Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
File: OBbhmySn6M_xifq6wohSzYdIo4A.mft (raw, json)
Hash identifier: eSaERwHYenPFKtHoJ26OcA0u9RmygXXMq9bVpVIUmuM=
Subject key identifier: 65:11:30:58:5C:5B:BF:5A:98:BB:9B:28:A8:95:DF:65:DC:BE:41:D4
Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
Certificate issuer: /CN=3816e19b24a7e8cff189fabac28852cd8748a380
Certificate serial: 019CAAFCF2AFFCB1C3B1A8F32D0921567AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 20:00:29 +0000
Manifest this update: Sun 01 Mar 2026 20:00:29 +0000
Manifest next update: Mon 02 Mar 2026 20:00:29 +0000
Files and hashes: 1: 10zU5k5ICxgrM5-Ip5yncI3GNGs.roa (hash: LEG/jSgiyt7BovVPDQkdWrVInvTbnRp5DG6v8hbqY1s=)
2: OBbhmySn6M_xifq6wohSzYdIo4A.crl (hash: eYv+OedWsTyf05RQ/xw2HdPctqMZHejbtKkzbWHlgIc=)
3: QmWmoP1KHfrR9eTOqZ6x9ezRXSY.roa (hash: xqu4qFo0DMMx0+rjC1DPBvqtwUrbm4PocY0IAf7sGdo=)
4: pm2S8QCe4l9WpfwvU_iLSL0zIlI.roa (hash: siFYWGu9y7ejpY470okiO/aX4nO9BjP28kUxghwfExg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:f2:af:fc:b1:c3:b1:a8:f3:2d:09:21:56:7a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380
Validity
Not Before: Mar 1 20:00:29 2026 GMT
Not After : Mar 2 20:00:29 2026 GMT
Subject: CN=651130585c5bbf5a98bb9b28a895df65dcbe41d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:ee:86:64:92:fc:26:3c:df:61:53:79:47:
46:0f:71:8d:e7:86:82:e8:50:f1:e8:bb:32:c3:c0:
27:bf:cc:5a:3a:2d:98:a4:ce:fe:0e:db:64:8d:11:
08:67:47:36:3c:1e:36:89:a2:b1:94:0d:02:5b:29:
34:e4:23:00:1b:a4:33:f3:71:86:32:39:1d:06:39:
ed:a1:70:c8:3d:e7:ef:17:a2:26:74:97:a6:0e:c7:
34:e1:17:fd:b2:07:65:20:34:68:26:51:cd:72:4e:
7a:87:c6:32:85:27:ff:4b:74:99:7b:03:d3:4b:a2:
29:55:e7:3b:48:4d:48:18:84:cd:06:70:6b:49:23:
90:03:f9:8d:98:18:43:f9:a3:fa:c3:33:53:24:75:
59:f0:45:76:c6:b1:b8:41:ec:76:48:15:7e:e8:77:
23:c1:1c:81:78:55:7f:84:8f:15:e5:86:bd:d1:17:
44:a6:f5:41:65:c1:90:2d:74:2b:7e:c8:bd:57:68:
0a:3d:bb:5e:3a:9c:4b:06:92:fd:45:3d:c4:8c:57:
c3:81:6d:10:dd:6e:98:f8:21:a9:0c:2c:58:4d:2d:
0a:89:c7:58:37:64:5d:79:c3:53:03:f3:71:46:96:
a3:75:2f:18:db:10:aa:1d:db:64:63:96:9a:4c:58:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:11:30:58:5C:5B:BF:5A:98:BB:9B:28:A8:95:DF:65:DC:BE:41:D4
X509v3 Authority Key Identifier:
keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:75:32:ac:6e:7e:05:6d:82:ae:c2:2d:21:64:a5:ae:65:91:
d1:31:f5:e4:df:5c:01:6c:cf:77:07:ef:eb:26:89:87:ad:d2:
84:17:ad:8d:29:33:18:12:1b:d0:b3:07:05:08:89:67:60:4b:
43:c8:73:e2:26:42:d6:81:b7:b5:8d:e8:f0:48:c8:c6:84:d2:
4f:81:3c:1f:43:b2:7a:3d:de:07:60:e2:4a:02:88:42:7a:5a:
38:94:4d:4f:b2:1d:b9:8d:39:9c:6f:45:05:2f:2d:64:e5:ff:
f9:c3:95:43:be:dc:00:1f:55:99:6c:b6:a0:f8:11:42:e9:76:
73:75:a9:6a:da:d7:8e:5d:60:4e:ad:6e:ae:8b:8e:76:be:85:
a0:6c:14:97:ae:bb:b8:d5:4e:87:8b:e6:7b:7d:92:8d:dc:03:
46:68:4b:18:a4:a3:a9:3f:19:c4:db:76:b8:3e:f3:90:39:8f:
80:1a:44:99:16:c8:e5:8e:cb:3f:c7:01:87:3e:5e:40:c5:88:
51:2a:7d:65:38:04:dc:3f:aa:1c:e2:a2:d2:45:12:a0:6b:46:
7f:04:43:8c:7a:44:b8:66:dd:5c:da:c0:80:d8:73:cc:b5:75:
9f:4c:fc:6e:cf:15:5f:19:ca:b7:20:92:40:24:49:10:35:85:
8c:df:15:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:51:54 2026 by rpki-client