Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
File: ObCMosZLpzX0sUUhbdFNmfCCnw8.mft (raw, json)
Hash identifier: e/YmHL8FV9+RRlUQPoosSwOzIwqxkC1pAUrk/tqP9d4=
Subject key identifier: F9:45:DF:81:64:4C:6C:41:F3:F6:E4:00:11:35:0D:68:42:63:D6:5E
Authority key identifier: 39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
Certificate issuer: /CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Certificate serial: 019CB0FF89EBF371C78AE804A1AEF7593BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
Manifest number: 019A
Signing time: Tue 03 Mar 2026 00:01:02 +0000
Manifest this update: Tue 03 Mar 2026 00:01:02 +0000
Manifest next update: Wed 04 Mar 2026 00:01:02 +0000
Files and hashes: 1: 2sekLYLRU9svSlYdz5DgXczYbZ4.roa (hash: LFWvTLo8Q3qqX6yHRgyzbBIUG3C19O+Lb3LnHSjmeZA=)
2: ObCMosZLpzX0sUUhbdFNmfCCnw8.crl (hash: RBlnMjtpEvXjjBSqRxzDmG25C4OBE/MFRWIRQI3Cwzo=)
3: djz1F_dy6bHmHqubW6DKbd3NWi8.roa (hash: sTfhHWPps1KBw5i/iSL7i2lTYyY7l+06q3cnoIV5ajE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:ff:89:eb:f3:71:c7:8a:e8:04:a1:ae:f7:59:3b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Validity
Not Before: Mar 3 00:01:02 2026 GMT
Not After : Mar 4 00:01:02 2026 GMT
Subject: CN=f945df81644c6c41f3f6e40011350d684263d65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:00:4b:19:f6:10:55:55:8f:dd:a9:25:d2:
39:a5:fa:a3:b0:08:70:0a:32:4a:a0:d0:db:15:94:
76:0a:43:0d:ee:65:68:00:84:c9:7d:33:df:dd:5d:
4b:f9:48:0d:3f:1d:b7:c9:3b:28:d5:91:c3:28:ae:
d6:ce:e4:21:de:80:98:f6:e1:88:08:d9:17:4e:4b:
f9:b1:fb:f6:e2:0c:01:be:08:50:79:95:70:4d:2d:
cc:84:75:ab:e4:13:69:ba:56:99:1f:52:3f:4e:46:
98:6a:c4:9a:cf:13:79:85:9f:fa:7b:0b:4a:54:c3:
81:59:ce:76:e9:d5:96:04:50:77:19:58:e3:4c:fd:
0b:29:5b:10:3f:8f:9a:74:aa:22:a8:0f:77:98:0f:
30:9f:1b:aa:c1:fc:ab:d0:b5:7b:15:b9:9a:3d:42:
b0:9b:16:49:24:7e:ce:7b:8c:7c:69:03:79:25:e5:
d0:69:ee:ce:97:55:aa:a3:c7:53:4a:80:bd:af:97:
f1:19:a2:06:39:3e:c8:86:4e:e9:85:12:95:b4:12:
37:27:e7:61:8f:78:74:f7:f4:08:9e:20:70:db:14:
19:c9:5b:aa:a0:4d:6b:26:d4:b5:aa:ca:18:51:25:
4d:19:1b:d4:e3:b3:0b:c1:d2:b5:bb:bb:ec:c4:64:
e9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:45:DF:81:64:4C:6C:41:F3:F6:E4:00:11:35:0D:68:42:63:D6:5E
X509v3 Authority Key Identifier:
keyid:39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:62:85:ce:56:96:80:e4:a4:ae:6c:f5:47:82:46:28:db:f6:
bd:19:fa:6c:5f:9a:5c:d3:34:c5:47:da:32:6f:11:d1:e6:ae:
2e:fe:93:74:8a:ca:a1:6a:e3:0e:1f:be:80:aa:0e:4b:83:b8:
cf:1c:4a:1a:14:f9:59:df:8b:8c:13:9f:59:e4:7d:48:f2:db:
2b:1d:6b:46:5d:c9:eb:92:18:d4:f7:7a:3b:47:6c:10:bc:ed:
5d:d2:ce:8a:75:5e:6b:2c:24:3a:47:78:aa:e8:a7:47:a2:bc:
a2:01:1a:8e:8b:58:f7:6b:1a:2a:4e:e8:bd:8f:77:54:74:b4:
1a:94:74:21:8b:35:d7:77:04:fc:8e:9a:d3:4c:35:70:af:1a:
1c:a1:87:a2:09:48:4b:3e:83:07:4e:06:79:0b:95:37:0d:09:
18:42:96:8f:0f:31:51:55:22:d0:fd:2b:08:0a:d2:22:1c:cc:
cc:b2:10:c5:c9:4b:d1:bd:30:d5:c2:70:b1:48:32:ea:3f:5b:
4d:31:fb:c0:7f:0e:6a:e3:2d:88:1e:d1:fc:c0:d0:cf:68:17:
a3:8b:c2:79:3d:22:8c:8c:40:54:8d:6e:21:54:56:e8:e2:41:
65:4b:cc:8f:21:46:16:df:de:8c:e5:38:fe:6f:e6:13:ea:48:
9b:01:2d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:29:59 2026 by rpki-client