Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
File: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft (raw, json)
Hash identifier: aOyuvId60iFsOvKQUTGOmP0mEenee0YY9qYoSHkBcRg=
Subject key identifier: 7B:2E:C8:3C:E4:C3:F1:7F:1B:F4:7F:86:AB:48:80:D9:2F:90:BA:78
Authority key identifier: A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
Certificate issuer: /CN=a01012ec845500718cab76c9dd0af010890de26d
Certificate serial: 019D382EAF99882C1B2BA8DF422172A06A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
Manifest number: 1231
Signing time: Sun 29 Mar 2026 06:01:16 +0000
Manifest this update: Sun 29 Mar 2026 06:01:16 +0000
Manifest next update: Mon 30 Mar 2026 06:01:16 +0000
Files and hashes: 1: cyts1p2wCvnwn0Aiq887XNaaeB4.roa (hash: 35IzE+3xgtlfUeRGehmvu6jrdJGF2F8RsbhMs7R8PLM=)
2: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl (hash: hSv7SNAd21o3fK5PNX2FG5xnip1l9P/RnTN12NmQT3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:af:99:88:2c:1b:2b:a8:df:42:21:72:a0:6a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01012ec845500718cab76c9dd0af010890de26d
Validity
Not Before: Mar 29 06:01:16 2026 GMT
Not After : Mar 30 06:01:16 2026 GMT
Subject: CN=7b2ec83ce4c3f17f1bf47f86ab4880d92f90ba78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:62:aa:9a:3d:79:b5:46:4c:a7:9a:c4:94:50:
2e:51:8b:dd:d6:ca:4a:ab:0b:48:59:61:11:25:58:
76:59:1f:cd:50:37:d3:6d:4b:68:82:39:3f:aa:21:
dc:09:d6:64:a2:c0:0a:4a:d9:69:db:98:f9:8b:81:
9c:ff:dd:05:6a:ce:2e:97:9e:2d:52:66:47:d1:1a:
68:0a:05:17:57:b2:87:f6:12:52:12:be:cd:d8:c9:
25:85:57:d9:cd:29:b7:d0:86:a3:e5:f5:59:4b:93:
e1:01:71:c9:0e:db:27:02:e6:e1:f5:13:fe:78:c8:
1c:91:00:92:29:2a:aa:25:dc:ac:8f:03:1f:1f:59:
d0:e2:9b:54:9b:70:de:ae:7b:d9:81:27:5f:fe:e4:
8a:69:22:f0:92:8a:c0:ea:6b:28:49:4d:7f:69:e1:
26:cd:93:64:9c:a3:e3:28:6f:f0:47:aa:0d:33:25:
cb:44:c0:96:11:ce:6f:0b:a3:16:41:2b:9e:ca:6b:
ea:81:38:e7:57:eb:f0:4d:47:95:aa:ba:dc:0c:45:
89:ab:e2:e3:d6:33:65:a4:5a:67:ba:12:b1:58:27:
93:23:f8:14:0f:2f:10:18:6d:f6:f7:07:87:5d:54:
13:66:9f:2c:e6:47:7c:e7:b4:2f:93:98:b4:37:3e:
6c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2E:C8:3C:E4:C3:F1:7F:1B:F4:7F:86:AB:48:80:D9:2F:90:BA:78
X509v3 Authority Key Identifier:
keyid:A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:56:ab:c3:28:db:7b:51:cb:6c:34:d6:e8:94:18:d8:b5:a3:
6c:65:26:96:1e:02:5e:01:73:a2:5b:7d:f0:ff:49:76:e7:3a:
e1:ab:86:ed:6c:bd:c1:86:62:06:a1:ca:f7:ea:2e:d5:1b:4f:
19:4d:d3:90:46:88:89:6b:ca:78:41:1a:82:c4:f9:fe:65:52:
4a:ce:20:02:d0:6e:ba:a7:3e:a2:07:c6:4a:88:d2:f5:fe:cd:
35:48:26:f7:61:1d:9c:0a:17:df:62:08:e3:4c:48:42:9a:97:
ba:8c:61:ce:c1:e1:2b:44:c9:16:6e:be:69:56:bd:06:8d:73:
07:b0:44:57:1d:87:55:0c:47:a1:1b:81:40:0d:b7:00:03:c5:
43:8c:50:5c:14:1b:b8:13:ea:9d:3a:70:51:4f:81:71:2a:7f:
56:31:d4:55:88:4d:a1:92:59:d1:1c:c0:c4:d4:1e:7f:d5:0d:
1e:61:2d:0e:71:d3:1a:57:cb:33:72:fa:e9:18:70:c3:96:e1:
c0:6b:1a:7f:e8:9b:e5:cc:96:aa:cf:74:ad:54:0e:d7:40:38:
2d:55:f1:49:71:a2:23:dd:8d:cf:07:9d:5e:aa:5c:c5:6a:4e:
eb:58:12:35:fc:2a:f5:2e:d5:a2:35:a4:c2:19:02:ad:88:71:
86:45:49:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lq+ZiCwbK6jfQiFyoGp0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMTAxMmVjODQ1NTAwNzE4Y2FiNzZjOWRkMGFmMDEwODkw
ZGUyNmQwHhcNMjYwMzI5MDYwMTE2WhcNMjYwMzMwMDYwMTE2WjAzMTEwLwYDVQQD
Eyg3YjJlYzgzY2U0YzNmMTdmMWJmNDdmODZhYjQ4ODBkOTJmOTBiYTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2Kqmj15tUZMp5rElFAuUYvd1spK
qwtIWWERJVh2WR/NUDfTbUtogjk/qiHcCdZkosAKStlp25j5i4Gc/90Fas4ul54t
UmZH0RpoCgUXV7KH9hJSEr7N2MklhVfZzSm30Iaj5fVZS5PhAXHJDtsnAubh9RP+
eMgckQCSKSqqJdysjwMfH1nQ4ptUm3DernvZgSdf/uSKaSLwkorA6msoSU1/aeEm
zZNknKPjKG/wR6oNMyXLRMCWEc5vC6MWQSueymvqgTjnV+vwTUeVqrrcDEWJq+Lj
1jNlpFpnuhKxWCeTI/gUDy8QGG329weHXVQTZp8s5kd857Qvk5i0Nz5s4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsuyDzkw/F/G/R/hqtIgNkvkLp4MB8GA1UdIwQY
MBaAFKAQEuyEVQBxjKt2yd0K8BCJDeJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0JBUzdJUlZBSEdNcTNiSjNRcndFSWtONG0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83YjMwOGMtNzBjZC00ZjI0LWI2MTAt
N2FiYTU2OTY1OGQ1LzEvb0JBUzdJUlZBSEdNcTNiSjNRcndFSWtONG0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83YjMwOGMtNzBjZC00ZjI0LWI2MTAtN2FiYTU2OTY1OGQ1
LzEvb0JBUzdJUlZBSEdNcTNiSjNRcndFSWtONG0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVarwyjb
e1HLbDTW6JQY2LWjbGUmlh4CXgFzolt98P9Jduc64auG7Wy9wYZiBqHK9+ou1RtP
GU3TkEaIiWvKeEEagsT5/mVSSs4gAtBuuqc+ogfGSojS9f7NNUgm92EdnAoX32II
40xIQpqXuoxhzsHhK0TJFm6+aVa9Bo1zB7BEVx2HVQxHoRuBQA23AAPFQ4xQXBQb
uBPqnTpwUU+BcSp/VjHUVYhNoZJZ0RzAxNQef9UNHmEtDnHTGlfLM3L66Rhww5bh
wGsaf+ib5cyWqs90rVQO10A4LVXxSXGiI92NzwedXqpcxWpO61gSNfwq9S7VojWk
whkCrYhxhkVJ9w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:26 2026 by rpki-client