Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
File: OBLJfb0yGVtq-pEUC1UgteDCxb4.mft (raw, json)
Hash identifier: RJVsziC3oIqGqvjCCwSqIoaWrWEUXRi5q09PSpYaZns=
Subject key identifier: 37:87:24:57:A3:FF:DC:48:66:18:9D:F3:D5:9C:29:78:66:CF:FC:0B
Authority key identifier: 38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
Certificate issuer: /CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Certificate serial: 019D2B852F5EB7D4A46A577077B8C4F99F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
Manifest number: 15CE
Signing time: Thu 26 Mar 2026 19:00:41 +0000
Manifest this update: Thu 26 Mar 2026 19:00:41 +0000
Manifest next update: Fri 27 Mar 2026 19:00:41 +0000
Files and hashes: 1: OBLJfb0yGVtq-pEUC1UgteDCxb4.crl (hash: mxQfRCvPuPxojq/EBaXkjYup7FryjK2hEx09LiMMy2w=)
2: nyzykzCSciL9b7XcY2Eb25U1248.roa (hash: y0AO2J7wuOu2+dkp56Hwq0efMMez1I5zXW1sHLiGxC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:2f:5e:b7:d4:a4:6a:57:70:77:b8:c4:f9:9f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Validity
Not Before: Mar 26 19:00:41 2026 GMT
Not After : Mar 27 19:00:41 2026 GMT
Subject: CN=37872457a3ffdc4866189df3d59c297866cffc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:0d:ff:3d:ea:c6:68:f6:90:4e:cc:12:ef:
e1:ef:d9:b4:78:ee:93:de:f4:26:ba:e3:d5:b2:ce:
eb:f2:9d:f6:01:59:b7:a3:e2:ce:eb:8b:0b:f6:9f:
c5:b2:19:9e:f6:de:0d:3f:76:60:88:dc:39:f8:e4:
b0:38:a4:75:fd:ad:10:5a:0e:3a:4e:e5:27:95:26:
ec:4f:0a:af:8d:9c:c8:6b:61:a6:b3:57:12:75:7c:
7f:bc:4e:91:e2:c5:54:44:b7:e2:3b:ba:dd:78:83:
06:b4:8e:13:b0:20:5d:d8:f4:86:59:48:ab:dd:25:
a5:4a:77:a0:5e:f6:56:d0:19:0e:f5:6e:18:30:29:
e3:d8:b3:6f:9f:38:6d:04:2d:50:f1:54:9a:18:3d:
b7:fa:16:1d:8e:e5:08:87:9e:00:26:4d:99:a6:1d:
0c:d0:34:0d:06:4d:25:6c:26:c4:d7:fe:f6:17:b5:
98:8b:5d:31:85:99:30:4a:c3:9b:f9:cf:ae:a6:76:
00:2e:f0:dd:8c:f7:98:0e:e1:86:d9:bf:23:45:cd:
3b:b8:78:a1:dc:0c:bb:e2:81:a3:5b:13:20:cd:4d:
ac:77:1d:7b:05:6d:da:78:db:47:85:32:2c:60:09:
2c:dc:cc:a2:21:e9:a6:2f:98:ca:8b:36:8f:81:d6:
58:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:87:24:57:A3:FF:DC:48:66:18:9D:F3:D5:9C:29:78:66:CF:FC:0B
X509v3 Authority Key Identifier:
keyid:38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2a:86:79:10:f2:cf:0e:6c:bc:f7:d2:64:47:e9:9a:ab:6e:
64:1a:1d:61:26:8b:66:97:4e:a9:62:43:49:54:44:e3:ab:7f:
50:87:be:12:86:3c:32:95:05:cf:98:ee:bc:67:88:e1:b8:13:
2d:4b:ea:08:3d:ee:d8:6c:eb:db:a4:ea:43:18:21:89:6e:0e:
94:f1:b7:3e:fa:26:b9:b6:0a:1c:1e:ae:4f:7a:71:eb:65:e2:
1f:13:b2:55:53:12:73:5f:b4:21:8e:4b:5e:47:cb:48:90:ca:
9f:0e:7c:6f:e0:cf:e9:b0:0b:81:14:f7:a0:46:7b:84:45:4f:
76:fc:41:79:f0:d1:10:88:d7:a4:a2:d3:2b:0a:04:02:95:91:
2a:b2:2f:c8:45:a6:fb:8f:ae:fb:9a:c7:d8:26:7a:40:e2:f6:
e5:e7:70:c2:33:30:f9:a9:95:ad:ef:0e:db:38:f7:fe:82:0b:
cd:d3:c4:d6:fc:44:45:b1:0f:68:e0:f5:7d:e1:3c:65:42:70:
21:aa:58:c9:65:d3:8e:91:5b:f7:bf:37:31:c7:91:8b:59:6c:
12:1b:2f:0c:cb:8a:6d:74:81:fe:2c:97:80:04:1c:3d:ad:74:
09:ea:23:89:86:f1:5d:67:96:b9:9b:99:fb:38:2d:37:cf:d6:
cb:02:17:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:07:22 2026 by rpki-client