Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
File: obOdgkR51Np7EvZcFeXEJyX1Jgs.mft (raw, json)
Hash identifier: Y3UoWSOh+231RBRcYTmARmMiZSHHehSwgCDsH/EaHFY=
Subject key identifier: 57:17:66:71:B9:E3:64:73:52:65:00:E1:9F:AD:E6:A7:14:3F:29:18
Authority key identifier: A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
Certificate issuer: /CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Certificate serial: 019D389BFCF0DF4B7BAC11E3DBD767745261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
Manifest number: 1325
Signing time: Sun 29 Mar 2026 08:00:39 +0000
Manifest this update: Sun 29 Mar 2026 08:00:39 +0000
Manifest next update: Mon 30 Mar 2026 08:00:39 +0000
Files and hashes: 1: ckHYyGr3Mw8Qija2YP60OUa1ew0.roa (hash: ublouyar7OpXVPh6lwDgL3vowMyRYwZv2+erG4mp4zU=)
2: obOdgkR51Np7EvZcFeXEJyX1Jgs.crl (hash: ffFG9dAiXFowyClwT58E7Eh1NHNFu0tOjnD0ZT1meeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:fc:f0:df:4b:7b:ac:11:e3:db:d7:67:74:52:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Validity
Not Before: Mar 29 08:00:39 2026 GMT
Not After : Mar 30 08:00:39 2026 GMT
Subject: CN=57176671b9e36473526500e19fade6a7143f2918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7a:68:43:56:71:b6:36:8a:63:f6:41:49:c3:
e2:cc:0e:c2:98:2a:59:58:3f:2f:49:d1:47:19:d4:
be:4c:49:44:2d:82:3c:a1:16:0c:55:e2:6e:c9:c9:
0f:27:8d:6b:ee:15:2e:a0:e8:5e:78:ef:70:3c:14:
9f:e6:40:df:36:f9:a1:f8:91:7f:39:c7:6e:2a:29:
d8:aa:91:53:82:4e:04:18:33:13:b9:7f:54:95:cc:
a6:ad:5e:f3:f5:de:5f:b9:fa:48:52:ec:35:39:d4:
52:0a:a3:17:cb:ee:7c:e2:1a:e3:4b:78:a7:86:7a:
3c:bb:f6:7a:cc:c2:de:aa:f9:c9:a1:34:35:2b:59:
06:b3:6b:4e:88:72:7b:74:fc:b2:0c:82:bf:08:a8:
d3:a5:6d:cc:ef:22:9a:e1:f0:a8:89:31:52:ec:76:
e7:fb:b2:c3:e8:ac:66:3d:b5:0b:ff:2d:21:7f:c9:
05:bd:82:26:72:d9:a7:11:e1:9d:25:fe:24:8d:51:
59:b7:1c:60:b4:09:0d:32:23:b9:a2:b6:ce:e8:69:
0b:97:3c:9e:0b:09:8f:82:8f:79:e0:8e:eb:ff:b3:
95:5e:f9:4f:d9:f2:06:84:5b:82:84:55:ad:5a:72:
d8:64:9c:52:62:66:fa:6a:5b:61:2a:5f:f6:1b:35:
1c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:17:66:71:B9:E3:64:73:52:65:00:E1:9F:AD:E6:A7:14:3F:29:18
X509v3 Authority Key Identifier:
keyid:A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:73:98:20:85:2b:17:6f:f1:65:df:aa:9c:0e:9c:ca:85:4a:
f1:c4:fb:c4:0d:2d:1c:2e:38:10:15:84:7a:d6:68:04:9f:9e:
68:62:3b:b2:cd:57:74:2a:31:2a:74:26:92:70:b4:d2:05:77:
17:a9:17:a1:d3:6d:3f:2e:73:8b:3d:db:5d:66:b8:99:97:d7:
06:2f:74:9c:9d:bc:ac:58:fa:84:44:3e:0b:95:e2:96:92:c8:
26:4a:06:f3:f1:b2:52:aa:23:f1:4c:f3:4d:26:e4:a8:17:5d:
d1:29:9b:f3:ac:92:a2:19:07:c4:b6:bb:48:e9:c7:5f:14:f4:
e3:85:58:bd:8b:64:dd:da:f9:1e:12:e3:27:b2:00:9a:fd:e3:
e5:3f:20:f3:b4:2b:5f:49:c3:0c:0d:15:bb:87:7d:5a:36:a5:
c3:b5:ea:7a:ec:62:4a:26:5a:7c:3b:13:a2:c2:8d:8e:ca:65:
79:6b:f6:16:da:e1:52:1f:62:81:eb:4c:0b:20:a4:2a:cf:2e:
15:0e:0f:49:9e:bf:96:f4:50:25:af:7c:2b:37:04:1e:fc:75:
b7:1a:91:95:7d:c7:ef:a6:19:31:f4:01:d6:12:e5:8f:06:e1:
4a:76:cf:a4:ed:d7:be:02:9c:7f:c8:b2:f6:13:dd:38:e7:e4:
a2:14:0c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:40 2026 by rpki-client