Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
File: obOdgkR51Np7EvZcFeXEJyX1Jgs.mft (raw, json)
Hash identifier: o8ykMoq+gJZqIqP8CcrNYei/izTTFRi6NDK0FzmIuVs=
Subject key identifier: 18:23:BF:CC:8E:7D:80:07:CD:1D:29:D4:3F:40:32:AF:68:FB:3D:62
Authority key identifier: A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
Certificate issuer: /CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Certificate serial: 019CA9B38CEF96AF5DE447AE252341D52088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
Manifest number: 12DB
Signing time: Sun 01 Mar 2026 14:00:42 +0000
Manifest this update: Sun 01 Mar 2026 14:00:42 +0000
Manifest next update: Mon 02 Mar 2026 14:00:42 +0000
Files and hashes: 1: ckHYyGr3Mw8Qija2YP60OUa1ew0.roa (hash: ublouyar7OpXVPh6lwDgL3vowMyRYwZv2+erG4mp4zU=)
2: obOdgkR51Np7EvZcFeXEJyX1Jgs.crl (hash: /T+JqRnF7b82n8dahUF1ksDW6/9O+enFWgZ3zQEEsTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:8c:ef:96:af:5d:e4:47:ae:25:23:41:d5:20:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Validity
Not Before: Mar 1 14:00:42 2026 GMT
Not After : Mar 2 14:00:42 2026 GMT
Subject: CN=1823bfcc8e7d8007cd1d29d43f4032af68fb3d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:d3:75:29:b8:fc:b9:22:4a:8e:2e:c7:f9:
6a:61:30:97:4f:d7:67:0a:dc:8a:c8:f6:7c:75:fd:
33:7c:0b:f7:12:01:02:28:13:79:4d:4f:78:95:52:
ec:03:b2:40:18:c8:ba:e1:52:f0:3e:3e:fb:2f:37:
dc:5c:0e:42:0e:20:67:84:c9:73:fc:de:37:15:9a:
6b:e8:44:7a:23:2d:ac:59:b9:8b:ec:51:0e:2a:f2:
fa:41:b7:6c:68:34:5e:cd:82:3e:bb:3e:e8:b0:3d:
a2:44:b2:2b:ac:61:05:1f:5f:c5:0d:dd:77:64:05:
38:aa:f5:44:85:56:1d:ae:e8:7f:1c:db:3e:c4:92:
3d:26:e5:e6:ff:0f:d8:86:5a:58:e0:0f:a2:01:88:
e8:3d:6d:55:7c:64:7b:5d:ba:1d:25:54:e6:d0:d0:
1b:5f:66:1e:3d:ba:14:da:5e:27:60:1e:01:82:ff:
ef:40:17:08:dc:6f:9f:16:92:f1:f9:ed:95:a2:b1:
82:50:26:94:7c:5d:18:13:67:55:4a:1b:07:8e:ec:
1c:67:fd:4f:b2:93:90:1c:1a:a3:1d:81:dd:5d:3f:
3a:38:71:96:1a:c3:c0:58:69:23:ad:d4:70:28:9b:
19:17:c6:ab:dd:1a:01:45:5d:0a:1f:cd:c8:d6:f0:
1a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:23:BF:CC:8E:7D:80:07:CD:1D:29:D4:3F:40:32:AF:68:FB:3D:62
X509v3 Authority Key Identifier:
keyid:A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:dc:34:2f:23:9a:11:be:8f:2c:41:83:a8:58:ca:e8:b3:29:
fc:7a:9e:41:b2:eb:12:88:a3:48:46:49:06:a4:37:ef:24:0f:
df:32:36:91:b5:8f:94:bf:a5:9c:7d:3f:bf:74:c2:71:90:27:
a7:c1:cd:9f:e0:ef:ca:87:83:e9:c4:63:9a:4f:63:54:78:ed:
80:7d:2f:3d:ad:79:2f:23:43:b8:13:66:90:6a:29:5e:b7:bd:
18:db:18:a5:b3:cf:69:29:f1:2e:90:32:a2:6b:61:5a:cd:90:
81:7a:54:c6:92:af:32:5a:e0:15:32:b2:4d:bd:15:19:ed:33:
b3:c0:ce:27:d5:b3:86:ba:69:89:4a:07:3d:9e:0c:e7:41:75:
be:5d:f5:72:95:dd:cf:93:f8:4b:3e:21:90:15:8f:97:60:2e:
3c:59:bc:22:06:b2:e0:e9:4d:ae:a5:b2:99:b8:95:b5:85:62:
5e:e0:87:c9:a0:4d:95:fc:40:e3:be:b6:be:47:c0:bc:a2:31:
d6:6e:b8:5a:74:b0:88:41:8e:e4:52:3c:22:de:ec:55:f0:ed:
a8:1f:26:09:9b:ca:30:8c:3b:83:84:a3:80:05:43:66:56:46:
6c:97:ed:48:17:77:fa:8b:f8:a7:6d:91:b4:4f:50:06:a8:52:
6d:25:ea:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps4zvlq9d5EeuJSNB1SCIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjM5ZDgyNDQ3OWQ0ZGE3YjEyZjY1YzE1ZTVjNDI3MjVm
NTI2MGIwHhcNMjYwMzAxMTQwMDQyWhcNMjYwMzAyMTQwMDQyWjAzMTEwLwYDVQQD
EygxODIzYmZjYzhlN2Q4MDA3Y2QxZDI5ZDQzZjQwMzJhZjY4ZmIzZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE3TdSm4/LkiSo4ux/lqYTCXT9dn
CtyKyPZ8df0zfAv3EgECKBN5TU94lVLsA7JAGMi64VLwPj77LzfcXA5CDiBnhMlz
/N43FZpr6ER6Iy2sWbmL7FEOKvL6QbdsaDRezYI+uz7osD2iRLIrrGEFH1/FDd13
ZAU4qvVEhVYdruh/HNs+xJI9JuXm/w/YhlpY4A+iAYjoPW1VfGR7XbodJVTm0NAb
X2YePboU2l4nYB4Bgv/vQBcI3G+fFpLx+e2VorGCUCaUfF0YE2dVShsHjuwcZ/1P
spOQHBqjHYHdXT86OHGWGsPAWGkjrdRwKJsZF8ar3RoBRV0KH83I1vAayQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgjv8yOfYAHzR0p1D9AMq9o+z1iMB8GA1UdIwQY
MBaAFKGznYJEedTaexL2XBXlxCcl9SYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JPZGdrUjUxTnA3RXZaY0ZlWEVKeVgxSmdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xNzlmODAtODgzOC00ZDRjLWI4ZDEt
MzFhOTY0ZjhhMzdmLzEvb2JPZGdrUjUxTnA3RXZaY0ZlWEVKeVgxSmdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8xNzlmODAtODgzOC00ZDRjLWI4ZDEtMzFhOTY0ZjhhMzdm
LzEvb2JPZGdrUjUxTnA3RXZaY0ZlWEVKeVgxSmdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9w0LyOa
Eb6PLEGDqFjK6LMp/HqeQbLrEoijSEZJBqQ37yQP3zI2kbWPlL+lnH0/v3TCcZAn
p8HNn+DvyoeD6cRjmk9jVHjtgH0vPa15LyNDuBNmkGopXre9GNsYpbPPaSnxLpAy
omthWs2QgXpUxpKvMlrgFTKyTb0VGe0zs8DOJ9WzhrppiUoHPZ4M50F1vl31cpXd
z5P4Sz4hkBWPl2AuPFm8Igay4OlNrqWymbiVtYViXuCHyaBNlfxA4762vkfAvKIx
1m64WnSwiEGO5FI8It7sVfDtqB8mCZvKMIw7g4SjgAVDZlZGbJftSBd3+ov4p22R
tE9QBqhSbSXqXQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:09:49 2026 by rpki-client