Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
File: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft (raw, json)
Hash identifier: LMa/aTN8hZdSeyrjr6rH1/2njrq4CSOoBB4A1XigdTc=
Subject key identifier: 90:D1:E9:8D:F3:FB:5D:7F:AE:B0:64:95:E9:6A:F2:E9:64:1A:AB:8F
Authority key identifier: A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
Certificate issuer: /CN=a01012ec845500718cab76c9dd0af010890de26d
Certificate serial: 019D28BBBC9FECCC46794BD071CE56F40ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
Manifest number: 1229
Signing time: Thu 26 Mar 2026 06:01:25 +0000
Manifest this update: Thu 26 Mar 2026 06:01:25 +0000
Manifest next update: Fri 27 Mar 2026 06:01:25 +0000
Files and hashes: 1: cyts1p2wCvnwn0Aiq887XNaaeB4.roa (hash: 35IzE+3xgtlfUeRGehmvu6jrdJGF2F8RsbhMs7R8PLM=)
2: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl (hash: 0Izav2uqOqGR5wMBi/OqeQ0KMx/h1AL4eT3jGUxxHUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:bc:9f:ec:cc:46:79:4b:d0:71:ce:56:f4:0a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01012ec845500718cab76c9dd0af010890de26d
Validity
Not Before: Mar 26 06:01:25 2026 GMT
Not After : Mar 27 06:01:25 2026 GMT
Subject: CN=90d1e98df3fb5d7faeb06495e96af2e9641aab8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e5:7f:11:ed:d1:66:8f:d9:34:ab:d4:c8:7f:
d0:d6:7a:e0:54:44:26:a7:45:85:75:ef:ba:4b:21:
5d:83:9c:25:8f:54:bb:9a:0a:32:80:f8:30:68:59:
60:5e:6f:f1:10:b5:70:f1:12:92:e3:12:2f:53:bf:
83:40:e3:e3:12:44:a2:8f:83:46:a3:b9:52:65:cd:
6a:1f:2f:e7:24:bb:a3:ea:46:ff:14:1f:70:ba:39:
fe:99:cc:1a:09:46:3c:6a:21:64:91:8d:f2:b8:7c:
f8:03:ca:73:f9:a9:b0:61:82:d1:ca:73:72:8f:f7:
5c:1e:65:d4:e0:98:1b:4b:9e:fd:37:50:23:10:c3:
61:a2:e7:d8:2c:20:03:63:70:3b:6a:af:12:f3:ea:
c2:bf:66:b2:d3:25:59:e7:b5:cb:ad:72:4e:ad:54:
27:dd:73:3c:05:6d:d5:17:ad:e1:18:9b:c7:32:a2:
59:0c:aa:c6:cc:23:8d:f3:7f:9f:39:2a:b8:c6:11:
3b:70:3c:44:be:5b:24:22:ea:86:19:f3:7c:a9:ae:
3e:ea:2d:f7:fa:e9:74:fd:d9:53:db:39:d4:e3:96:
15:5b:33:aa:44:a5:0c:9d:32:2f:52:18:69:6c:4f:
3a:1e:2c:31:17:1c:35:df:b7:71:0c:ed:26:df:a3:
f8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D1:E9:8D:F3:FB:5D:7F:AE:B0:64:95:E9:6A:F2:E9:64:1A:AB:8F
X509v3 Authority Key Identifier:
keyid:A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2e:19:92:42:b0:57:8f:6d:6d:80:05:c2:ee:42:0c:ec:76:
e0:dc:9d:3d:e5:85:2a:71:8f:01:52:88:19:01:62:1b:25:eb:
4d:cc:6f:ad:a7:b7:64:83:eb:25:af:f7:94:0e:f8:7e:d1:88:
27:8d:55:62:63:c7:a0:1d:c4:7c:ba:10:53:a2:29:dc:01:32:
02:29:fa:b5:f9:ea:fb:84:a7:84:d6:4a:fb:38:a5:5d:41:05:
ad:3d:05:41:4f:e0:8f:03:73:f6:8b:e6:73:dc:96:36:ce:23:
69:f4:fb:72:c0:56:05:b8:14:7c:9e:9e:b0:71:32:91:ed:24:
c4:73:a8:d5:f1:5c:d4:61:b4:2f:1f:17:ff:b8:b1:fb:5c:3b:
58:62:eb:a6:57:56:ac:6a:53:b8:bc:99:86:0d:c6:93:95:2c:
17:0f:6c:b3:81:e4:75:5b:92:57:d9:a0:d5:f2:fa:d5:1b:32:
f2:0e:07:76:d5:03:48:0f:8a:e1:3f:5f:93:59:86:85:48:52:
78:9b:61:33:04:f9:8e:99:3f:7e:f8:2b:07:9f:d4:6f:e1:40:
0f:99:3a:98:cc:4f:41:2d:cb:56:4e:5c:f0:94:61:bd:b7:b5:
03:dd:66:8c:24:b9:fb:41:54:dd:87:66:0d:a2:5f:16:0e:aa:
74:57:f4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:37 2026 by rpki-client