Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
File: ObCMosZLpzX0sUUhbdFNmfCCnw8.mft (raw, json)
Hash identifier: z7AQldpkklkhpIJVcZ3D5f/lxGdW+eJivexXAhPpqsQ=
Subject key identifier: A8:6B:6D:CC:5E:54:01:07:1B:35:5A:01:74:FC:43:17:B9:80:46:2D
Authority key identifier: 39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
Certificate issuer: /CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Certificate serial: 019D26CCBDB14C9ECBFAE23577515A69126D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
Manifest number: 01D7
Signing time: Wed 25 Mar 2026 21:00:45 +0000
Manifest this update: Wed 25 Mar 2026 21:00:45 +0000
Manifest next update: Thu 26 Mar 2026 21:00:45 +0000
Files and hashes: 1: 2sekLYLRU9svSlYdz5DgXczYbZ4.roa (hash: LFWvTLo8Q3qqX6yHRgyzbBIUG3C19O+Lb3LnHSjmeZA=)
2: ObCMosZLpzX0sUUhbdFNmfCCnw8.crl (hash: KIBIzvHAzA/5LzXTdEO9utlUVy+FeuyROglYdS6KBso=)
3: djz1F_dy6bHmHqubW6DKbd3NWi8.roa (hash: sTfhHWPps1KBw5i/iSL7i2lTYyY7l+06q3cnoIV5ajE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:bd:b1:4c:9e:cb:fa:e2:35:77:51:5a:69:12:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Validity
Not Before: Mar 25 21:00:45 2026 GMT
Not After : Mar 26 21:00:45 2026 GMT
Subject: CN=a86b6dcc5e5401071b355a0174fc4317b980462d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:34:0a:bc:d5:86:37:63:62:a9:9d:e1:57:82:
89:91:88:0a:f8:4e:82:3f:4c:03:a7:4e:a0:f3:77:
e9:fe:5d:24:9e:7a:42:21:7c:56:36:b7:6b:fe:f1:
0a:2a:a0:29:94:4b:98:d4:86:d7:1c:27:31:0d:bc:
9d:ec:cf:75:fa:d7:80:82:84:af:17:cc:9d:b8:42:
11:ac:cf:5f:38:d3:55:88:52:40:a4:d5:3d:95:7f:
e6:1a:bd:6c:ce:3d:6c:e1:5b:20:be:c3:bd:79:2a:
cb:33:e3:b6:a7:1d:29:03:c8:ce:50:41:03:21:f0:
e5:d5:92:38:3a:75:a1:c8:16:61:a3:9b:bf:2a:dd:
8e:92:7a:e3:27:68:b9:01:bb:08:8a:1e:eb:04:00:
9f:6a:0e:56:b2:6f:c4:13:fc:07:97:5b:4e:4a:65:
a9:a7:51:d0:ee:bc:bc:b4:d1:1b:8b:5e:88:b0:8c:
19:03:ca:96:f2:08:e3:fc:55:4d:56:05:65:7d:9a:
39:da:ad:aa:a2:1a:86:89:0a:17:03:7f:d2:18:f2:
89:23:69:68:fb:c1:1b:7c:05:9f:7c:94:53:a3:83:
4b:18:d4:24:35:c5:fe:11:ca:9d:23:8a:35:1f:27:
9d:09:54:bf:84:47:61:38:57:51:cd:b5:51:83:f6:
ce:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6B:6D:CC:5E:54:01:07:1B:35:5A:01:74:FC:43:17:B9:80:46:2D
X509v3 Authority Key Identifier:
keyid:39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c2:3b:39:09:05:c9:52:58:72:34:b2:75:1a:cf:13:8c:73:
2e:5e:c1:f1:f1:01:62:5c:20:ee:04:8c:66:b7:ce:92:0c:66:
a6:8d:18:5f:6b:ab:74:9a:fd:4d:54:15:8a:42:34:51:61:fd:
37:b1:92:37:07:03:55:3a:ac:83:d5:49:06:22:78:ae:c4:7d:
49:54:d2:18:17:e9:55:2d:9a:5b:70:e5:a9:f8:9a:1e:da:3f:
ec:37:70:08:73:54:96:5d:63:90:04:6c:0b:f6:2d:2f:7c:fc:
90:4c:a3:3e:32:79:64:ae:0a:b8:e5:ee:97:83:18:2b:fd:98:
27:c6:a5:50:2a:ff:ab:af:56:7c:37:45:c8:e8:45:65:52:12:
79:5a:f4:b9:d6:78:d6:4e:d7:c5:c9:97:d7:85:de:97:5a:f5:
95:df:f6:78:38:cc:00:ea:7c:01:af:1e:23:df:2f:2c:8b:88:
25:2c:f6:04:fa:68:7a:64:7f:ac:4c:1d:8d:f2:11:b3:9a:6e:
71:70:f5:91:77:7b:74:d3:52:ce:83:1a:49:96:59:f9:fb:fb:
cc:c0:34:94:07:fe:25:94:19:17:10:04:c2:b9:ab:ec:19:9f:
b4:31:a2:53:d0:c2:19:7d:43:80:ba:5d:89:8e:75:fe:a0:f2:
0e:90:d8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:43 2026 by rpki-client