Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
File: oBocfbuaFXGlv0kkqz_FBJMUX08.mft (raw, json)
Hash identifier: eVh6CtDEewkiRfQi7Ng09ocnc8soLrdS7wgulF8kO1g=
Subject key identifier: 72:B9:54:2B:6C:0D:BD:D4:D5:6E:5E:81:28:7F:12:1E:2D:62:2C:FE
Authority key identifier: A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
Certificate issuer: /CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Certificate serial: 019D26CD17E89C45242707DDEC0335748A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
Manifest number: 0980
Signing time: Wed 25 Mar 2026 21:01:08 +0000
Manifest this update: Wed 25 Mar 2026 21:01:08 +0000
Manifest next update: Thu 26 Mar 2026 21:01:08 +0000
Files and hashes: 1: HBEyLxpq6Zjz5sUTBEvkEU0PeDw.roa (hash: uYdJNtH72XeHZSBQgJWsgmqChwbMODpuyEXVyDLkE8Q=)
2: oBocfbuaFXGlv0kkqz_FBJMUX08.crl (hash: TuUNDSVMsvZ9Q+HBHys2QqAQ1uT1U6RVUEyHkhUlq2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:17:e8:9c:45:24:27:07:dd:ec:03:35:74:8a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Validity
Not Before: Mar 25 21:01:08 2026 GMT
Not After : Mar 26 21:01:08 2026 GMT
Subject: CN=72b9542b6c0dbdd4d56e5e81287f121e2d622cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:71:56:c8:3e:7b:59:4c:e4:d5:e8:53:13:58:
8a:e0:2c:d5:75:3d:15:1b:bd:1d:2d:d5:ef:01:a0:
fa:a4:6d:fd:f3:51:e1:b4:70:10:64:79:3e:aa:32:
95:4d:59:db:3f:c0:67:1a:c2:7c:e2:cb:59:a7:72:
66:a8:8d:cd:18:28:d2:10:c7:e0:7f:d5:8d:81:9b:
fb:e3:56:d2:cc:7e:3d:63:21:4b:ad:1d:a8:c1:01:
de:b3:f6:27:cb:9b:77:79:1b:cd:a2:73:b7:23:15:
ca:05:ce:06:52:c0:70:15:de:ff:ec:85:b8:17:bd:
34:46:c5:bd:0c:51:43:bd:e8:b9:38:fa:f9:ee:e2:
66:dd:6a:87:96:81:d1:b8:c7:38:3f:80:65:94:01:
bb:cd:62:04:a0:43:73:90:c8:37:01:87:4c:70:0b:
4a:27:09:a6:86:a9:a6:28:13:a7:e3:69:7e:c2:b6:
3d:ff:bb:3d:5c:e6:63:91:10:7a:a9:16:c4:24:12:
29:d6:16:12:c2:d2:ee:7e:e6:6a:49:b3:08:f2:f5:
23:98:be:71:3b:4d:8c:c6:cd:e9:10:56:66:1d:28:
cb:aa:45:e9:f4:28:52:01:90:4e:b1:e6:c4:e9:81:
85:3a:5e:f3:5d:5c:af:71:27:da:9b:00:19:a7:f6:
ae:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B9:54:2B:6C:0D:BD:D4:D5:6E:5E:81:28:7F:12:1E:2D:62:2C:FE
X509v3 Authority Key Identifier:
keyid:A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:40:ba:d0:34:e2:ef:14:26:ad:c6:b2:cd:ef:a4:b2:6b:89:
33:29:84:ca:f1:3d:d0:3b:57:7d:69:c0:45:0d:c1:e0:0e:5d:
f4:e4:fe:23:8b:47:19:d1:04:8e:40:45:51:d0:73:6d:4e:78:
db:17:d0:77:81:58:ac:fb:17:f2:fb:7e:ec:38:da:bc:cd:41:
6e:a2:0c:88:5c:43:26:f6:fe:a4:b1:87:57:d5:da:1e:ed:6b:
96:2e:19:5a:00:aa:d6:1b:34:3e:d5:1e:e9:2c:c0:23:ab:5e:
03:a3:c3:51:27:63:b7:25:c8:0b:f5:dd:8e:05:92:3e:38:b8:
50:80:a9:19:4d:6b:fa:fd:c7:06:b8:b6:85:62:4c:af:7b:fe:
bc:29:4d:e6:4b:52:21:eb:1c:22:3d:b9:4f:ef:22:d7:3f:c1:
ad:50:3c:5d:d6:9f:63:f6:7e:10:10:a9:f8:eb:bd:84:05:8a:
02:23:bd:d1:38:44:c6:1e:c1:e6:3f:88:73:76:b6:72:c7:f8:
96:41:27:20:11:8d:ce:4f:33:3a:66:73:95:a1:97:d4:a0:3b:
00:4c:7a:c6:c8:ac:69:b8:11:63:67:69:21:17:f8:9c:92:b4:
95:f9:58:6f:ac:80:41:97:d3:e8:4f:62:db:b4:21:07:48:8f:
62:b7:3c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:49 2026 by rpki-client