Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
File: ObCMosZLpzX0sUUhbdFNmfCCnw8.mft (raw, json)
Hash identifier: hdc9qd54lSe12aPfR9cWoyehxJpYR3ERo7MHBEAa/8A=
Subject key identifier: B1:23:1A:A0:A3:F4:9D:49:24:28:0C:EE:E3:9E:1E:5F:55:58:D5:94
Authority key identifier: 39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
Certificate issuer: /CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Certificate serial: 019D382DE2DB36FDC6D20C19212F78576863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
Manifest number: 01E0
Signing time: Sun 29 Mar 2026 06:00:24 +0000
Manifest this update: Sun 29 Mar 2026 06:00:24 +0000
Manifest next update: Mon 30 Mar 2026 06:00:24 +0000
Files and hashes: 1: 2sekLYLRU9svSlYdz5DgXczYbZ4.roa (hash: LFWvTLo8Q3qqX6yHRgyzbBIUG3C19O+Lb3LnHSjmeZA=)
2: ObCMosZLpzX0sUUhbdFNmfCCnw8.crl (hash: OTGRrDvMikcjJ1wW0p71l7+UNMhuW4nPDJ17u4NhvMg=)
3: djz1F_dy6bHmHqubW6DKbd3NWi8.roa (hash: sTfhHWPps1KBw5i/iSL7i2lTYyY7l+06q3cnoIV5ajE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e2:db:36:fd:c6:d2:0c:19:21:2f:78:57:68:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Validity
Not Before: Mar 29 06:00:24 2026 GMT
Not After : Mar 30 06:00:24 2026 GMT
Subject: CN=b1231aa0a3f49d4924280ceee39e1e5f5558d594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6f:ed:ba:a5:ff:c4:51:21:4b:74:bd:07:ad:
3e:55:49:b4:e2:18:9a:9b:54:aa:e7:93:9a:24:4c:
2c:41:96:ad:23:89:0d:9d:fe:89:c9:65:17:fb:8d:
9a:7f:7f:e5:e4:79:f1:fb:93:98:4f:87:d8:7f:43:
74:50:97:c2:76:58:66:8c:dc:dd:88:78:84:e7:0b:
bc:3a:c5:6b:c5:04:c5:7e:e9:47:b4:e9:dc:9f:1d:
9a:80:70:c2:97:70:b2:83:f5:80:73:73:1f:0a:3a:
83:c9:91:82:8e:da:bd:23:50:8f:f7:60:20:53:72:
03:06:1e:61:6a:9c:ec:20:87:69:2a:2f:68:2a:cd:
28:15:b9:c3:3d:25:bc:a5:dc:47:be:99:3d:24:f9:
55:82:ec:91:ef:7f:35:04:af:ed:ec:17:92:70:86:
a1:2f:6f:94:76:0f:82:01:13:c7:b5:b8:d3:c3:9b:
bf:40:b1:e4:06:1e:c6:1b:56:84:9c:98:03:d9:5b:
db:55:c6:09:a0:eb:54:d5:84:20:f6:2e:34:6b:95:
c9:d9:bc:95:d8:35:a5:3c:03:34:72:68:80:db:6d:
13:5b:33:a0:ef:7e:23:48:e7:a9:17:59:a6:66:10:
4a:05:49:56:e7:f3:32:01:86:3a:42:9e:6f:f7:36:
bc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:23:1A:A0:A3:F4:9D:49:24:28:0C:EE:E3:9E:1E:5F:55:58:D5:94
X509v3 Authority Key Identifier:
keyid:39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ec:4c:a4:6a:a6:8c:56:53:91:ae:f0:90:52:07:61:0e:07:
3c:00:bb:82:4d:0a:c9:2c:f3:b3:c5:77:49:76:ce:1f:09:f0:
50:b8:75:7a:bc:df:8d:e0:84:9d:68:b8:02:b7:59:49:b1:9f:
6e:e5:1c:95:30:93:ac:ea:37:f1:d6:57:3a:1e:99:8e:a7:2f:
f2:1e:a4:be:88:ea:70:e9:f7:1a:8d:b2:f9:65:ba:59:b0:1d:
1c:6c:12:23:e6:63:16:49:6f:8b:5f:12:67:dd:9b:0c:ba:0d:
59:f5:6d:98:4c:c6:fe:a2:03:77:f5:10:c4:ef:43:b3:01:66:
79:c3:07:bf:79:09:29:98:75:71:9f:9b:2a:b4:90:53:b8:64:
48:e0:4d:c5:fd:a7:72:0a:8c:0c:bd:98:92:3b:a0:21:b2:93:
03:de:4f:f5:7e:17:bc:58:7c:a7:4a:95:6f:5d:f9:4b:11:a7:
f4:18:26:a9:da:e1:21:fb:f3:0a:bd:35:73:00:0d:75:8f:14:
c6:02:8c:4e:35:d5:fa:d8:03:f7:dc:82:fa:c8:d4:06:d3:13:
90:d8:24:51:b3:cc:0f:e7:bf:d5:13:7a:c0:67:ca:58:b5:50:
83:fd:68:94:7b:ea:1b:f5:82:08:69:16:19:25:3d:9b:ca:49:
52:06:e0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:39 2026 by rpki-client