Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
File: ObCMosZLpzX0sUUhbdFNmfCCnw8.mft (raw, json)
Hash identifier: rQtUvWMoHwLMKt0zdIy4cTJ1omxvQ8+BwRhn1p6CscA=
Subject key identifier: 11:CF:84:1C:75:31:21:DA:CA:C6:19:D9:AA:CF:F4:07:4E:B5:D4:91
Authority key identifier: 39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
Certificate issuer: /CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Certificate serial: 019E1DFE00918AB845D82C40224FB00D8014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
Manifest number: 0257
Signing time: Tue 12 May 2026 21:00:45 +0000
Manifest this update: Tue 12 May 2026 21:00:45 +0000
Manifest next update: Wed 13 May 2026 21:00:45 +0000
Files and hashes: 1: 2sekLYLRU9svSlYdz5DgXczYbZ4.roa (hash: LFWvTLo8Q3qqX6yHRgyzbBIUG3C19O+Lb3LnHSjmeZA=)
2: ObCMosZLpzX0sUUhbdFNmfCCnw8.crl (hash: pi9g+9f69w8M5zqOX6p+18YT+oH04D4y7ipBC7gT8ck=)
3: djz1F_dy6bHmHqubW6DKbd3NWi8.roa (hash: sTfhHWPps1KBw5i/iSL7i2lTYyY7l+06q3cnoIV5ajE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:00:91:8a:b8:45:d8:2c:40:22:4f:b0:0d:80:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Validity
Not Before: May 12 21:00:45 2026 GMT
Not After : May 13 21:00:45 2026 GMT
Subject: CN=11cf841c753121dacac619d9aacff4074eb5d491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:16:b9:83:56:d0:a3:21:20:95:68:6f:fc:7e:
6a:4a:c5:5f:a0:f7:a9:21:5b:e4:db:95:66:1d:c3:
ce:bd:89:1c:05:e0:86:70:60:e6:d6:89:93:cc:87:
f5:30:b7:66:55:e0:73:09:47:e2:bb:bf:4f:36:79:
d1:04:60:77:c3:59:ce:6a:75:39:bf:9b:3b:1b:77:
bd:85:74:5f:40:4a:41:85:d9:0d:2e:b6:6f:ea:18:
60:bc:98:79:9f:be:30:9e:d1:d1:1d:9b:e4:97:79:
15:d4:24:3a:bc:b4:f7:4b:fe:63:86:ac:88:b0:aa:
60:40:81:6c:99:0d:7b:05:ae:df:d0:eb:b1:cb:31:
b2:c1:53:92:9a:41:75:fd:fb:ff:94:20:0a:cb:af:
1e:bb:f2:40:42:25:15:57:7b:2a:ad:b2:e8:e9:1f:
83:66:4a:82:b5:5f:5d:9f:c5:67:dd:9c:1a:61:4e:
fc:37:3a:68:68:05:fa:69:ea:4d:64:29:b8:99:ec:
a6:55:90:d1:a2:59:86:b2:d2:69:dd:53:ba:59:41:
26:3b:46:2b:f2:d5:0d:13:da:3f:0f:e2:22:47:bb:
7e:4b:24:d3:30:35:93:2d:5c:ba:9b:e1:0e:01:61:
15:e5:cb:41:4d:a8:5b:a1:f0:6f:4e:e9:ac:7f:45:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CF:84:1C:75:31:21:DA:CA:C6:19:D9:AA:CF:F4:07:4E:B5:D4:91
X509v3 Authority Key Identifier:
keyid:39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:73:6d:97:45:d1:c3:d5:ad:5d:86:09:4f:47:cc:b8:33:6f:
11:5c:91:9f:86:bd:33:e3:f5:7e:4a:04:2e:40:e7:41:12:84:
bd:71:0f:a2:6a:e7:c4:6a:8b:8d:91:9f:91:8f:44:17:6b:5d:
e9:0a:37:82:47:fd:1c:1a:9d:13:d9:16:6e:08:2b:dc:96:9f:
4b:49:b1:07:5f:e3:7b:7b:ba:66:45:e0:9d:5a:19:4f:34:48:
f2:c8:a8:40:7d:6e:81:a3:ab:3e:86:ec:10:89:09:c2:e8:5c:
e9:55:24:d6:24:c8:61:7e:d5:88:2f:a5:96:57:11:d6:82:44:
42:3e:e5:86:b0:dc:c4:fa:8e:3b:19:59:16:83:31:04:13:e1:
19:9a:55:11:78:94:6f:87:b8:5a:41:df:9d:11:88:4b:7a:22:
20:d9:e0:ed:18:d2:00:a6:aa:a4:62:2e:b0:ed:8f:27:f2:0e:
7d:9d:d2:76:3e:b9:da:cb:4e:68:43:ba:c0:2e:e3:02:7e:35:
93:a4:2e:0f:2e:5d:1b:43:8f:d7:70:9b:63:13:9e:f2:67:ce:
45:50:49:3e:51:bf:26:4f:a9:18:45:08:2a:c8:5e:b2:f9:78:
05:9b:57:b8:2f:ae:3b:ad:13:47:a6:61:fe:e6:8d:34:2d:58:
a2:74:2b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:53:17 2026 by rpki-client