Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
File: OBLJfb0yGVtq-pEUC1UgteDCxb4.mft (raw, json)
Hash identifier: +Bj0jv0qEWt8+gac6M/bjW5l1t39FS97VvlX3Dohr+s=
Subject key identifier: EF:46:57:A5:4E:33:F1:81:33:9E:63:85:A3:E4:C2:16:69:22:B4:D7
Authority key identifier: 38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
Certificate issuer: /CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Certificate serial: 019D3909DC259BC8FC40F8EDA124220EF488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
Manifest number: 15D5
Signing time: Sun 29 Mar 2026 10:00:40 +0000
Manifest this update: Sun 29 Mar 2026 10:00:40 +0000
Manifest next update: Mon 30 Mar 2026 10:00:40 +0000
Files and hashes: 1: OBLJfb0yGVtq-pEUC1UgteDCxb4.crl (hash: /Jhy64oMOnKWECNeLWFrrlpeVba1ctPJUhs7SyeXOyM=)
2: nyzykzCSciL9b7XcY2Eb25U1248.roa (hash: y0AO2J7wuOu2+dkp56Hwq0efMMez1I5zXW1sHLiGxC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:dc:25:9b:c8:fc:40:f8:ed:a1:24:22:0e:f4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Validity
Not Before: Mar 29 10:00:40 2026 GMT
Not After : Mar 30 10:00:40 2026 GMT
Subject: CN=ef4657a54e33f181339e6385a3e4c2166922b4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1b:26:e9:86:e7:d5:39:92:66:88:d2:b9:dc:
18:0c:78:06:10:4b:33:ad:77:c9:23:ec:67:7f:e1:
16:c9:98:b5:af:2f:12:d9:68:3b:62:62:8b:e2:92:
ee:de:12:18:5f:01:d4:99:5a:4f:f7:b9:89:15:28:
ee:dd:38:b0:f0:2e:c7:be:1a:ab:86:62:2b:cc:4a:
76:a4:a7:f8:a5:66:12:fa:cf:5a:a2:f1:39:51:03:
72:bd:64:35:84:79:28:2e:3a:ab:62:99:a1:3d:38:
0e:38:0f:49:ef:65:e4:33:fa:f6:28:47:05:4e:5a:
be:ff:16:47:50:95:fd:e3:e2:19:f9:4e:59:a4:0b:
a1:7b:dc:93:60:db:a6:f3:77:c5:91:2a:00:3e:57:
0f:6e:50:40:d2:6d:ac:5c:66:db:42:7d:d5:f0:14:
b6:80:cd:ba:40:f8:4f:b6:3b:39:dd:92:c0:d3:4b:
24:91:15:82:be:c3:a3:22:c9:2a:c2:ce:65:71:22:
42:38:f2:2b:3e:23:98:a1:3a:b0:6b:6f:da:85:6b:
79:bb:c5:15:7e:95:f9:18:76:50:e6:00:77:a6:ba:
2b:74:7e:ab:45:53:7b:ff:35:12:1d:5f:78:d6:46:
7f:11:22:e7:62:96:ef:d4:ad:8f:29:a9:dd:3c:ab:
e3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:46:57:A5:4E:33:F1:81:33:9E:63:85:A3:E4:C2:16:69:22:B4:D7
X509v3 Authority Key Identifier:
keyid:38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:20:a2:26:e3:63:ad:c5:18:ba:9e:85:60:01:b1:0f:2f:d4:
f0:6f:8a:ad:c4:3f:cc:60:a6:2e:43:5e:14:92:ab:d7:0a:f0:
90:b5:0d:e5:36:0c:94:ab:dc:d4:d7:b4:0a:f3:2c:84:6a:c8:
c6:9f:8e:c1:5a:4e:89:02:bb:35:0a:ce:d5:90:a1:c5:18:ab:
ab:11:b4:bb:e7:98:9b:d9:98:c1:a1:41:f2:f9:79:a8:22:05:
ca:3f:70:69:02:83:e6:61:90:78:2b:19:b1:3e:de:7d:2f:61:
ae:de:8f:20:c9:b1:84:b4:22:8f:28:83:d1:e1:3b:22:00:69:
22:62:fd:dd:2c:14:7d:cf:6e:2b:a0:dc:e6:91:6c:46:78:99:
00:e0:0b:99:02:15:4f:39:d6:45:75:c4:e0:e6:16:1e:e1:cc:
69:e2:b5:a2:7d:ed:02:92:14:8f:60:18:ca:5e:1d:64:fa:86:
7b:b5:3b:79:a1:cf:67:5a:c1:4f:03:1b:31:dc:ff:5a:5f:0d:
5b:4b:7a:ac:58:6d:e6:76:94:32:c1:35:f9:22:8d:63:50:bd:
c6:40:da:35:f7:92:02:9a:ea:dc:da:a2:05:a0:c3:f1:34:76:
50:e7:e6:ac:78:38:3e:37:32:c9:2a:25:b3:ae:cd:a0:c8:da:
21:23:ba:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:14 2026 by rpki-client