Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
File: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft (raw, json)
Hash identifier: PN977MjbCnENB8kIuZj0wiq+sih7pjYGgJgRIiCSSLU=
Subject key identifier: 23:B4:3C:C6:70:90:90:62:4D:C6:23:C8:7D:8F:25:E7:00:DC:85:D1
Authority key identifier: A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
Certificate issuer: /CN=a011a02e929c43f0199c8326302e24899c4a4151
Certificate serial: 019D28F2B3B7EC375593202BD0CAA79F1945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
Manifest number: 15F2
Signing time: Thu 26 Mar 2026 07:01:27 +0000
Manifest this update: Thu 26 Mar 2026 07:01:27 +0000
Manifest next update: Fri 27 Mar 2026 07:01:27 +0000
Files and hashes: 1: 3hCGWzvELH55mpVn4uKDFqlbo8A.roa (hash: fh3+qnTWKRFUhHaDY/XoVgctnD35QjJX8ymXccmziuw=)
2: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl (hash: StrAIEY4WiV5sH6qgZncQZvyTxfozbf5T4VQn9Db3ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:b3:b7:ec:37:55:93:20:2b:d0:ca:a7:9f:19:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a011a02e929c43f0199c8326302e24899c4a4151
Validity
Not Before: Mar 26 07:01:27 2026 GMT
Not After : Mar 27 07:01:27 2026 GMT
Subject: CN=23b43cc6709090624dc623c87d8f25e700dc85d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:98:66:71:62:57:1c:c4:bb:ad:f7:b5:45:32:
40:f7:3e:f1:b6:46:fa:97:79:da:e5:67:62:08:a7:
a8:4d:d8:d0:2b:42:f0:77:da:ae:b8:a4:37:9e:46:
99:d3:52:98:cf:11:da:fe:7b:a2:4e:8b:ab:7a:29:
f6:4e:1f:72:c5:c2:70:45:3c:3a:ab:ca:50:28:9e:
a3:eb:08:66:5d:46:28:42:18:62:9c:cd:b9:56:5f:
75:4f:e8:34:15:0b:50:9f:5d:16:ca:d1:ce:09:8f:
4c:49:72:06:b1:40:31:c5:cb:50:74:c5:b7:d6:89:
23:3f:aa:9f:3b:85:3f:37:6f:ce:61:23:b0:4b:46:
59:57:7b:2f:f9:5d:10:2c:34:8b:10:24:af:2b:4f:
d8:5b:0d:a0:2d:c8:93:05:a8:29:38:44:6d:43:b2:
e5:e0:0f:a9:f5:74:dd:d2:df:7f:bd:a0:fc:db:8f:
5d:fd:59:ca:82:df:49:b3:51:f2:8a:71:38:a2:17:
9a:0e:6a:f4:24:40:1c:b8:18:cf:e1:be:31:b7:9c:
bf:ba:5b:5d:a3:79:e9:30:fb:39:92:cc:b4:02:5e:
65:bc:6c:6d:35:c8:4f:ee:16:c2:5a:b5:b2:01:6e:
ee:77:03:af:84:0f:5f:a7:05:d2:01:f0:84:b4:ef:
91:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B4:3C:C6:70:90:90:62:4D:C6:23:C8:7D:8F:25:E7:00:DC:85:D1
X509v3 Authority Key Identifier:
keyid:A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a0:2c:a3:07:52:d0:9f:df:22:2e:bb:43:93:a6:ac:73:84:
9e:46:2c:3c:0d:a9:6c:d0:04:85:33:81:dd:8b:42:0f:84:17:
1e:e7:4f:bb:44:30:e3:99:84:35:bb:b0:a6:ba:1a:26:b9:ae:
db:1a:a6:5b:d2:95:53:1b:be:1f:ba:26:93:95:0c:06:39:2f:
95:a1:e4:ad:db:49:0b:56:5c:24:8b:40:80:95:18:32:06:62:
b5:c0:7a:b3:59:9f:6c:cd:0c:ce:32:6a:c9:9f:5f:b8:4f:16:
34:42:37:cb:d2:5c:70:b8:0f:20:99:0f:f4:3e:cf:01:a5:36:
0d:e5:a4:07:32:54:ce:83:14:8b:fd:ea:26:9d:6f:a0:69:e0:
74:9a:76:86:6c:b6:cb:ea:16:0f:51:75:f9:f2:bb:ab:1b:7b:
aa:27:e5:23:f5:d8:d1:31:38:94:51:3c:31:64:7f:f9:45:4e:
3a:5b:09:23:45:6e:d3:ee:e3:93:ba:4c:54:9f:c5:f8:c9:46:
0b:d2:de:7f:a6:ec:c2:79:ad:8f:92:e1:b9:cf:81:51:6c:3f:
36:e1:76:c7:e5:41:ab:e8:39:2f:27:c7:8c:30:64:b1:58:35:
2a:f7:4a:64:cf:b8:27:7d:5d:29:b2:55:fa:b7:05:05:f0:28:
cb:b9:4a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:32:14 2026 by rpki-client