Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
File: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft (raw, json)
Hash identifier: Fcj6bQgJxMpMTT90WyfF8x5dYxBWy7frHLZuXICI4+c=
Subject key identifier: B2:43:30:6E:D4:51:6B:C1:1E:C6:55:3A:8A:87:EF:1C:96:EA:AB:F3
Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
Certificate issuer: /CN=a018d68115dc4b730f157906b04426e599b3a8ca
Certificate serial: 019CAB33DDD6F7A9D3A23E6CFB61592A625D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
Manifest number: 0E0F
Signing time: Sun 01 Mar 2026 21:00:28 +0000
Manifest this update: Sun 01 Mar 2026 21:00:28 +0000
Manifest next update: Mon 02 Mar 2026 21:00:28 +0000
Files and hashes: 1: YNzgRRzWdr4v8acL2_mrerBZEBY.roa (hash: 0vVcOkUILWsiRv1XZ/svhufbrbQADvOSN3QtFvRS5U8=)
2: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl (hash: i9O3vKhkh8dvEKXl2jGDb4XcuIYDQLxtYBw/QnAll6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:dd:d6:f7:a9:d3:a2:3e:6c:fb:61:59:2a:62:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca
Validity
Not Before: Mar 1 21:00:28 2026 GMT
Not After : Mar 2 21:00:28 2026 GMT
Subject: CN=b243306ed4516bc11ec6553a8a87ef1c96eaabf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:83:c9:03:95:5e:a6:25:be:da:ef:6c:ce:
f5:01:8b:19:3a:ae:1e:c8:36:df:b0:a3:89:36:bc:
b5:e9:01:6c:36:0b:10:47:6a:d7:4c:1e:9c:44:e8:
3e:62:e9:93:98:af:44:6d:07:2f:5c:52:71:2f:78:
a8:fa:cd:71:18:35:b7:07:13:8d:db:17:6a:6d:48:
a7:78:37:4f:23:dd:ec:aa:58:6b:51:53:ac:c9:fb:
a7:4c:a0:5d:ad:49:fa:8f:d7:e1:0f:06:97:4f:4b:
15:95:ab:c0:fa:61:8d:4b:41:a6:ba:08:0a:7e:d0:
bf:40:ea:52:37:2c:a8:3a:97:4d:f7:70:0c:dc:e6:
0b:63:29:56:b0:88:44:52:f3:bd:33:d6:94:b7:c5:
f1:9a:c0:4b:6e:72:97:0f:d1:f3:75:b8:0a:c3:05:
da:c4:29:18:81:89:94:6f:b0:bd:6f:0b:18:cb:db:
6c:eb:d8:fa:60:cb:a7:7c:98:8a:28:9f:50:0a:cc:
3f:56:76:a1:c0:6a:92:8f:89:ad:2b:70:fb:36:5b:
1d:38:af:cb:a5:2f:34:ed:85:9c:38:30:d5:c8:d3:
94:f8:5d:92:91:e1:2d:55:d2:84:d9:9a:7c:ad:c3:
96:8b:6a:f2:80:a2:2b:8b:a2:46:71:19:59:2d:27:
a1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:43:30:6E:D4:51:6B:C1:1E:C6:55:3A:8A:87:EF:1C:96:EA:AB:F3
X509v3 Authority Key Identifier:
keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e9:ce:14:4e:d9:b5:f7:fe:92:16:c2:c4:1b:bb:dc:d7:69:
db:05:9f:97:0c:f3:9e:e4:01:a5:de:b7:c9:3e:22:7d:e0:82:
b7:0d:5a:53:0b:dc:48:63:5e:a5:2e:fe:fd:1f:5e:09:5d:8b:
87:34:a2:cc:93:b3:a1:43:d7:43:c8:d7:2a:45:73:a3:df:3e:
f3:f5:1b:00:0b:cd:1a:d7:dd:fa:62:d8:7f:94:da:ea:8f:d9:
41:f0:20:3c:50:11:50:e2:fc:4a:8e:43:7e:d0:58:07:41:24:
47:ab:b5:b4:d6:13:24:52:e5:e1:b8:a8:0e:47:98:fc:38:70:
45:0d:2b:7c:d7:70:61:69:c5:6a:ea:71:bc:6c:a7:85:37:51:
48:48:c5:7d:d7:8b:47:24:5d:13:0c:06:15:07:0e:e4:de:13:
84:1a:f1:d7:76:6d:c5:85:95:a4:65:fa:88:18:0d:65:6e:39:
c5:8e:71:1f:75:9f:53:db:5f:d9:1f:e9:aa:59:07:dd:f3:5c:
c9:3a:b3:71:8a:50:81:a3:3f:41:a7:1e:86:c8:56:18:77:e2:
ed:32:13:c0:e6:a2:88:03:ca:57:7e:52:ab:74:28:60:dd:dd:
c5:19:6d:01:00:65:b5:f5:12:de:d3:eb:13:d7:02:3b:7d:ab:
97:a1:25:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrM93W96nToj5s+2FZKmJdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMThkNjgxMTVkYzRiNzMwZjE1NzkwNmIwNDQyNmU1OTli
M2E4Y2EwHhcNMjYwMzAxMjEwMDI4WhcNMjYwMzAyMjEwMDI4WjAzMTEwLwYDVQQD
EyhiMjQzMzA2ZWQ0NTE2YmMxMWVjNjU1M2E4YTg3ZWYxYzk2ZWFhYmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydKDyQOVXqYlvtrvbM71AYsZOq4e
yDbfsKOJNry16QFsNgsQR2rXTB6cROg+YumTmK9EbQcvXFJxL3io+s1xGDW3BxON
2xdqbUineDdPI93sqlhrUVOsyfunTKBdrUn6j9fhDwaXT0sVlavA+mGNS0GmuggK
ftC/QOpSNyyoOpdN93AM3OYLYylWsIhEUvO9M9aUt8XxmsBLbnKXD9HzdbgKwwXa
xCkYgYmUb7C9bwsYy9ts69j6YMunfJiKKJ9QCsw/VnahwGqSj4mtK3D7NlsdOK/L
pS807YWcODDVyNOU+F2SkeEtVdKE2Zp8rcOWi2rygKIri6JGcRlZLSeh3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJDMG7UUWvBHsZVOoqH7xyW6qvzMB8GA1UdIwQY
MBaAFKAY1oEV3EtzDxV5BrBEJuWZs6jKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0JqV2dSWGNTM01QRlhrR3NFUW01Wm16cU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80NjQ2NjAtN2E2ZS00OWE3LTkwM2Qt
NWNiYzYzNmJkN2U3LzEvb0JqV2dSWGNTM01QRlhrR3NFUW01Wm16cU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80NjQ2NjAtN2E2ZS00OWE3LTkwM2QtNWNiYzYzNmJkN2U3
LzEvb0JqV2dSWGNTM01QRlhrR3NFUW01Wm16cU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOnOFE7Z
tff+khbCxBu73Ndp2wWflwzznuQBpd63yT4ifeCCtw1aUwvcSGNepS7+/R9eCV2L
hzSizJOzoUPXQ8jXKkVzo98+8/UbAAvNGtfd+mLYf5Ta6o/ZQfAgPFARUOL8So5D
ftBYB0EkR6u1tNYTJFLl4bioDkeY/DhwRQ0rfNdwYWnFaupxvGynhTdRSEjFfdeL
RyRdEwwGFQcO5N4ThBrx13ZtxYWVpGX6iBgNZW45xY5xH3WfU9tf2R/pqlkH3fNc
yTqzcYpQgaM/QacehshWGHfi7TITwOaiiAPKV35Sq3QoYN3dxRltAQBltfUS3tPr
E9cCO32rl6El2g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:39 2026 by rpki-client