Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
File: ObCMosZLpzX0sUUhbdFNmfCCnw8.mft (raw, json)
Hash identifier: m2JDknmSYOISYBUFj3jF9grygQ6y1mw5jR3a27J/QJI=
Subject key identifier: 0C:27:BD:7A:7F:F4:65:E9:55:35:35:1F:BC:63:D3:CD:F8:6A:61:4F
Authority key identifier: 39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
Certificate issuer: /CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Certificate serial: 01A0DB3B39B56922F24C42DCCE409A1F37F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
Manifest number: 03C3
Signing time: Sat 26 Sep 2026 01:01:26 +0000
Manifest this update: Sat 26 Sep 2026 01:01:26 +0000
Manifest next update: Sun 27 Sep 2026 01:01:26 +0000
Files and hashes: 1: 96Z9YmkwhDlGo5pAMuw_E3Hp7Lk.roa (hash: poB30dm+SrH8X1Re/HLNOKlVM2DpDlomGaXJPMbImyI=)
2: ObCMosZLpzX0sUUhbdFNmfCCnw8.crl (hash: e97vRY42sodQENHc4hqyJ/W6CsXlPalIZCheIpsAKsg=)
3: djz1F_dy6bHmHqubW6DKbd3NWi8.roa (hash: sTfhHWPps1KBw5i/iSL7i2lTYyY7l+06q3cnoIV5ajE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:39:b5:69:22:f2:4c:42:dc:ce:40:9a:1f:37:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Validity
Not Before: Sep 26 01:01:26 2026 GMT
Not After : Sep 27 01:01:26 2026 GMT
Subject: CN=0c27bd7a7ff465e95535351fbc63d3cdf86a614f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:da:9d:14:66:f3:50:34:24:e2:1f:c8:74:
cc:70:99:93:bc:b4:8b:b4:83:12:e3:29:81:84:71:
b5:7b:6b:e6:0c:e6:42:34:d6:d0:f5:4f:5e:3a:60:
bb:8a:ac:8c:34:d9:c4:68:be:e5:87:1a:68:f2:df:
4a:1b:63:3e:e1:13:b3:1b:db:8e:b8:2b:8c:76:0c:
92:27:42:5f:4f:ad:23:89:92:fe:f9:5c:8f:16:6c:
dd:24:65:25:b1:38:19:c0:7c:72:be:a8:b3:bf:a9:
b0:cd:54:b9:19:21:da:3b:30:bd:0d:c5:58:ea:c2:
1c:8c:c6:a7:23:80:81:65:e5:43:40:87:c5:bd:1f:
9e:34:09:09:28:22:b7:65:00:b2:f4:a6:20:01:5d:
62:ca:99:40:9b:78:d9:b2:29:61:0e:28:2e:28:6a:
01:df:fe:a8:6a:51:cf:c9:2e:17:2b:4b:d7:6b:dd:
82:7a:6f:2a:d3:eb:4a:82:c8:3a:f4:44:39:85:b2:
ef:7c:ea:2c:5d:88:44:1c:aa:25:4a:9d:bd:ad:52:
9b:4c:6e:4e:01:64:e0:28:f9:18:e5:ca:e1:b1:cf:
91:fd:6e:db:a8:74:82:00:5a:dc:a2:2f:d1:fd:d8:
98:b1:8b:87:68:62:b9:a2:c1:72:68:cb:7c:ce:36:
49:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:27:BD:7A:7F:F4:65:E9:55:35:35:1F:BC:63:D3:CD:F8:6A:61:4F
X509v3 Authority Key Identifier:
keyid:39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bb:ab:90:8b:37:64:fc:a8:93:ba:97:11:48:50:16:ad:c6:
83:8c:dc:d1:cf:55:05:ce:ff:06:22:c8:a3:5a:aa:4a:c3:ba:
ce:2a:60:aa:5d:9d:6a:ab:68:ec:17:10:2c:55:68:55:d3:48:
5d:8b:4c:fb:a8:3b:41:df:ae:c2:0b:02:3c:aa:e8:2c:f1:f2:
ee:bc:04:69:90:a4:6e:df:e6:90:f9:21:be:5c:66:3b:7d:18:
4c:74:68:26:76:3a:99:06:4c:85:6a:5d:4b:94:d0:99:6d:39:
7f:a0:eb:a4:63:59:57:da:41:c4:d9:20:f2:f8:fb:28:75:d6:
47:1c:1f:ef:1f:3b:c7:9c:0e:39:71:4d:ed:0f:6b:ff:50:28:
a9:72:bd:08:90:2b:95:59:b9:a8:6c:e9:b7:6e:38:77:97:47:
5a:3a:6d:0b:13:3b:98:55:a6:db:0c:8a:8f:63:7b:f8:f0:16:
3b:f5:81:6f:3c:21:d3:6c:87:65:b1:0f:30:d2:58:0b:d4:03:
95:58:f5:f9:92:c2:ed:6c:2d:fa:90:1e:df:0c:8e:fd:c3:ce:
05:b5:a7:85:8e:55:98:7e:85:29:84:b3:85:fc:77:a1:ef:2d:
26:1d:c3:b2:a5:84:04:dc:81:e5:83:5c:e0:cf:5b:8d:e0:e4:
96:5f:53:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:33:45 2026 by rpki-client