Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
File: D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json)
Hash identifier: Yo/pvqVHT9i9JLzpRLvOkVdE5mGCJj3NDG8Jxk7eUc8=
Subject key identifier: 5E:26:4D:E7:BB:8F:DD:9B:D1:E6:60:10:E7:89:F5:F7:1C:90:D7:59
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 019CAAC6A1AE9D7E3B19D7ED91A7DB43667F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
Manifest number: 1747
Signing time: Sun 01 Mar 2026 19:01:09 +0000
Manifest this update: Sun 01 Mar 2026 19:01:09 +0000
Manifest next update: Mon 02 Mar 2026 19:01:09 +0000
Files and hashes: 1: 2og3dcAu_OJTWY5ClPmlGnRIzwU.roa (hash: 74PsLs5h39Lm9vcmo+PFlNAnhQ4jBPxcvEsxXUafgh4=)
2: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: gUtPXkOtBWUjRc7BAkn3dLLVYcG8rm51kfsbsgVnXrY=)
3: IoieNHiG8u34Xaf6cZuwExSjHiY.roa (hash: 6TOHj18/V3jeZNm1eBZWledHoUVLVjMzbsE5Bn+ZcQo=)
4: VEt141JORS4uXfTBqMEFS8dl95o.roa (hash: 1ZDnuppObmQPK0jPoDm6JuqwCFlMwWQBs72wZZg4jts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a1:ae:9d:7e:3b:19:d7:ed:91:a7:db:43:66:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Mar 1 19:01:09 2026 GMT
Not After : Mar 2 19:01:09 2026 GMT
Subject: CN=5e264de7bb8fdd9bd1e66010e789f5f71c90d759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:41:e4:2c:69:0b:55:c3:42:93:e1:b0:72:
b9:c1:61:93:c8:ee:f9:d4:de:dc:f5:9e:00:bb:83:
cc:dc:e8:45:ea:42:13:b2:41:83:0a:f3:7f:cd:b9:
8f:12:05:5b:2f:a8:b3:8f:89:5a:e8:93:4a:65:e3:
c5:53:2b:6e:5d:37:6b:df:9f:85:f0:f2:ae:72:4a:
d8:4f:0d:19:49:d4:5e:8d:fc:0a:d1:42:bf:0f:b7:
d9:96:1d:d2:09:52:a6:cd:3a:22:92:d5:e8:6b:5a:
28:6a:f4:3f:1f:aa:af:86:23:fb:65:47:e8:d7:f4:
a4:28:a9:3c:24:31:58:a4:18:f5:55:66:9e:17:ef:
5c:96:32:75:4b:97:fa:76:f1:b7:bb:8b:4f:a3:5e:
f8:1c:cf:a7:9e:eb:1c:e9:4e:55:63:92:3e:7e:3b:
a0:5f:ea:6b:f0:6f:e6:9c:92:81:a1:d4:47:52:36:
d8:9c:89:7e:35:81:77:36:a5:ed:6c:1d:f6:5b:4d:
1a:03:bf:bb:37:2f:30:76:30:76:6f:10:a0:23:48:
b8:2a:21:71:de:07:57:7d:9d:fa:28:15:95:45:83:
94:62:5d:d4:47:47:a4:13:02:81:73:a3:f2:03:ab:
9a:95:81:2f:9f:e0:f5:54:a4:88:6c:8d:59:15:53:
9a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:26:4D:E7:BB:8F:DD:9B:D1:E6:60:10:E7:89:F5:F7:1C:90:D7:59
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e6:a0:90:68:ff:87:6d:f7:24:7d:46:85:57:13:ea:ce:1c:
4c:a0:d4:cb:14:b7:ba:82:2d:c4:25:69:c1:98:61:22:a8:4e:
d1:45:57:05:2c:a3:48:a4:59:9a:04:14:b2:47:c0:9c:25:b2:
e5:0a:24:8c:e4:aa:e5:dc:1d:50:17:03:44:2e:6d:1b:ff:a1:
b3:f4:52:b9:60:1f:99:d0:41:1f:6e:3d:54:18:02:75:32:5f:
07:02:0b:82:c2:92:b3:25:7a:a0:b5:f5:c7:5b:c2:25:72:03:
63:ec:81:25:11:7c:6d:4c:06:74:8c:90:6c:1d:4d:fa:9d:c8:
b8:04:1b:f3:fb:12:1b:0e:a6:cf:a3:72:62:bc:4a:47:2b:1f:
1b:02:5c:f8:36:36:c5:70:f9:36:49:9b:78:62:0c:f0:97:d3:
5a:f4:10:5e:e3:78:20:85:3d:e4:0e:64:8a:7c:89:bf:64:68:
15:70:a9:8d:2b:ef:63:9b:ff:5b:aa:bd:5b:b9:21:87:90:9c:
25:e4:a4:23:15:fc:28:f3:30:7a:80:4f:1b:65:6a:2e:b5:37:
28:60:29:5e:4a:0c:55:c0:34:26:33:54:21:74:63:6d:3d:b1:
66:3e:d0:ed:00:4e:cb:14:53:81:96:0f:a5:70:0a:d1:25:dc:
22:9a:c4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:31 2026 by rpki-client