Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
File: oBocfbuaFXGlv0kkqz_FBJMUX08.mft (raw, json)
Hash identifier: Rn5q1YVODxgxl7HxhwSI5vO8yMrAEJQyKfsJZkIb99Q=
Subject key identifier: 70:9A:F2:3C:D5:1D:DB:A4:A1:47:44:07:64:E8:F8:6D:13:02:C6:A7
Authority key identifier: A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
Certificate issuer: /CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Certificate serial: 019D382E1E93527587E661D174B3BB7571C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
Manifest number: 0989
Signing time: Sun 29 Mar 2026 06:00:39 +0000
Manifest this update: Sun 29 Mar 2026 06:00:39 +0000
Manifest next update: Mon 30 Mar 2026 06:00:39 +0000
Files and hashes: 1: HBEyLxpq6Zjz5sUTBEvkEU0PeDw.roa (hash: uYdJNtH72XeHZSBQgJWsgmqChwbMODpuyEXVyDLkE8Q=)
2: oBocfbuaFXGlv0kkqz_FBJMUX08.crl (hash: xRc1n5QzyIZI1lo9jU5VjhrdvRTS6HZLvVBkoOc97tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:1e:93:52:75:87:e6:61:d1:74:b3:bb:75:71:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Validity
Not Before: Mar 29 06:00:39 2026 GMT
Not After : Mar 30 06:00:39 2026 GMT
Subject: CN=709af23cd51ddba4a147440764e8f86d1302c6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:b8:9e:51:57:d1:a8:58:80:43:fd:e1:53:
43:f5:58:d0:29:18:b3:9b:7f:09:bc:7d:a4:01:32:
3c:91:42:bd:77:55:35:61:90:4d:5c:a9:82:03:5f:
75:f0:a3:62:86:89:3f:26:60:87:74:3d:f1:54:1c:
9a:dc:47:dd:ac:4e:54:61:56:0b:69:96:09:95:54:
c1:b0:34:30:90:fd:b7:b7:c3:fd:e9:8a:bc:66:fe:
88:ab:e0:9f:61:32:f4:06:1f:a3:93:a3:b1:bb:8d:
ca:f8:ae:c9:f9:87:2f:4f:10:20:a4:ae:bb:f1:aa:
35:7b:5c:f6:0a:fd:57:db:38:0e:bf:f7:2d:2c:ea:
62:bd:54:ff:f8:f1:1e:f2:47:ac:1a:75:87:34:05:
fc:14:3b:36:81:4f:fe:04:de:07:a0:ea:22:d0:63:
bd:3b:33:16:fb:3a:a9:92:e4:48:26:e6:d0:73:39:
42:2d:17:5d:03:66:15:46:70:e6:50:89:24:e7:e5:
ce:97:f4:a8:fd:44:f7:66:0c:f9:67:37:49:7f:91:
cf:54:b2:04:e5:87:70:32:06:05:64:41:f5:4f:06:
a0:c4:87:a4:ae:7d:67:cf:8a:34:79:c4:24:ed:69:
50:87:98:04:9c:08:97:69:0e:24:92:0a:f1:30:53:
5f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9A:F2:3C:D5:1D:DB:A4:A1:47:44:07:64:E8:F8:6D:13:02:C6:A7
X509v3 Authority Key Identifier:
keyid:A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:01:96:0a:1f:c6:0a:03:54:e1:0b:eb:9f:45:b7:4a:a5:05:
54:14:d2:c3:dd:bf:a0:78:8d:57:c1:e6:57:a8:84:16:78:f0:
09:2c:34:72:dd:1e:72:12:cf:0d:c6:e3:77:fd:19:24:30:81:
08:f1:68:1e:18:a7:00:c4:be:79:aa:e7:c8:2c:14:9d:79:e7:
f9:ad:09:ab:60:4c:23:e4:86:63:a7:10:8b:8a:d3:84:ea:e7:
43:5f:a8:26:6b:2d:07:cf:aa:a9:82:c4:a6:59:c9:3c:9b:dd:
16:58:21:0b:f1:e2:00:02:31:40:07:9f:cb:8e:6a:0c:1b:af:
d1:ba:d2:08:55:48:29:ca:69:a8:03:82:2a:71:02:eb:64:dc:
b8:07:e3:92:f9:b2:19:ae:d0:1c:dc:de:90:a5:d5:ef:ad:44:
f8:2a:f6:47:d6:8d:74:e6:ce:26:f8:6a:df:38:db:ef:08:6a:
06:fd:cc:57:a8:1d:f1:40:23:5d:c9:84:12:3a:15:71:29:a9:
9a:8c:e3:38:e3:0d:16:31:a1:3e:e6:43:8c:a8:77:aa:be:eb:
14:b9:8f:c4:6b:09:29:b9:26:da:49:bd:ae:cf:ff:1a:fa:69:
5b:a6:79:67:cc:e6:2f:e4:b8:d5:94:bf:67:cb:fc:91:e9:36:
f8:ac:d7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:05 2026 by rpki-client