Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
File: ObCMosZLpzX0sUUhbdFNmfCCnw8.mft (raw, json)
Hash identifier: bSDcDWCNzD9Etu+YeqB/8H6U8gfQ+frnAnZG10psbbU=
Subject key identifier: 5A:E6:8A:F1:19:FE:D5:B3:7C:11:75:8A:48:60:2A:3A:AA:BB:D1:A9
Authority key identifier: 39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
Certificate issuer: /CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Certificate serial: 01A0D5700BDA2A130C46139547AFD082438A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
Manifest number: 03C0
Signing time: Thu 24 Sep 2026 22:01:25 +0000
Manifest this update: Thu 24 Sep 2026 22:01:25 +0000
Manifest next update: Fri 25 Sep 2026 22:01:25 +0000
Files and hashes: 1: 96Z9YmkwhDlGo5pAMuw_E3Hp7Lk.roa (hash: poB30dm+SrH8X1Re/HLNOKlVM2DpDlomGaXJPMbImyI=)
2: ObCMosZLpzX0sUUhbdFNmfCCnw8.crl (hash: oBVYLmysbekfMLER53HLk73hW9VC8Z1cShPGObgkWeA=)
3: djz1F_dy6bHmHqubW6DKbd3NWi8.roa (hash: sTfhHWPps1KBw5i/iSL7i2lTYyY7l+06q3cnoIV5ajE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:0b:da:2a:13:0c:46:13:95:47:af:d0:82:43:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Validity
Not Before: Sep 24 22:01:25 2026 GMT
Not After : Sep 25 22:01:25 2026 GMT
Subject: CN=5ae68af119fed5b37c11758a48602a3aaabbd1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:92:e9:4d:e8:47:f3:af:21:24:34:c9:32:
06:be:b9:73:14:a9:a9:d0:db:76:96:de:54:e1:d1:
7d:a3:9f:59:34:55:e1:47:9b:0d:94:1f:ee:ab:a4:
61:4c:95:b0:25:6f:c4:5b:9f:97:e9:f6:83:16:77:
fd:cd:88:52:8d:c9:24:9e:05:30:3b:a4:6c:d9:e4:
d5:0d:48:10:ec:d6:8c:ee:87:e2:d5:11:ab:39:4f:
28:54:de:26:35:04:21:93:96:c2:6f:85:bf:60:43:
b5:69:48:1c:f3:f8:33:77:b5:40:bc:b9:75:a5:dc:
08:b4:ca:76:5c:12:bf:20:95:da:f5:5f:a9:93:5d:
e4:61:e5:20:b3:63:ca:f2:ed:b3:13:00:07:54:04:
c4:98:7b:9b:de:0d:78:6f:0c:3b:32:7a:24:1d:59:
72:38:3e:f0:bb:25:c0:63:dd:65:40:26:d8:f5:db:
ca:67:ed:12:6f:68:b9:86:1c:11:90:df:c2:15:51:
a5:a5:5b:b0:df:8e:bb:d2:65:33:fe:30:13:22:53:
a8:15:31:16:cd:1a:98:d7:e7:e0:01:c1:fa:43:ed:
74:42:77:94:ca:b7:bd:0d:62:91:79:2a:4b:a3:2a:
fe:dd:15:38:99:a1:29:f7:a9:53:80:5c:f0:ff:0a:
b3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E6:8A:F1:19:FE:D5:B3:7C:11:75:8A:48:60:2A:3A:AA:BB:D1:A9
X509v3 Authority Key Identifier:
keyid:39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5d:2e:21:91:a4:59:be:0a:93:74:72:1f:93:55:58:5d:69:
e7:e5:20:be:06:fb:6a:13:29:3d:ae:06:95:5a:74:bc:3e:51:
e3:28:d2:f7:4f:0d:9d:bc:68:3a:10:59:85:e2:0a:78:68:17:
34:50:29:0d:56:58:71:a8:03:d0:f2:b5:db:95:1e:8c:6b:1f:
c1:14:5f:f5:08:74:68:42:79:3e:e7:8f:d5:c1:09:c3:ee:08:
42:d6:7f:11:09:66:8a:91:11:63:8b:98:94:11:73:2f:a3:bd:
89:32:57:08:2c:9c:d8:7a:ff:86:d3:69:da:cc:6c:48:66:1b:
8e:35:46:dd:8a:fa:38:8f:66:f5:ee:13:db:6a:4b:1f:9c:9e:
80:98:09:f1:23:3f:fe:cc:e9:42:6d:af:e2:07:1c:f1:99:36:
bc:33:14:9f:c8:8c:6a:5a:81:c4:fd:dd:a4:cd:b0:ab:fa:fd:
d0:c6:fc:91:95:4f:08:f9:b5:27:14:10:bd:b2:2f:e7:fb:6a:
a2:0b:90:da:96:2b:1a:ff:17:55:98:f2:10:6e:75:ad:a8:03:
2a:3b:68:9e:91:ad:6e:57:a1:6d:2d:fc:05:c9:32:5b:e3:ef:
c9:88:df:a1:9a:48:9c:a3:11:68:2d:00:f3:78:19:d3:0c:c8:
fb:b8:18:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:24:20 2026 by rpki-client