Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
File: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft (raw, json)
Hash identifier: QzLRijkji3DzH3tGc6y2aF8wpQFLgSyoRRQr3Zr/KDk=
Subject key identifier: 72:7C:FA:B9:2A:2C:1E:5C:B9:98:8C:A4:46:5D:83:CD:2C:81:04:E7
Authority key identifier: D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
Certificate issuer: /CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Certificate serial: 019D3977F95E828C94C6357F0CDBA344AA69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
Manifest number: 0FA2
Signing time: Sun 29 Mar 2026 12:00:57 +0000
Manifest this update: Sun 29 Mar 2026 12:00:57 +0000
Manifest next update: Mon 30 Mar 2026 12:00:57 +0000
Files and hashes: 1: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl (hash: tZjHYhTE2u242Qkcwn5EirVRkQKcNNTqtOC3hh188tE=)
2: jZT-rA7xXgV9ISXMAJBVRKLq758.asa (hash: 1yFM7L3x3s5BQ7YW45Q8MwC00LEtrcdpmLfR0GtoPSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f9:5e:82:8c:94:c6:35:7f:0c:db:a3:44:aa:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Validity
Not Before: Mar 29 12:00:57 2026 GMT
Not After : Mar 30 12:00:57 2026 GMT
Subject: CN=727cfab92a2c1e5cb9988ca4465d83cd2c8104e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:d8:f1:1d:38:a6:9c:83:85:ef:cc:4d:cf:
54:fd:8b:b3:a5:a2:d3:3a:45:70:dc:c5:5d:52:7e:
87:4c:a1:14:8a:12:36:1c:25:7f:10:70:26:1d:c3:
61:7a:64:a8:34:50:00:2a:5f:fd:d3:b0:b2:f8:2d:
8c:60:22:8d:01:f8:63:e6:be:0a:ce:fb:23:95:bc:
9e:ea:76:11:d6:e1:a3:65:58:8d:6f:43:1f:06:b9:
ba:3d:a8:12:24:e4:2a:48:e8:69:4b:74:01:8a:62:
04:60:5d:f7:04:84:a6:0c:08:9e:02:6a:55:cd:d2:
1a:fe:32:18:aa:73:87:3a:dd:86:45:38:50:8a:ad:
30:d3:c1:fa:ad:fe:d0:05:c0:c3:10:9e:3e:1a:80:
19:96:65:63:54:17:53:3f:41:82:ff:f0:9c:7c:9a:
de:ef:43:d2:dd:7e:82:68:a4:da:dc:74:eb:ce:3b:
f2:df:67:69:22:55:13:10:24:19:a9:ba:2d:75:99:
66:88:d1:46:6f:9d:60:d3:e5:ff:69:e3:2b:61:96:
05:38:c7:5e:08:64:85:b0:bc:e1:59:4b:af:88:41:
3f:4c:07:d0:52:50:f6:87:a2:d6:e6:e4:18:3e:c4:
01:03:4c:34:ba:d7:f8:8c:a5:1a:ab:b8:0c:d2:d7:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7C:FA:B9:2A:2C:1E:5C:B9:98:8C:A4:46:5D:83:CD:2C:81:04:E7
X509v3 Authority Key Identifier:
keyid:D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:72:78:d2:27:9b:6b:df:5f:ba:4a:40:72:ba:26:f8:e2:98:
a2:c1:73:d4:52:2d:56:f8:8e:6f:bd:71:02:1f:f6:d6:ce:f1:
7c:68:62:54:d9:ef:4c:97:fd:a0:90:27:8d:ea:01:ef:fb:a8:
fa:c7:8c:33:70:b9:1c:c5:7c:d1:52:3a:8f:80:ff:97:03:a0:
6d:8b:16:49:b8:3f:34:69:18:47:16:51:24:f5:f3:2a:da:1f:
fa:a6:76:af:19:61:2e:1d:a9:13:43:c6:d0:b1:31:05:85:1c:
3e:f7:12:f9:07:a0:08:10:f7:d8:c5:d5:a5:a5:ea:73:84:22:
60:fc:6e:7d:d7:41:82:88:54:0c:a7:e9:4e:9d:23:a4:65:9e:
9b:06:67:17:53:de:8a:8a:cc:50:62:bf:d8:7b:22:90:79:25:
7f:52:a4:c9:28:62:f1:0c:47:3e:d6:27:cb:08:72:8d:cb:b3:
ed:6d:23:c3:c4:e7:95:0b:e1:e7:7e:ff:fe:f6:b2:a1:12:4c:
e9:84:26:33:68:c4:20:41:da:1a:b7:4b:70:d1:2a:60:4d:a9:
f1:38:90:c8:e5:27:c6:2b:d9:e2:f4:c4:5b:f3:50:f9:25:0d:
1a:00:ee:e9:cc:fb:e1:9c:15:92:0c:43:41:d1:bc:45:f3:8d:
f8:c2:8a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:45 2026 by rpki-client