Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
File: ObCMosZLpzX0sUUhbdFNmfCCnw8.mft (raw, json)
Hash identifier: O2YRVZOVQgiu5AWq9k1pPFCBHjFWXs+1aiO/oGP2T8k=
Subject key identifier: F3:3B:A1:26:3D:1D:1B:89:AB:79:E4:77:83:2C:94:95:A6:8C:EC:EF
Authority key identifier: 39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
Certificate issuer: /CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Certificate serial: 019EC224D421D4643475AAD158287F3C70AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
Manifest number: 02AC
Signing time: Sat 13 Jun 2026 18:00:53 +0000
Manifest this update: Sat 13 Jun 2026 18:00:53 +0000
Manifest next update: Sun 14 Jun 2026 18:00:53 +0000
Files and hashes: 1: 2sekLYLRU9svSlYdz5DgXczYbZ4.roa (hash: LFWvTLo8Q3qqX6yHRgyzbBIUG3C19O+Lb3LnHSjmeZA=)
2: ObCMosZLpzX0sUUhbdFNmfCCnw8.crl (hash: 3NQ75oh0yQeej2KMuH452A8zM8z3pcz7f5oX71fbql8=)
3: djz1F_dy6bHmHqubW6DKbd3NWi8.roa (hash: sTfhHWPps1KBw5i/iSL7i2lTYyY7l+06q3cnoIV5ajE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:d4:21:d4:64:34:75:aa:d1:58:28:7f:3c:70:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Validity
Not Before: Jun 13 18:00:53 2026 GMT
Not After : Jun 14 18:00:53 2026 GMT
Subject: CN=f33ba1263d1d1b89ab79e477832c9495a68cecef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:92:b3:88:5d:0e:c8:02:2a:ec:ad:0d:23:
52:54:84:61:82:2a:e3:20:25:c2:8d:0e:53:05:89:
fb:9f:95:76:8c:e7:8a:d1:53:00:b5:d2:99:c5:b4:
09:d0:47:45:0d:80:1d:0c:2b:bf:da:4e:3b:5b:73:
cb:25:c2:62:9f:93:d0:4c:27:be:53:98:31:a8:9f:
ca:f2:14:0c:98:2c:3c:5d:38:66:a3:f3:9f:ee:7b:
6e:cf:ac:3e:f2:64:69:d7:75:60:1f:c0:b3:2f:ca:
00:c3:89:14:e9:fc:b6:64:ef:4d:cf:a8:3b:02:33:
d7:87:c4:5f:48:fe:28:24:3a:5b:32:7f:e8:e3:56:
37:9f:15:67:39:f9:e4:d5:cc:19:c3:06:b3:ab:a5:
b9:b9:d0:51:fe:f6:4a:4f:f7:0b:c6:5a:e0:5f:61:
10:08:52:e9:37:2f:53:67:83:41:a0:f8:27:c7:b8:
ab:5e:b3:9e:1e:3d:ef:ec:85:20:2f:27:fd:5e:7b:
1f:9a:34:5a:cd:9b:31:a1:d4:40:89:4c:c4:23:77:
9d:7a:61:a0:e0:3b:bf:b9:16:c9:05:a1:cb:af:23:
5f:b3:34:0e:69:69:28:d8:3b:3f:ea:3c:f0:83:a2:
92:df:12:9a:96:67:b3:93:ea:52:77:8e:3c:08:56:
4c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3B:A1:26:3D:1D:1B:89:AB:79:E4:77:83:2C:94:95:A6:8C:EC:EF
X509v3 Authority Key Identifier:
keyid:39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b5:2e:21:e2:a9:05:b5:7b:90:22:61:94:05:a9:39:62:4e:
3e:8d:43:ea:71:d6:b1:8d:79:cc:95:23:27:f6:07:27:3b:f8:
37:0a:10:71:33:61:50:47:a2:dc:cd:f3:49:b6:78:44:16:4b:
2f:de:7e:c4:6a:5d:6a:64:45:6d:27:8e:33:5f:12:67:6d:86:
6a:a6:2d:d9:1e:7f:8b:36:07:c1:b2:65:16:ec:01:a7:f0:cb:
0b:25:9b:9a:ea:a5:10:50:62:d3:1d:18:8d:47:19:4a:a5:0b:
a6:1b:3d:1f:95:bd:4b:23:c7:f5:09:ba:4f:b8:a2:a5:ce:c9:
29:bb:c7:8e:91:cf:46:d4:3d:66:b9:85:09:c5:98:cc:d6:8f:
39:c9:9b:64:3d:05:c9:ae:35:61:3f:6e:ae:f2:46:1e:48:37:
8a:12:43:b1:f3:99:25:ae:1b:79:44:d3:06:63:28:f1:3d:2c:
c8:4f:b0:8e:22:00:6b:9b:4a:fc:15:8e:b7:8b:a4:61:02:fe:
a9:45:68:83:44:70:96:b7:fc:bd:83:a8:3b:1d:fb:40:6f:e4:
85:c6:19:48:30:fd:44:87:6b:66:76:a5:57:c4:7b:4e:69:33:
15:41:a5:34:c2:89:32:e4:7a:5c:22:1c:ec:3f:72:61:42:c4:
19:97:b6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:54 2026 by rpki-client