Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft
File: OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft (raw, json)
Hash identifier: X8D0lqzCSxsaXrLltUOBvjBxfdp1TsFqysQhDlGZFoE=
Subject key identifier: 2F:C5:F1:5C:C4:08:3C:9A:99:10:6D:83:B6:6C:D0:7F:B6:A1:C8:2D
Authority key identifier: 38:18:31:50:AF:29:0D:0F:6D:25:B0:36:13:6F:1C:BF:6B:0F:17:C9
Certificate issuer: /CN=38183150af290d0f6d25b036136f1cbf6b0f17c9
Certificate serial: 019D3A1CE1CA14332A5EB9A8688FF74DE9F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgxUK8pDQ9tJbA2E28cv2sPF8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft
Manifest number: 01BB
Signing time: Sun 29 Mar 2026 15:01:04 +0000
Manifest this update: Sun 29 Mar 2026 15:01:04 +0000
Manifest next update: Mon 30 Mar 2026 15:01:04 +0000
Files and hashes: 1: OBgxUK8pDQ9tJbA2E28cv2sPF8k.crl (hash: tP4Ub89VnMEfctBrAa5AxEQRyl5oUQ3kGOVn9NLsIQ0=)
2: PvWEdvUsvJApSHZ3R-d_9QNSJq0.roa (hash: xYfcRYRBET48veMPHeKzunQfZ4kzm7AxzpSV80PqYl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBgxUK8pDQ9tJbA2E28cv2sPF8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:e1:ca:14:33:2a:5e:b9:a8:68:8f:f7:4d:e9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38183150af290d0f6d25b036136f1cbf6b0f17c9
Validity
Not Before: Mar 29 15:01:04 2026 GMT
Not After : Mar 30 15:01:04 2026 GMT
Subject: CN=2fc5f15cc4083c9a99106d83b66cd07fb6a1c82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:8f:3c:3c:ef:03:c7:8f:5d:de:67:78:04:
ca:08:2c:9e:b1:6e:74:19:01:01:bf:28:31:2d:a2:
f1:8c:cc:f9:d9:3d:7a:81:b6:1d:d3:e3:c8:6e:c7:
e7:bd:e0:f3:0c:15:c3:ab:50:31:af:a7:7e:d6:4a:
42:f2:e7:61:1f:87:1b:b0:92:c5:81:12:e1:a7:f4:
f7:90:19:d5:53:61:84:16:3c:47:2a:d5:9e:c7:a4:
af:7b:f8:3e:a1:bc:d7:5e:8d:69:57:2a:70:24:8c:
87:fc:2c:dc:c2:a5:ea:15:71:68:19:3e:ca:c8:06:
2c:a4:64:31:a1:90:41:ab:74:b2:2f:78:d7:4a:9e:
3f:c6:cd:e1:fa:d0:7f:82:1d:9e:51:f6:9c:d8:f0:
bb:88:88:a9:a7:02:64:82:ee:a7:7d:6f:4b:5d:0a:
79:91:7f:4f:a0:81:63:43:fa:d4:0d:8a:04:58:70:
4f:fb:11:79:30:ae:ed:07:60:31:1d:d8:1b:2e:fa:
78:2c:fc:f8:bc:f0:3a:6c:fa:b9:f7:fe:c5:d2:ba:
11:62:c3:c0:1a:6f:2a:10:5f:37:1a:da:00:5b:5f:
13:a0:ba:60:b2:69:40:6c:06:9c:b0:9b:f2:68:d5:
20:e3:9f:af:6d:f8:5f:3e:01:89:a6:a4:aa:e9:3b:
8a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C5:F1:5C:C4:08:3C:9A:99:10:6D:83:B6:6C:D0:7F:B6:A1:C8:2D
X509v3 Authority Key Identifier:
keyid:38:18:31:50:AF:29:0D:0F:6D:25:B0:36:13:6F:1C:BF:6B:0F:17:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgxUK8pDQ9tJbA2E28cv2sPF8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d5:df:1a:fd:85:8b:90:33:b5:c4:c5:07:09:3b:29:d0:34:
8c:0c:6f:fd:f0:e6:5d:83:33:5e:f2:07:a0:b3:7e:da:49:5e:
96:95:8c:ab:ba:35:36:a2:15:a3:24:fd:3d:8f:04:c7:9a:e5:
d6:14:bb:0a:85:e0:b7:6b:a7:ae:4d:b0:95:69:b7:ce:b9:2e:
28:57:b2:9f:dc:fa:b7:34:f6:f6:1c:6d:77:86:d2:50:19:1b:
90:fc:3e:4a:7b:d5:d7:1f:27:93:ad:a5:a9:32:fb:31:c4:4d:
9c:89:98:d8:ab:18:f9:85:39:ab:2e:15:e3:8d:57:81:85:df:
95:6e:79:ce:f4:99:82:8d:b1:31:fc:7e:2a:b5:9d:91:ef:91:
47:6e:58:4b:0b:c4:fd:36:9a:0d:93:77:97:25:90:95:42:26:
5f:be:57:90:e3:8f:04:4a:7e:b4:3b:dd:11:22:b4:65:93:b0:
2b:aa:81:7f:09:8f:fa:c0:84:2b:7b:79:ae:bf:99:56:06:e8:
76:32:7f:8d:4a:64:8d:4c:15:25:55:f1:f9:3f:c7:10:4a:01:
86:a4:6c:17:1e:f7:d5:cb:3e:79:e4:29:68:ff:67:a4:d4:4f:
e0:3b:f9:29:95:8d:e9:51:d4:31:fc:2f:7f:18:74:5d:f3:da:
47:e5:b2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:10 2026 by rpki-client