Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
File: obBHf50JosdPTEWegLcpr-6zEtQ.mft (raw, json)
Hash identifier: poPewGNFwnKacEerBz8/UnVQloLnOKoMMYPJbzn0Y0s=
Subject key identifier: CE:88:B5:E9:45:DE:3B:DE:1B:1B:FB:F7:4C:E8:BB:55:4F:BD:D4:85
Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
Certificate issuer: /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Certificate serial: 019CE5C89A939B51400BC951DB668FFB3A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
Manifest number: 0E00
Signing time: Fri 13 Mar 2026 06:00:55 +0000
Manifest this update: Fri 13 Mar 2026 06:00:55 +0000
Manifest next update: Sat 14 Mar 2026 06:00:55 +0000
Files and hashes: 1: GcmnLhUrxsDtpi6IFcCeNgV9CNU.roa (hash: 30rGZU6mCf0D1WtNl4OSSePM1TRDWesSyIJi8OZOjqw=)
2: T9QosLBjVi3O4na1965Ec34JXvw.roa (hash: HSBCkcAnz7XfejtJRKHSAfoqFOLGJkEPluwkxCR0nhA=)
3: obBHf50JosdPTEWegLcpr-6zEtQ.crl (hash: pWJZzr8ihiCDH6k1M9TJAUXJAG3rfariWYlNV0Zvq+M=)
4: z_9II5WYBoTBGZ5pgFe4r6CevAw.roa (hash: b3pynxd2lAP3NtJ8uzmF53kEH7MeotRATSOpsRAWQMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:9a:93:9b:51:40:0b:c9:51:db:66:8f:fb:3a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Validity
Not Before: Mar 13 06:00:55 2026 GMT
Not After : Mar 14 06:00:55 2026 GMT
Subject: CN=ce88b5e945de3bde1b1bfbf74ce8bb554fbdd485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:fa:17:ce:21:aa:fa:f0:33:ab:af:24:f3:
1a:37:5c:e0:ea:f6:98:32:51:8c:d2:e8:86:d0:a0:
ce:d3:f8:89:59:f0:9b:12:92:86:98:47:cf:ff:b6:
21:77:cb:c9:71:10:05:74:44:c3:de:90:e5:29:c6:
59:2f:90:d6:20:35:7a:b0:80:73:11:c3:63:f8:4f:
46:f4:4b:9c:57:e9:0e:b7:98:fb:ce:06:b9:2b:0e:
c8:d7:24:51:d4:68:db:10:86:48:5f:b9:20:a2:d2:
8c:ba:be:90:0a:a1:74:e7:59:b8:9d:22:3c:c6:ec:
eb:83:8f:2f:3b:72:9a:98:f6:04:50:64:44:f2:16:
3c:59:0c:40:60:a3:fc:03:58:48:6d:4e:fc:77:f6:
32:80:4b:fa:89:d0:05:bd:05:57:fe:26:91:56:9d:
3a:ff:d4:d2:56:50:e9:aa:54:51:a6:46:88:e8:9a:
09:e3:fa:72:eb:5e:2c:51:5a:b4:f8:80:10:e2:a3:
39:50:c3:fa:52:28:e1:e8:0c:40:89:76:55:09:b0:
47:c0:4a:43:d3:76:bb:39:e0:67:12:b3:56:6c:d2:
f0:8e:82:82:3b:1c:57:0e:85:b2:01:b5:b1:4a:7f:
1c:92:a3:91:a7:6a:2a:cf:5a:a7:89:1e:7c:b1:74:
a8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:88:B5:E9:45:DE:3B:DE:1B:1B:FB:F7:4C:E8:BB:55:4F:BD:D4:85
X509v3 Authority Key Identifier:
keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c8:b0:c7:e5:29:fd:26:05:bb:46:19:5e:fb:70:ec:d2:3e:
b7:ac:3d:a1:ae:21:96:8c:8e:9e:b6:45:af:14:c9:8a:bb:a1:
d6:48:7e:1c:78:cc:8d:cc:49:3a:40:aa:1c:cd:a2:ca:03:2d:
a4:e6:37:97:3a:a4:8a:e3:93:1d:f2:5f:0f:7e:18:40:e1:41:
c4:51:55:1c:51:14:5e:8a:2a:15:ef:b4:34:9a:49:f2:9a:1b:
8d:40:e9:f5:e6:bf:d6:d3:6f:e2:8f:e1:e7:87:1a:bc:28:ae:
c1:e4:cb:23:23:f5:f4:c2:b5:9a:29:0e:11:4c:50:bf:ec:54:
21:f8:9e:71:a8:25:eb:ea:c6:e1:eb:f0:64:0c:86:70:ce:0a:
f5:61:97:f4:68:52:99:9d:0d:02:00:5b:d1:14:18:d5:25:04:
a9:5a:58:44:9a:d6:19:0c:46:4d:f1:0d:0e:c5:48:06:27:51:
6e:0f:66:58:c6:1b:ba:e7:53:a8:d5:57:66:87:a1:c1:31:c2:
b4:51:a9:56:e3:9f:96:e3:df:ab:70:9f:6f:2d:13:fe:ad:61:
d2:f7:b3:8a:16:ab:f0:38:35:02:dc:b7:c9:90:ee:d8:1b:53:
8f:bc:e5:07:d6:e6:db:50:9b:8a:63:6a:0c:9c:5e:7a:1c:6e:
57:a1:f6:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlyJqTm1FAC8lR22aP+zpUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjA0NzdmOWQwOWEyYzc0ZjRjNDU5ZTgwYjcyOWFmZWVi
MzEyZDQwHhcNMjYwMzEzMDYwMDU1WhcNMjYwMzE0MDYwMDU1WjAzMTEwLwYDVQQD
EyhjZTg4YjVlOTQ1ZGUzYmRlMWIxYmZiZjc0Y2U4YmI1NTRmYmRkNDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4H6F84hqvrwM6uvJPMaN1zg6vaY
MlGM0uiG0KDO0/iJWfCbEpKGmEfP/7Yhd8vJcRAFdETD3pDlKcZZL5DWIDV6sIBz
EcNj+E9G9EucV+kOt5j7zga5Kw7I1yRR1GjbEIZIX7kgotKMur6QCqF051m4nSI8
xuzrg48vO3KamPYEUGRE8hY8WQxAYKP8A1hIbU78d/YygEv6idAFvQVX/iaRVp06
/9TSVlDpqlRRpkaI6JoJ4/py614sUVq0+IAQ4qM5UMP6Uijh6AxAiXZVCbBHwEpD
03a7OeBnErNWbNLwjoKCOxxXDoWyAbWxSn8ckqORp2oqz1qniR58sXSoKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6ItelF3jveGxv790zou1VPvdSFMB8GA1UdIwQY
MBaAFKGwR3+dCaLHT0xFnoC3Ka/usxLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNDUxYjctOTA5MS00YTI3LWFiOTEt
MzQ4ZjlmZmJkODgzLzEvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8yNDUxYjctOTA5MS00YTI3LWFiOTEtMzQ4ZjlmZmJkODgz
LzEvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsiwx+Up
/SYFu0YZXvtw7NI+t6w9oa4hloyOnrZFrxTJiruh1kh+HHjMjcxJOkCqHM2iygMt
pOY3lzqkiuOTHfJfD34YQOFBxFFVHFEUXooqFe+0NJpJ8pobjUDp9ea/1tNv4o/h
54cavCiuweTLIyP19MK1mikOEUxQv+xUIfiecagl6+rG4evwZAyGcM4K9WGX9GhS
mZ0NAgBb0RQY1SUEqVpYRJrWGQxGTfENDsVIBidRbg9mWMYbuudTqNVXZoehwTHC
tFGpVuOfluPfq3Cfby0T/q1h0vezihar8Dg1Aty3yZDu2BtTj7zlB9bm21CbimNq
DJxeehxuV6H2jA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 13:32:15 2026 by rpki-client