Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
File: ObCMosZLpzX0sUUhbdFNmfCCnw8.mft (raw, json)
Hash identifier: 6bk1TOprt/CXf/rWNkLPHupb3Tr/OoHL1yAEzbbjDm0=
Subject key identifier: 53:E4:A2:87:5E:46:00:A0:A5:5A:3D:C5:8C:B7:57:A7:EC:92:FD:B0
Authority key identifier: 39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
Certificate issuer: /CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Certificate serial: 01A177A80DCC167BE87CC924F5F78BC2EC6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
Manifest number: 0414
Signing time: Mon 26 Oct 2026 10:01:04 +0000
Manifest this update: Mon 26 Oct 2026 10:01:04 +0000
Manifest next update: Tue 27 Oct 2026 10:01:04 +0000
Files and hashes: 1: 96Z9YmkwhDlGo5pAMuw_E3Hp7Lk.roa (hash: poB30dm+SrH8X1Re/HLNOKlVM2DpDlomGaXJPMbImyI=)
2: ObCMosZLpzX0sUUhbdFNmfCCnw8.crl (hash: 0bPy9vi94OcCHpSSyGdJMkPw4P0gy6LFhVDSLq4Ly84=)
3: djz1F_dy6bHmHqubW6DKbd3NWi8.roa (hash: sTfhHWPps1KBw5i/iSL7i2lTYyY7l+06q3cnoIV5ajE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a8:0d:cc:16:7b:e8:7c:c9:24:f5:f7:8b:c2:ec:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Validity
Not Before: Oct 26 10:01:04 2026 GMT
Not After : Oct 27 10:01:04 2026 GMT
Subject: CN=53e4a2875e4600a0a55a3dc58cb757a7ec92fdb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1d:cb:0f:0f:17:40:2d:f2:8e:41:6f:8c:ad:
5a:41:10:bd:7e:18:87:26:17:8d:01:4e:f7:78:d5:
0f:c8:f5:f2:86:30:e1:04:79:ad:44:5c:8c:86:15:
bb:39:25:61:ad:58:e0:5d:8c:ac:4c:61:6a:69:30:
20:7b:7e:09:bf:b4:68:50:08:fa:0c:ff:b6:09:5f:
70:80:c1:21:e6:c9:40:b2:bb:ac:93:6c:b3:65:44:
6b:4e:b7:0a:c6:b0:78:1f:f1:f7:aa:2f:44:e2:d0:
3c:86:1d:7a:e2:ce:a5:3e:04:64:7b:ac:d0:a7:aa:
70:c3:76:b7:c6:4c:0f:54:9b:ed:af:c6:0b:6a:1c:
e0:d8:7f:14:bf:22:b4:42:1c:d0:e4:8e:f3:fa:98:
59:c1:f2:a7:ed:e0:a0:50:84:34:be:c5:f0:42:7c:
ea:c0:83:55:70:f9:3d:d0:cb:3c:a8:86:f6:9a:06:
4c:3b:95:56:0c:77:a6:12:c8:6f:da:d3:f8:2d:4f:
ef:3d:25:c2:c8:31:48:56:95:83:99:10:ef:98:7f:
1f:60:b3:42:43:1d:3f:b3:36:64:a4:fe:a0:cb:59:
06:2b:7b:2b:ca:08:e1:37:dd:65:25:84:66:11:f9:
32:de:7c:2d:db:09:99:75:66:b5:45:59:50:cf:26:
85:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E4:A2:87:5E:46:00:A0:A5:5A:3D:C5:8C:B7:57:A7:EC:92:FD:B0
X509v3 Authority Key Identifier:
keyid:39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:92:4a:10:12:fa:36:39:84:cd:7a:90:84:e8:52:4a:28:2b:
6d:aa:3d:a0:6e:4c:2d:32:ef:b6:d5:ee:4b:90:ff:05:0e:00:
2c:d6:5d:5c:a8:e3:c1:86:bb:82:2f:a9:b6:30:52:61:f1:2e:
4f:87:e3:77:d5:ee:cf:d8:44:d8:77:fa:69:4b:e2:3c:1b:f9:
a2:7d:65:a3:df:e8:fa:67:89:40:4b:a5:52:2b:3a:dc:88:c7:
74:8f:9d:4d:19:50:50:04:05:12:0d:94:db:77:92:96:1f:67:
7a:86:62:d6:a8:db:c5:a5:76:9f:d5:dc:b1:99:16:98:e4:3e:
bb:22:2a:76:53:e6:74:b2:bc:b1:b0:ce:a7:2e:75:86:a2:34:
b7:84:32:82:aa:4f:90:26:fb:c5:35:4c:b1:25:00:a8:16:1e:
22:28:73:ef:d7:f4:0f:13:43:79:64:8d:68:7a:cb:c1:6f:d9:
0c:b5:bc:48:d6:91:fc:36:eb:a8:a9:76:d8:6b:f2:9f:72:ef:
c8:44:64:43:f8:71:5b:bb:b2:68:73:6b:97:98:22:a7:0a:2c:
66:6b:24:2b:4c:85:66:73:cd:74:3f:54:b4:0c:a8:59:32:fc:
b7:71:6a:58:08:52:6d:9f:8c:4a:c7:c3:8e:84:d9:fa:7e:cb:
c3:e2:dd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:25:56 2026 by rpki-client