Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
File: Obi08Elz83zGn7fCNGj5U_FJQg4.mft (raw, json)
Hash identifier: HOpTL8Kz7HaTvzAbYnvezy6VdkJWQdEnJdb9zBM71sQ=
Subject key identifier: 7E:EB:75:DB:AC:E2:57:19:32:B1:4B:61:6B:69:AA:78:9C:7D:1A:F3
Authority key identifier: 39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
Certificate issuer: /CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Certificate serial: 019CAE3600F019390345AF2238CBF1750FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 11:01:40 +0000
Manifest this update: Mon 02 Mar 2026 11:01:40 +0000
Manifest next update: Tue 03 Mar 2026 11:01:40 +0000
Files and hashes: 1: AJvahEEqtSZqRsCz5wURmumRzYc.roa (hash: c3wSVS47p9kC1Yvy6xlsE2dP8Wc3/54qv1aJh3wxi0s=)
2: Obi08Elz83zGn7fCNGj5U_FJQg4.crl (hash: 2YlzaS2d/72cop48f4zi2S3uTuLtGCsJBlxeoA9bLbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:36:00:f0:19:39:03:45:af:22:38:cb:f1:75:0f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Validity
Not Before: Mar 2 11:01:40 2026 GMT
Not After : Mar 3 11:01:40 2026 GMT
Subject: CN=7eeb75dbace2571932b14b616b69aa789c7d1af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:ba:c0:72:2b:26:ba:27:cf:7d:14:fa:ff:
4c:b2:f0:b2:aa:c2:f8:64:37:0f:1a:ab:f7:53:cf:
61:f5:2f:5d:26:ea:37:01:6e:4a:4b:c0:7c:8f:70:
ba:5d:12:1f:6e:7c:82:cb:2b:a2:9e:8c:6a:7f:8c:
d8:fe:0e:85:1f:1c:c2:c3:99:93:c2:bf:fd:1e:a7:
e9:28:9f:32:3a:3f:c0:b9:c2:3a:22:38:25:50:e2:
d7:4e:47:73:ec:d7:c9:44:eb:c2:25:03:0f:2d:6e:
25:8d:d5:bb:92:7a:22:33:91:7f:79:ce:15:a5:58:
ea:e9:11:3f:97:29:81:7c:b8:95:03:82:24:71:f9:
34:ff:00:08:4a:62:47:b9:cd:22:e5:6f:66:51:83:
96:53:9c:34:43:0a:f9:7f:91:71:34:cb:96:f0:af:
46:0a:e3:4b:2e:49:55:f7:c6:39:22:f2:6f:5c:f8:
0f:e3:53:4e:1a:42:48:19:8f:ce:51:d7:83:de:11:
05:24:ae:52:ca:8f:2a:23:ab:9c:25:a6:f5:0f:4e:
bd:7d:db:9e:bd:d9:6f:d2:74:a4:89:59:a3:d8:3f:
08:a5:6f:da:c8:81:b9:be:b2:35:cf:48:26:fa:b9:
df:cd:c7:61:65:d0:96:3f:10:c1:98:ac:8a:d8:46:
ac:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EB:75:DB:AC:E2:57:19:32:B1:4B:61:6B:69:AA:78:9C:7D:1A:F3
X509v3 Authority Key Identifier:
keyid:39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:90:2f:2f:d4:bd:f9:ba:d4:ab:35:8e:f9:c3:3a:5a:6d:bc:
c5:67:57:fb:0c:94:57:82:ea:3b:56:c8:33:93:ec:eb:64:e6:
9b:be:be:6b:37:15:81:ef:46:da:da:cf:98:50:8d:0e:e5:a7:
3a:72:9d:1a:d1:96:24:65:93:66:1a:16:51:21:02:4b:dc:23:
cd:e1:3a:9e:21:85:02:e4:c1:94:c0:e8:04:dc:16:ab:28:5d:
1b:19:12:bb:c9:d5:94:5a:eb:66:13:bd:57:bf:79:25:38:d6:
0f:53:08:55:ce:2c:7b:ee:1f:2f:df:ce:37:b2:4a:c4:96:ad:
2b:72:20:88:19:18:2a:29:34:be:f6:8f:46:07:6a:0f:aa:17:
9e:1d:5d:a6:ec:79:54:53:b2:69:74:f6:7b:a5:fa:79:d7:db:
e5:c0:71:92:49:eb:05:87:2d:5d:49:cf:8a:da:66:b6:15:5f:
ca:e7:49:ef:5d:b9:55:45:88:ad:f5:94:54:00:4c:eb:06:4d:
81:9f:e0:7d:c1:19:2b:76:0d:35:b2:e8:f5:3c:76:7a:90:70:
d8:90:3b:a1:4d:4f:82:87:10:be:35:f1:1e:ed:d6:d1:71:e2:
d4:8a:2c:ad:38:e3:31:e1:e1:0b:0c:5c:39:d8:fa:b8:60:d9:
ad:a8:01:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:26 2026 by rpki-client