Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
File: ObCMosZLpzX0sUUhbdFNmfCCnw8.mft (raw, json)
Hash identifier: hFhKgzipZ0l7fLJRh6Km+ekq5h+VV9RU5hqDsl/NuEo=
Subject key identifier: 85:91:35:39:69:44:72:0F:E7:7C:97:71:B8:5B:5D:C0:65:54:F8:8E
Authority key identifier: 39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
Certificate issuer: /CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Certificate serial: 01A06F15EDF8609663217C748CE8A42A7C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
Manifest number: 038B
Signing time: Sat 05 Sep 2026 01:01:42 +0000
Manifest this update: Sat 05 Sep 2026 01:01:42 +0000
Manifest next update: Sun 06 Sep 2026 01:01:42 +0000
Files and hashes: 1: 96Z9YmkwhDlGo5pAMuw_E3Hp7Lk.roa (hash: poB30dm+SrH8X1Re/HLNOKlVM2DpDlomGaXJPMbImyI=)
2: ObCMosZLpzX0sUUhbdFNmfCCnw8.crl (hash: Q3k0mdwQ7WaeSZkJ+nb/ZGLqoXOWqTnnpgT5BNDGmNw=)
3: djz1F_dy6bHmHqubW6DKbd3NWi8.roa (hash: sTfhHWPps1KBw5i/iSL7i2lTYyY7l+06q3cnoIV5ajE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:15:ed:f8:60:96:63:21:7c:74:8c:e8:a4:2a:7c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Validity
Not Before: Sep 5 01:01:42 2026 GMT
Not After : Sep 6 01:01:42 2026 GMT
Subject: CN=859135396944720fe77c9771b85b5dc06554f88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fb:c5:a2:74:f4:43:40:ca:ce:f4:fc:7f:05:
23:f7:f1:e2:ec:4a:da:2e:a5:27:84:66:0c:7b:73:
d1:86:03:b9:1b:fc:9b:6c:0f:df:0f:a3:87:dd:86:
5d:86:b6:c0:7d:b0:c9:86:0e:01:49:1f:53:bd:90:
d8:85:4e:1e:7d:53:f9:bf:b0:4b:3f:96:90:44:2b:
f9:a6:0c:b6:be:ff:62:66:58:ca:1a:b3:27:7b:d4:
b9:2c:3c:e0:99:f7:3b:06:db:a7:a9:98:b9:39:1e:
0a:37:cc:95:4d:35:a1:d6:cd:28:83:70:c2:e6:41:
ec:c6:0a:56:ce:39:44:7a:5b:f3:b8:dd:d0:cd:0e:
40:d2:cc:28:82:31:d2:18:c1:a6:83:1d:eb:ef:3c:
3d:c7:43:41:8c:2a:ee:fc:11:54:d7:44:08:fe:e9:
48:7a:37:54:82:38:78:42:76:cc:5b:3b:66:7e:1b:
53:ed:ff:d8:2f:6f:31:71:52:a7:d9:7f:b4:c0:f8:
c9:d7:74:06:69:c0:06:54:9a:3f:55:b6:22:01:a1:
5c:20:27:4b:fe:06:4e:6e:0d:d3:07:a1:b5:c9:d6:
e6:bd:4b:6c:50:4d:ed:96:b7:19:88:8c:3e:be:b2:
9f:25:2e:11:36:70:c4:cb:ea:ae:01:64:0c:c4:1a:
12:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:91:35:39:69:44:72:0F:E7:7C:97:71:B8:5B:5D:C0:65:54:F8:8E
X509v3 Authority Key Identifier:
keyid:39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2c:8d:88:a9:83:a0:e5:73:57:d9:31:61:e4:5b:8c:55:57:
a9:16:7b:ae:c7:bc:cd:ec:d7:1f:90:da:cf:fc:30:6d:91:81:
4f:e3:1a:6e:1d:bb:c8:db:4c:fb:80:da:d6:9a:f3:10:d8:ce:
b9:6a:d0:cc:36:09:b5:c7:4d:c3:f3:50:87:17:eb:86:e9:20:
e7:a9:46:c2:42:7a:38:ef:84:63:34:fc:9d:ea:c3:b8:3a:4a:
f2:a6:00:eb:42:58:32:28:ca:a4:46:f9:5f:1c:8c:58:d4:29:
c9:35:6e:4f:c2:1f:ec:8f:7b:02:30:12:34:88:88:f4:84:b3:
0a:83:de:f8:28:16:78:ca:11:54:80:df:60:b3:f7:8a:7d:cd:
c9:73:d2:ec:c2:2a:ce:d2:e9:c8:52:71:f2:09:f4:f7:a3:2f:
87:96:47:43:81:2b:f6:33:57:33:81:0b:56:2c:6a:1e:50:ed:
24:46:55:e4:02:2c:90:ad:22:c6:aa:02:20:6b:fa:c6:b4:4b:
d9:55:3f:88:b3:5f:47:83:2e:c7:4a:f7:a4:26:2f:34:5a:22:
5d:c8:33:3b:b7:af:92:98:e1:d2:37:db:67:b2:07:8f:fc:56:
07:54:59:70:84:be:c8:77:b9:cb:b7:b1:32:a2:8a:21:fb:41:
6d:09:b9:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvFe34YJZjIXx0jOikKnw6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YjA4Y2EyYzY0YmE3MzVmNGIxNDUyMTZkZDE0ZDk5ZjA4
MjlmMGYwHhcNMjYwOTA1MDEwMTQyWhcNMjYwOTA2MDEwMTQyWjAzMTEwLwYDVQQD
Eyg4NTkxMzUzOTY5NDQ3MjBmZTc3Yzk3NzFiODViNWRjMDY1NTRmODhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPvFonT0Q0DKzvT8fwUj9/Hi7Era
LqUnhGYMe3PRhgO5G/ybbA/fD6OH3YZdhrbAfbDJhg4BSR9TvZDYhU4efVP5v7BL
P5aQRCv5pgy2vv9iZljKGrMne9S5LDzgmfc7BtunqZi5OR4KN8yVTTWh1s0og3DC
5kHsxgpWzjlEelvzuN3QzQ5A0swogjHSGMGmgx3r7zw9x0NBjCru/BFU10QI/ulI
ejdUgjh4QnbMWztmfhtT7f/YL28xcVKn2X+0wPjJ13QGacAGVJo/VbYiAaFcICdL
/gZObg3TB6G1ydbmvUtsUE3tlrcZiIw+vrKfJS4RNnDEy+quAWQMxBoSqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWRNTlpRHIP53yXcbhbXcBlVPiOMB8GA1UdIwQY
MBaAFDmwjKLGS6c19LFFIW3RTZnwgp8PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2JDTW9zWkxwelgwc1VVaGJkRk5tZkNDbnc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hYzAwYjctZGE0Mi00NDY0LWJiYzUt
MzQxNjA0NGUzNThlLzEvT2JDTW9zWkxwelgwc1VVaGJkRk5tZkNDbnc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hYzAwYjctZGE0Mi00NDY0LWJiYzUtMzQxNjA0NGUzNThl
LzEvT2JDTW9zWkxwelgwc1VVaGJkRk5tZkNDbnc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCyNiKmD
oOVzV9kxYeRbjFVXqRZ7rse8zezXH5Daz/wwbZGBT+Mabh27yNtM+4Da1przENjO
uWrQzDYJtcdNw/NQhxfrhukg56lGwkJ6OO+EYzT8nerDuDpK8qYA60JYMijKpEb5
XxyMWNQpyTVuT8If7I97AjASNIiI9ISzCoPe+CgWeMoRVIDfYLP3in3NyXPS7MIq
ztLpyFJx8gn096Mvh5ZHQ4Er9jNXM4ELVixqHlDtJEZV5AIskK0ixqoCIGv6xrRL
2VU/iLNfR4Mux0r3pCYvNFoiXcgzO7evkpjh0jfbZ7IHj/xWB1RZcIS+yHe5y7ex
MqKKIftBbQm5HQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 11:54:42 2026 by rpki-client