Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
File: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft (raw, json)
Hash identifier: BbNuzRe3oIFHGMDJtoUwxzJxGbimHkdaz+TCW/YEXEo=
Subject key identifier: E3:FC:CD:DF:88:21:0A:97:84:87:61:BA:69:0F:8E:9D:51:EC:4A:9A
Authority key identifier: A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
Certificate issuer: /CN=a011a02e929c43f0199c8326302e24899c4a4151
Certificate serial: 019D420D7A8CA48CAD6785B424722113D401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
Manifest number: 15FF
Signing time: Tue 31 Mar 2026 04:01:12 +0000
Manifest this update: Tue 31 Mar 2026 04:01:12 +0000
Manifest next update: Wed 01 Apr 2026 04:01:12 +0000
Files and hashes: 1: 3hCGWzvELH55mpVn4uKDFqlbo8A.roa (hash: fh3+qnTWKRFUhHaDY/XoVgctnD35QjJX8ymXccmziuw=)
2: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl (hash: V/svlWZUKMNML+NhezdKgSHmB2Tv/8XAQwy9o5KEvuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:42:0d:7a:8c:a4:8c:ad:67:85:b4:24:72:21:13:d4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a011a02e929c43f0199c8326302e24899c4a4151
Validity
Not Before: Mar 31 04:01:12 2026 GMT
Not After : Apr 1 04:01:12 2026 GMT
Subject: CN=e3fccddf88210a97848761ba690f8e9d51ec4a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0e:3b:b9:1e:02:ef:6d:7e:a9:78:56:f4:d6:
07:5a:0b:46:28:42:55:a4:78:a0:47:8b:bc:47:a2:
ab:e3:07:34:6e:0d:33:bd:9a:a4:84:c0:8d:b6:17:
75:e8:42:08:53:ab:7f:38:ce:75:b7:66:56:18:9f:
19:65:e4:3e:c6:94:a0:ee:32:f1:eb:98:a8:5a:e0:
6b:70:c2:76:83:ed:ce:be:63:e3:8a:bf:78:74:4e:
fa:7f:53:de:1f:0e:ff:08:3d:81:61:eb:cd:3b:16:
a0:02:cd:02:92:c8:6d:72:3c:5a:df:95:85:3e:a3:
37:3a:e8:b9:4a:f7:fc:be:8f:50:6d:55:34:a9:ca:
6c:4d:bc:5f:e3:bc:d5:2e:8a:e3:10:48:35:00:92:
a3:b8:90:e8:32:22:4d:5a:5f:e3:0d:2c:fa:df:07:
46:e0:f2:2a:e7:01:19:57:7d:2e:2d:19:c4:57:08:
28:5e:89:46:12:5f:7a:c5:e5:11:97:1e:4b:bf:f7:
c2:da:ed:9a:fc:a3:85:ad:ee:cc:e9:7f:4f:61:2f:
fa:37:98:e3:37:1c:14:cc:ee:3a:34:87:37:ab:61:
20:a4:48:57:c9:3b:9f:4c:aa:4b:df:75:4b:6f:91:
ca:5b:28:fb:13:69:ed:89:05:26:7a:b2:7e:3e:77:
fd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FC:CD:DF:88:21:0A:97:84:87:61:BA:69:0F:8E:9D:51:EC:4A:9A
X509v3 Authority Key Identifier:
keyid:A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:55:11:08:17:d1:ba:14:11:a5:cf:39:a6:b5:22:c3:12:42:
f7:8e:07:a9:cc:a9:d3:f3:07:55:20:12:a8:57:00:12:29:e7:
a9:43:33:cc:c4:2b:07:56:bc:e2:d8:7c:35:1d:94:a7:80:0d:
87:25:3a:e8:96:7f:2b:d1:19:a6:e4:2c:82:28:1b:48:c3:a0:
15:b8:4a:c2:fc:2c:23:f9:ca:cf:8d:61:ee:ee:33:a3:5c:ae:
7f:c3:ea:91:d0:57:a9:e2:f2:1a:0d:1b:3e:27:86:24:fc:00:
b8:de:25:06:8e:67:42:9b:a9:9e:b8:ff:87:b5:e9:c5:da:0e:
48:3c:b7:45:ec:c1:5c:fa:85:d8:4d:41:70:5f:7f:6c:87:15:
d3:82:24:a3:24:6c:2e:d9:74:b4:c9:5f:eb:d6:e8:7b:7f:85:
af:bb:00:3d:e1:5a:e2:16:c3:bd:de:8e:77:92:02:81:11:d0:
e8:ee:c5:86:57:78:41:8a:fc:ef:f1:26:81:20:94:69:5a:f9:
d9:f3:e3:55:90:bc:34:7a:f4:2f:87:6e:37:4f:a6:a7:05:ff:
de:00:c9:69:23:47:59:b2:57:ca:e8:c6:1b:d9:1a:8f:b7:d6:
48:04:39:c0:30:ab:5e:ef:fc:2f:62:e5:91:2e:fb:92:e2:9a:
be:e7:2d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 09:29:39 2026 by rpki-client