Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
File: OBbhmySn6M_xifq6wohSzYdIo4A.mft (raw, json)
Hash identifier: Y26RaOpDVfN3tpZHmmw9NlllaP9hlOYhFVAfO0/tU24=
Subject key identifier: B6:D0:6A:7D:CF:FA:04:DD:DD:63:20:AC:A8:CE:B6:B3:DA:C8:CC:19
Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
Certificate issuer: /CN=3816e19b24a7e8cff189fabac28852cd8748a380
Certificate serial: 019D37F71549DC9C0492F12540375C0EA29F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 05:00:32 +0000
Manifest this update: Sun 29 Mar 2026 05:00:32 +0000
Manifest next update: Mon 30 Mar 2026 05:00:32 +0000
Files and hashes: 1: 10zU5k5ICxgrM5-Ip5yncI3GNGs.roa (hash: LEG/jSgiyt7BovVPDQkdWrVInvTbnRp5DG6v8hbqY1s=)
2: OBbhmySn6M_xifq6wohSzYdIo4A.crl (hash: IaiCed+PTv6KIpLyYhsOCcIZiIgyPasC3hkHA3t4GEQ=)
3: QmWmoP1KHfrR9eTOqZ6x9ezRXSY.roa (hash: xqu4qFo0DMMx0+rjC1DPBvqtwUrbm4PocY0IAf7sGdo=)
4: pm2S8QCe4l9WpfwvU_iLSL0zIlI.roa (hash: siFYWGu9y7ejpY470okiO/aX4nO9BjP28kUxghwfExg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:15:49:dc:9c:04:92:f1:25:40:37:5c:0e:a2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380
Validity
Not Before: Mar 29 05:00:32 2026 GMT
Not After : Mar 30 05:00:32 2026 GMT
Subject: CN=b6d06a7dcffa04dddd6320aca8ceb6b3dac8cc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:aa:6b:88:f9:a5:91:e0:bd:8e:12:b6:5b:
21:89:87:97:da:35:40:0b:e8:08:3a:46:62:e4:32:
87:d6:d7:f6:7d:06:40:fa:5b:52:91:a2:d8:ba:49:
20:a7:0d:6c:6a:6e:78:a7:b0:21:c2:6d:7f:5b:19:
fe:08:60:50:f6:30:c9:af:8c:74:da:67:52:4b:5b:
61:7b:9d:bc:30:8c:23:cc:5c:7a:8e:17:7c:2a:d0:
5e:13:5d:fe:da:c2:09:70:f6:b2:ae:06:e6:4f:f0:
cc:1b:30:6c:29:0f:45:3e:e3:a1:5d:af:c9:d0:7b:
33:3e:d2:60:30:70:6b:f9:e2:91:8d:19:0c:91:94:
88:5e:6f:d5:f8:67:52:7f:cf:7d:64:d6:94:e6:33:
68:02:7d:03:71:b7:45:db:09:18:7a:fb:b6:a5:c2:
6f:58:5e:f1:0a:ed:1b:2d:0f:05:17:e2:14:80:7e:
4c:0c:77:db:ac:8d:71:5f:72:09:70:59:e1:dc:2c:
01:f8:b2:a4:c5:d2:85:7a:2f:1d:2e:e9:84:6f:5d:
4e:1f:d5:7b:55:c5:ab:e1:9b:41:c7:b7:1a:55:aa:
75:39:5b:d7:64:1b:75:57:b7:ce:14:7e:c2:27:30:
b2:a9:5b:50:57:11:5b:f8:ec:34:8c:47:bf:99:34:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D0:6A:7D:CF:FA:04:DD:DD:63:20:AC:A8:CE:B6:B3:DA:C8:CC:19
X509v3 Authority Key Identifier:
keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e9:a1:e3:1d:bb:45:38:28:14:a0:0b:85:be:b1:c0:65:31:
ab:a3:91:8c:8c:01:96:83:0a:f1:c4:d8:fc:47:cf:03:2c:ad:
cd:10:d5:65:af:6b:79:7f:9c:b6:5c:1e:e9:18:8c:73:50:58:
ae:2d:f2:dc:62:eb:d3:27:7f:0d:d3:8c:a7:70:3b:c0:9a:e5:
04:18:e7:94:df:d8:db:78:a6:5b:dd:25:67:4e:03:39:1e:c5:
e7:31:7f:99:3e:0b:cd:1b:64:21:90:00:b0:85:30:e3:fc:99:
cb:0b:70:0c:92:98:41:19:a5:dc:e5:91:12:f2:cb:6f:31:0a:
ff:a3:f3:6e:12:04:d3:7d:58:84:98:2e:1b:5f:71:4f:47:4c:
3a:0d:d7:01:56:fc:89:e1:03:e0:82:41:15:f8:a8:47:e9:5d:
a2:b8:e2:1a:82:61:59:7e:03:a6:9a:d7:57:85:c8:52:84:db:
58:0e:fa:95:10:31:34:a6:f5:a3:d5:78:54:3c:45:91:6a:81:
ea:6e:fb:a3:46:34:24:63:91:29:7e:76:9d:0c:d3:71:be:fd:
03:6c:6a:94:8b:9c:57:05:b7:d8:94:c5:89:11:b3:f9:36:35:
69:3b:c7:eb:b8:2c:ea:7d:8b:c9:5c:f7:3b:d3:f8:27:7d:96:
a0:c6:ab:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:59:28 2026 by rpki-client