNSJq0.roa (hash: xYfcRYRBET48veMPHeKzunQfZ4kzm7AxzpSV80PqYl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBgxUK8pDQ9tJbA2E28cv2sPF8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:5d:4a:f1:b1:9a:78:e9:22:71:d2:b4:57:40:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38183150af290d0f6d25b036136f1cbf6b0f17c9
Validity
Not Before: Mar 25 21:01:26 2026 GMT
Not After : Mar 26 21:01:26 2026 GMT
Subject: CN=74bd31ceb4196817fc02784725a8bc33a0fa18d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:34:a1:c1:ca:e8:a4:3a:7b:65:2d:ba:98:
fa:6d:e3:cf:ab:0b:61:dc:9d:0c:a0:6b:02:a9:84:
c2:77:7a:09:7c:ef:fc:a0:b3:c2:2f:4a:3f:bf:5c:
9b:bc:69:14:49:94:83:1c:98:d5:01:6c:41:8b:5d:
16:94:6f:ec:1b:44:ba:0b:2a:42:7f:c8:86:ba:cb:
65:f1:e5:94:0c:de:9a:38:63:d6:87:85:66:ac:75:
dd:4b:32:35:07:22:00:da:fb:30:f6:ea:dd:67:e7:
bc:92:0a:d6:83:79:fb:2e:2b:99:f4:98:b3:aa:81:
92:30:17:79:01:f8:fd:35:dd:f6:d2:7b:d3:ab:11:
c0:b7:d8:56:eb:80:92:13:0b:dd:1b:1f:33:26:68:
2f:9f:c9:05:94:6a:6f:83:33:b0:fe:7a:5d:d1:a5:
0d:9c:34:fc:e4:bf:7e:95:98:4f:1b:49:4f:50:0c:
76:29:7e:5a:d3:5b:66:64:e5:ab:10:1c:f7:89:e8:
6b:19:0f:1f:7c:ad:95:2f:a0:26:d9:04:bc:09:ec:
17:80:9e:be:fe:17:49:43:1c:3e:73:23:a9:b0:00:
6e:f0:05:20:dc:f2:51:29:32:22:f3:cb:51:9f:28:
b8:44:3c:3e:02:dd:43:cb:42:43:e9:22:d8:b9:88:
fc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BD:31:CE:B4:19:68:17:FC:02:78:47:25:A8:BC:33:A0:FA:18:D6
X509v3 Authority Key Identifier:
keyid:38:18:31:50:AF:29:0D:0F:6D:25:B0:36:13:6F:1C:BF:6B:0F:17:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgxUK8pDQ9tJbA2E28cv2sPF8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c4:4b:1b:ef:ea:05:17:83:2f:dd:e5:84:21:b0:7a:14:a3:
b7:44:01:69:77:07:33:1e:55:14:94:5b:3e:a5:eb:29:25:b2:
a3:20:95:be:da:89:fa:73:86:eb:fb:05:0d:79:ec:56:9f:4a:
56:a1:2b:17:b8:db:3a:cb:56:16:7d:62:a4:d0:fb:aa:85:d6:
c5:fc:67:f1:41:bb:42:af:8a:2e:ba:3b:c5:2d:07:e8:51:26:
fd:de:b1:74:de:dd:57:81:d3:89:df:ec:c5:cf:6a:18:42:ef:
91:9b:e8:85:c4:24:bc:77:dc:a0:e2:0b:a2:1c:8b:eb:75:2f:
d8:7b:41:b9:cd:db:41:2b:02:a6:89:1c:7e:68:c9:4c:b9:0c:
d2:d4:0d:85:bd:5e:1e:5e:a8:fe:53:5d:07:11:fc:47:f1:b7:
74:1f:0c:14:fb:4f:3a:28:2f:f2:69:05:7b:06:39:68:92:66:
31:53:3f:a1:5f:bb:9b:7b:55:81:5b:57:00:68:f2:6d:5e:c0:
7d:72:84:ed:8e:9a:37:ef:e9:e9:25:9e:0e:d6:e3:d1:6b:7a:
05:6e:ee:3b:9d:9d:bb:cd:ca:e3:ff:8d:d5:db:11:46:d0:d3:
5d:6a:5f:86:e1:f7:1c:69:49:7f:95:81:1f:4b:13:4d:d3:8e:
63:7e:9f:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzV1K8bGaeOkicdK0V0CeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MTgzMTUwYWYyOTBkMGY2ZDI1YjAzNjEzNmYxY2JmNmIw
ZjE3YzkwHhcNMjYwMzI1MjEwMTI2WhcNMjYwMzI2MjEwMTI2WjAzMTEwLwYDVQQD
Eyg3NGJkMzFjZWI0MTk2ODE3ZmMwMjc4NDcyNWE4YmMzM2EwZmExOGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwro0ocHK6KQ6e2Utupj6bePPqwth
3J0MoGsCqYTCd3oJfO/8oLPCL0o/v1ybvGkUSZSDHJjVAWxBi10WlG/sG0S6CypC
f8iGustl8eWUDN6aOGPWh4VmrHXdSzI1ByIA2vsw9urdZ+e8kgrWg3n7LiuZ9Jiz
qoGSMBd5Afj9Nd320nvTqxHAt9hW64CSEwvdGx8zJmgvn8kFlGpvgzOw/npd0aUN
nDT85L9+lZhPG0lPUAx2KX5a01tmZOWrEBz3iehrGQ8ffK2VL6Am2QS8CewXgJ6+
/hdJQxw+cyOpsABu8AUg3PJRKTIi88tRnyi4RDw+At1Dy0JD6SLYuYj8sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHS9Mc60GWgX/AJ4RyWovDOg+hjWMB8GA1UdIwQY
MBaAFDgYMVCvKQ0PbSWwNhNvHL9rDxfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0JneFVLOHBEUTl0SmJBMkUyOGN2MnNQRjhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81OTkwN2YtN2U1Zi00ZDhhLWFjZjIt
NzcyMGQ4MmY4MzQ1LzEvT0JneFVLOHBEUTl0SmJBMkUyOGN2MnNQRjhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81OTkwN2YtN2U1Zi00ZDhhLWFjZjItNzcyMGQ4MmY4MzQ1
LzEvT0JneFVLOHBEUTl0SmJBMkUyOGN2MnNQRjhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUsRLG+/q
BReDL93lhCGwehSjt0QBaXcHMx5VFJRbPqXrKSWyoyCVvtqJ+nOG6/sFDXnsVp9K
VqErF7jbOstWFn1ipND7qoXWxfxn8UG7Qq+KLro7xS0H6FEm/d6xdN7dV4HTid/s
xc9qGELvkZvohcQkvHfcoOILohyL63Uv2HtBuc3bQSsCpokcfmjJTLkM0tQNhb1e
Hl6o/lNdBxH8R/G3dB8MFPtPOigv8mkFewY5aJJmMVM/oV+7m3tVgVtXAGjybV7A
fXKE7Y6aN+/p6SWeDtbj0Wt6BW7uO52du83K4/+N1dsRRtDTXWpfhuH3HGlJf5WB
H0sTTdOOY36f9Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:35 2026 by rpki-client