Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
File: OBgMB0--WYgkxwAxlbMKpKNmFSw.mft (raw, json)
Hash identifier: om6LT0bwsrNzhjibdqJ6x8WH55AHaMP0YrAGfu21THQ=
Subject key identifier: 3C:CF:50:F9:F3:8D:23:C1:B9:82:D6:2F:1B:AE:6A:FB:DA:2E:AF:53
Authority key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
Certificate issuer: /CN=38180c074fbe598824c7003195b30aa4a366152c
Certificate serial: 019D382E8662D4FFEF9486419C2B760C2F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
Manifest number: 152F
Signing time: Sun 29 Mar 2026 06:01:06 +0000
Manifest this update: Sun 29 Mar 2026 06:01:06 +0000
Manifest next update: Mon 30 Mar 2026 06:01:06 +0000
Files and hashes: 1: FTU-IVO2NNBlXW4Q2EwJJORm_is.roa (hash: yMyznpEegGljCcs/jnznmQ+oneu3veLngWC/HBD66uk=)
2: OBgMB0--WYgkxwAxlbMKpKNmFSw.crl (hash: h/CYIGVRyAgeKSAlRTKO2eWH4Qxft9ssRMMEDWsvVCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:86:62:d4:ff:ef:94:86:41:9c:2b:76:0c:2f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38180c074fbe598824c7003195b30aa4a366152c
Validity
Not Before: Mar 29 06:01:06 2026 GMT
Not After : Mar 30 06:01:06 2026 GMT
Subject: CN=3ccf50f9f38d23c1b982d62f1bae6afbda2eaf53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:15:93:06:78:71:15:02:62:ea:32:5e:b4:
8f:4c:76:04:3e:f3:80:0d:59:9e:ae:d3:32:bf:07:
7b:12:05:c7:3d:2f:9e:45:00:fe:1e:22:2e:0a:7d:
6f:8c:7c:f5:7f:ab:c4:4e:c1:88:e9:c8:40:bb:ee:
0f:1b:ea:a0:1b:ab:5a:93:93:18:6a:d7:b3:19:08:
1a:2c:b8:f5:42:6b:ca:1c:a3:48:78:b7:7c:20:8a:
b7:78:8c:85:7c:60:d3:83:d2:e8:77:18:36:90:65:
93:e4:ce:b0:08:fe:59:54:8f:e6:38:de:56:11:fe:
b2:b0:a9:23:0e:6b:f3:92:7a:7e:a4:d0:c2:da:48:
ff:5d:82:be:3a:a8:ec:27:80:d5:ba:e1:ab:33:83:
59:2b:64:0a:b2:82:22:3d:5b:1a:3c:54:b1:87:4b:
3d:d1:e4:2d:82:74:49:01:5d:e4:9a:c5:93:d8:74:
16:13:ee:f7:47:84:e9:cb:55:97:25:7f:4e:9a:5b:
8a:c9:05:92:5e:0c:70:0d:6b:92:b5:dc:77:11:a6:
a9:20:43:e0:00:30:80:2c:cc:17:35:1e:26:dd:ef:
35:a9:ed:52:3e:71:01:ba:68:6d:79:d5:25:b5:d3:
4a:5b:24:b1:59:c5:5d:7c:d2:e3:d9:59:97:d1:86:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CF:50:F9:F3:8D:23:C1:B9:82:D6:2F:1B:AE:6A:FB:DA:2E:AF:53
X509v3 Authority Key Identifier:
keyid:38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:be:6a:14:4a:19:49:a7:ec:c0:92:49:ce:b0:f0:87:4b:a6:
be:e9:b6:6b:35:7d:07:81:80:a0:1e:fc:11:bd:d3:8d:8d:8f:
75:ed:87:c9:0c:02:0b:99:15:87:0d:5e:63:28:c2:9c:48:35:
a6:d6:90:f8:38:95:02:1b:86:52:1a:8a:0f:44:33:e1:8c:c5:
6d:76:f4:f2:e6:f7:e0:b5:ba:66:c2:a9:1e:3c:e5:75:3b:3e:
b5:0e:71:98:a9:02:64:63:9d:9b:4f:3f:2a:95:c4:df:44:57:
91:02:1f:78:2f:63:2e:f0:d0:64:42:19:e2:b6:81:a0:6d:c8:
6f:3b:6e:ae:fd:dc:aa:7f:96:43:1f:8b:b2:30:c5:e1:0e:0d:
32:dd:4a:74:cf:44:79:4a:3d:87:17:e7:ed:41:ee:3e:e2:a3:
4d:ba:d8:ce:6e:7d:49:88:09:17:df:d2:43:96:f1:4c:a4:e4:
e3:15:fa:a2:71:a5:66:ca:74:7a:e1:de:3a:64:5c:22:d9:aa:
28:7a:c0:be:32:d5:3c:c7:d0:dd:98:9e:5d:7d:34:89:bf:ae:
f6:c8:a9:cf:9d:dd:5a:25:7e:7d:7d:65:d2:02:63:8b:a7:47:
22:d9:42:f1:9c:43:9a:23:36:6e:62:4b:76:d8:8d:f1:13:95:
02:f7:41:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:25 2026 by rpki-client