Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
File: OBgMB0--WYgkxwAxlbMKpKNmFSw.mft (raw, json)
Hash identifier: dBpxHfPdXJy1gctU7N8CMUBlvYHfwOehls/nvA1WHRA=
Subject key identifier: 15:23:7A:F2:92:D2:2D:20:37:0A:B3:81:2D:23:F9:30:19:54:F4:4B
Authority key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
Certificate issuer: /CN=38180c074fbe598824c7003195b30aa4a366152c
Certificate serial: 019CAD225AAFF6C2D838FC67D41D1D21E762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
Manifest number: 14E7
Signing time: Mon 02 Mar 2026 06:00:35 +0000
Manifest this update: Mon 02 Mar 2026 06:00:35 +0000
Manifest next update: Tue 03 Mar 2026 06:00:35 +0000
Files and hashes: 1: FTU-IVO2NNBlXW4Q2EwJJORm_is.roa (hash: yMyznpEegGljCcs/jnznmQ+oneu3veLngWC/HBD66uk=)
2: OBgMB0--WYgkxwAxlbMKpKNmFSw.crl (hash: GmQAebnOrlwhcyLV1lAJO/5fxNt0HJrlkSmM5ID1ZLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:5a:af:f6:c2:d8:38:fc:67:d4:1d:1d:21:e7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38180c074fbe598824c7003195b30aa4a366152c
Validity
Not Before: Mar 2 06:00:35 2026 GMT
Not After : Mar 3 06:00:35 2026 GMT
Subject: CN=15237af292d22d20370ab3812d23f9301954f44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a5:38:ce:2b:28:f5:01:6d:08:96:dc:91:35:
84:33:a0:dd:bd:a2:63:fc:09:83:88:3b:28:83:31:
97:c5:14:75:55:b5:0e:5e:9c:d4:c7:ca:33:a1:13:
a1:6f:57:a9:4a:f5:40:69:eb:f2:ad:36:32:21:56:
9d:8f:23:35:df:ee:fa:35:8e:bd:9c:7a:75:df:5e:
44:57:07:a4:5b:d8:ba:ac:92:1c:b7:3b:88:ef:da:
45:c5:17:4b:f4:cb:7b:db:7c:3e:17:65:08:49:3d:
17:1a:e5:15:fc:03:00:d5:ee:22:45:20:8f:40:b6:
9d:0b:f6:81:e8:9e:20:fc:3a:f5:3b:a7:34:20:48:
9d:f9:31:a9:29:f7:cf:e4:c2:95:07:07:c9:3c:cf:
a6:a5:ed:03:7a:41:92:89:45:9c:d6:70:1e:6a:24:
d9:f2:bf:cf:9a:d1:b3:e6:f0:64:9b:d6:0a:4c:76:
fd:c1:4a:33:a2:c5:0f:be:01:86:b5:c3:74:b2:4d:
61:15:a4:c1:9e:c3:d8:6f:f6:fa:19:72:67:4c:f9:
76:7f:de:d2:5c:49:5b:5d:1e:45:a4:f0:d2:63:53:
3b:4e:5e:e1:d3:94:9b:80:d9:dd:5c:e2:ce:b9:c2:
1e:60:b7:5e:9d:c6:9d:32:33:56:46:d7:97:67:44:
1b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:23:7A:F2:92:D2:2D:20:37:0A:B3:81:2D:23:F9:30:19:54:F4:4B
X509v3 Authority Key Identifier:
keyid:38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f5:b4:b0:64:45:ad:24:08:ad:00:76:48:e3:3c:f9:79:1d:
d8:c2:f7:43:b0:b8:d9:1e:85:04:d6:d7:fb:86:1f:3a:91:82:
d2:21:3f:6e:b5:2d:b3:43:d0:ed:eb:18:27:b0:1a:c5:9b:10:
a0:76:74:86:b2:bf:96:b6:10:29:6c:96:97:05:94:ce:76:ba:
ec:6a:d9:e9:11:a7:78:30:e8:b2:07:3c:1f:ff:9e:60:1a:a8:
65:4e:3e:52:6d:bf:d3:2f:d0:fa:6e:1e:fe:48:0f:a3:02:0f:
23:9e:fb:8c:3a:cb:e4:b6:48:64:74:a5:c3:6b:c3:82:fc:78:
88:86:2b:6e:46:26:a2:70:88:2b:4c:36:6e:be:fb:69:db:23:
92:45:dc:b6:2a:89:9f:2f:d2:ee:14:cb:96:4a:22:d0:b7:28:
b8:2f:79:3c:7d:50:1f:33:76:68:9d:f7:61:08:d9:b6:45:e6:
fc:6b:db:55:62:b7:9f:66:df:83:dc:da:13:b6:61:a4:45:9b:
dd:9c:64:2c:b1:2c:aa:fc:8e:c2:bc:90:71:19:ca:99:87:ce:
51:72:fd:0e:e1:c5:7e:b0:8e:4d:8c:b5:d3:7b:36:50:2e:7e:
16:61:7a:13:c9:f4:cb:37:cd:34:28:95:90:13:0d:77:70:1c:
d6:4a:00:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:34:13 2026 by rpki-client