Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
File: ObCMosZLpzX0sUUhbdFNmfCCnw8.mft (raw, json)
Hash identifier: QiSO2uAucNr1BwJ+kvomk4uvQZVun1lKM35t0lgnhPY=
Subject key identifier: 46:69:B4:64:A6:AC:CA:81:12:88:AC:DA:4A:0B:29:DD:1E:C9:B1:46
Authority key identifier: 39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
Certificate issuer: /CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Certificate serial: 019FADF6A125D759D7273DC1CC30999471AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
Manifest number: 0327
Signing time: Wed 29 Jul 2026 13:00:49 +0000
Manifest this update: Wed 29 Jul 2026 13:00:49 +0000
Manifest next update: Thu 30 Jul 2026 13:00:49 +0000
Files and hashes: 1: 96Z9YmkwhDlGo5pAMuw_E3Hp7Lk.roa (hash: poB30dm+SrH8X1Re/HLNOKlVM2DpDlomGaXJPMbImyI=)
2: ObCMosZLpzX0sUUhbdFNmfCCnw8.crl (hash: zPaE5LRtHPts8/iFYSyKK/rXgZkOSNtXiI3ANi+LD94=)
3: djz1F_dy6bHmHqubW6DKbd3NWi8.roa (hash: sTfhHWPps1KBw5i/iSL7i2lTYyY7l+06q3cnoIV5ajE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:f6:a1:25:d7:59:d7:27:3d:c1:cc:30:99:94:71:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Validity
Not Before: Jul 29 13:00:49 2026 GMT
Not After : Jul 30 13:00:49 2026 GMT
Subject: CN=4669b464a6acca811288acda4a0b29dd1ec9b146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:47:07:42:71:ce:2d:19:4a:2a:76:b2:9d:
98:d6:87:93:8f:99:39:ce:60:ba:d7:35:8f:db:26:
fa:3a:eb:87:42:b7:d5:fe:b9:ac:db:e9:23:84:7b:
0a:65:5c:81:e7:45:21:5d:d4:08:13:72:99:dc:1c:
53:06:a2:3d:b4:eb:ce:9c:1b:ab:d7:21:35:48:2a:
1d:83:7c:cc:c8:cd:a6:8f:b9:24:6e:54:93:7b:0b:
81:2b:d0:8b:16:84:95:5d:9a:86:75:a7:c0:d3:11:
d3:91:17:6c:72:3e:67:c7:18:86:bc:0c:ad:15:b0:
78:26:00:5b:05:dc:b3:f7:dd:53:79:44:8a:8f:2f:
ca:0c:11:7d:97:41:8a:f5:69:b7:f1:56:07:0f:46:
46:b5:50:8a:44:29:33:61:54:b2:b4:4d:f1:36:6e:
90:a2:81:52:73:f1:20:b9:62:d5:6d:38:9c:fc:4b:
15:c9:a5:06:1a:0b:e5:5d:0a:2a:df:cb:26:6f:de:
9d:78:dd:ca:d6:14:9e:03:3d:c2:61:8a:f6:7f:2f:
3f:b3:3f:03:9d:80:d3:d3:c1:92:2a:30:4e:8a:ce:
c5:4d:c7:07:3d:b9:fb:c9:08:3b:28:41:12:b8:ba:
83:5d:d5:2c:b1:e4:61:e3:db:ad:1f:03:b2:21:e4:
35:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:69:B4:64:A6:AC:CA:81:12:88:AC:DA:4A:0B:29:DD:1E:C9:B1:46
X509v3 Authority Key Identifier:
keyid:39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:8c:f0:8f:ad:a6:b9:0a:00:8e:5e:5a:cd:f6:d0:08:ac:8c:
2d:07:97:f0:ec:d5:8e:0b:19:6d:1e:c4:64:f8:69:2d:2d:5b:
f3:a4:af:6b:6c:19:54:a7:02:d1:88:b8:56:53:cd:00:8f:3c:
92:b7:fe:cf:fb:7a:f6:b9:c7:c5:9d:fa:7f:83:37:32:88:24:
61:49:a1:30:bc:21:95:d3:d8:d2:dd:6f:72:e3:f9:56:92:b3:
6f:e7:9e:ed:3e:8c:88:ab:fc:b4:ec:4f:5e:2b:34:03:f4:88:
ed:ed:55:e6:af:cf:61:b6:09:79:7f:48:bd:56:36:d7:2e:f2:
83:cb:9b:c0:ed:52:77:18:db:07:fd:4c:3e:f9:64:d1:31:ad:
79:37:d8:97:a4:b7:91:d2:83:92:18:ea:b0:27:8f:c4:50:ad:
9e:0b:24:44:9a:dd:91:22:e8:6f:2c:7a:65:75:ad:30:fb:2b:
8e:6a:5d:49:69:e9:5a:ae:21:35:fa:c2:fa:f3:02:db:a5:98:
74:d1:c1:51:81:1a:e2:ce:7f:2f:c4:a9:d0:fa:3c:b8:98:65:
05:88:be:a0:c1:8a:4a:7f:75:b6:90:95:66:b4:02:18:ca:12:
c4:78:31:22:80:28:b7:72:0d:a7:83:a1:04:61:dd:03:4c:4e:
51:8e:cf:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+t9qEl11nXJz3BzDCZlHGtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YjA4Y2EyYzY0YmE3MzVmNGIxNDUyMTZkZDE0ZDk5ZjA4
MjlmMGYwHhcNMjYwNzI5MTMwMDQ5WhcNMjYwNzMwMTMwMDQ5WjAzMTEwLwYDVQQD
Eyg0NjY5YjQ2NGE2YWNjYTgxMTI4OGFjZGE0YTBiMjlkZDFlYzliMTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXJHB0Jxzi0ZSip2sp2Y1oeTj5k5
zmC61zWP2yb6OuuHQrfV/rms2+kjhHsKZVyB50UhXdQIE3KZ3BxTBqI9tOvOnBur
1yE1SCodg3zMyM2mj7kkblSTewuBK9CLFoSVXZqGdafA0xHTkRdscj5nxxiGvAyt
FbB4JgBbBdyz991TeUSKjy/KDBF9l0GK9Wm38VYHD0ZGtVCKRCkzYVSytE3xNm6Q
ooFSc/EguWLVbTic/EsVyaUGGgvlXQoq38smb96deN3K1hSeAz3CYYr2fy8/sz8D
nYDT08GSKjBOis7FTccHPbn7yQg7KEESuLqDXdUsseRh49utHwOyIeQ1AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZptGSmrMqBEois2koLKd0eybFGMB8GA1UdIwQY
MBaAFDmwjKLGS6c19LFFIW3RTZnwgp8PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2JDTW9zWkxwelgwc1VVaGJkRk5tZkNDbnc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hYzAwYjctZGE0Mi00NDY0LWJiYzUt
MzQxNjA0NGUzNThlLzEvT2JDTW9zWkxwelgwc1VVaGJkRk5tZkNDbnc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hYzAwYjctZGE0Mi00NDY0LWJiYzUtMzQxNjA0NGUzNThl
LzEvT2JDTW9zWkxwelgwc1VVaGJkRk5tZkNDbnc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4zwj62m
uQoAjl5azfbQCKyMLQeX8OzVjgsZbR7EZPhpLS1b86Sva2wZVKcC0Yi4VlPNAI88
krf+z/t69rnHxZ36f4M3MogkYUmhMLwhldPY0t1vcuP5VpKzb+ee7T6MiKv8tOxP
Xis0A/SI7e1V5q/PYbYJeX9IvVY21y7yg8ubwO1SdxjbB/1MPvlk0TGteTfYl6S3
kdKDkhjqsCePxFCtngskRJrdkSLobyx6ZXWtMPsrjmpdSWnpWq4hNfrC+vMC26WY
dNHBUYEa4s5/L8Sp0Po8uJhlBYi+oMGKSn91tpCVZrQCGMoSxHgxIoAot3INp4Oh
BGHdA0xOUY7Pmw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 20:37:58 2026 by rpki-client