Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
File: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft (raw, json)
Hash identifier: WaD9Yh4obLqU3yXsFBEyg4gh3Y3wYlEGxnjr45TZMLI=
Subject key identifier: E9:09:93:0F:AF:DC:05:FE:AC:2B:03:58:BE:57:8E:C7:8C:56:C4:B8
Authority key identifier: A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
Certificate issuer: /CN=a011a02e929c43f0199c8326302e24899c4a4151
Certificate serial: 019CAB6B16459812E42A33E4E9F51CCBE2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
Manifest number: 15B1
Signing time: Sun 01 Mar 2026 22:00:47 +0000
Manifest this update: Sun 01 Mar 2026 22:00:47 +0000
Manifest next update: Mon 02 Mar 2026 22:00:47 +0000
Files and hashes: 1: 3hCGWzvELH55mpVn4uKDFqlbo8A.roa (hash: fh3+qnTWKRFUhHaDY/XoVgctnD35QjJX8ymXccmziuw=)
2: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl (hash: phTw8eRHS463Pp5/7t22G0CfPT3jboRoL4cmFkpD+iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:16:45:98:12:e4:2a:33:e4:e9:f5:1c:cb:e2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a011a02e929c43f0199c8326302e24899c4a4151
Validity
Not Before: Mar 1 22:00:47 2026 GMT
Not After : Mar 2 22:00:47 2026 GMT
Subject: CN=e909930fafdc05feac2b0358be578ec78c56c4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2d:20:3b:6c:69:fc:53:48:86:2b:db:0b:e5:
ce:13:fa:ca:9a:0f:48:7a:38:6a:e7:4c:cc:7d:07:
a7:08:b8:cb:36:29:68:70:5b:ef:b2:54:d5:41:4e:
d1:c3:79:ee:43:2c:9a:88:28:70:a1:53:b1:25:25:
27:21:4f:e4:c2:d5:8f:cb:13:9f:da:97:79:ef:5b:
c5:57:10:1c:f6:6f:9c:24:61:0d:68:0b:69:af:a6:
32:c2:4d:ef:ac:14:0b:77:b3:9d:04:a6:52:9a:7a:
b9:2c:07:3a:28:93:6e:24:91:84:5e:f2:15:36:64:
5a:67:45:14:a7:a6:41:f9:26:e1:f8:9b:29:5a:8d:
0a:f2:03:24:03:eb:94:fd:89:6b:41:e5:b1:28:ab:
60:75:79:a1:f5:e9:41:4e:37:41:f7:60:12:f0:b3:
14:58:59:bd:60:e1:8a:90:37:ed:f3:a0:e5:bd:5b:
85:24:d6:45:41:16:cf:76:21:d2:b8:3d:22:83:2c:
cd:19:30:17:9c:aa:58:08:3b:24:57:8c:2d:92:27:
dd:e1:e2:75:79:15:47:29:2c:d1:01:e2:5f:35:e0:
82:4a:03:a9:4e:b6:26:8a:18:e5:31:f9:c0:fa:3b:
36:4d:2a:95:ad:46:b8:20:53:f5:1c:60:f8:b8:48:
73:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:09:93:0F:AF:DC:05:FE:AC:2B:03:58:BE:57:8E:C7:8C:56:C4:B8
X509v3 Authority Key Identifier:
keyid:A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a5:29:59:07:5b:7d:0c:d2:03:f2:fe:e3:97:2a:aa:c4:90:
40:6e:11:38:67:0b:e9:c4:fa:d8:f3:82:1b:fb:3c:0a:6e:d9:
e3:5b:59:7b:c2:38:24:aa:90:f3:6a:ff:c7:ae:70:86:c0:db:
36:87:d0:83:20:b6:7f:78:e7:37:ac:cd:6c:2c:ac:e0:16:ed:
a4:e7:0e:08:1a:07:02:8e:7a:d4:61:d4:6d:7e:6c:51:20:30:
28:5a:54:97:b0:8d:2a:01:7e:7d:95:c1:5e:55:21:57:dc:6c:
58:57:b4:c6:7d:2c:41:87:7b:44:63:54:39:92:21:e9:15:d5:
84:b3:b0:d3:8a:d9:1a:dc:05:95:ee:bf:b4:a3:b7:17:cf:99:
57:b2:f5:de:cf:ce:99:b2:9a:9f:fe:32:4d:54:56:5d:00:f7:
cb:2e:b5:88:5a:49:8f:0c:1b:cd:d6:b1:ed:12:a1:57:85:7d:
d8:52:86:39:67:fe:12:c5:3d:7f:4b:81:a1:e3:eb:e7:c7:d1:
8f:b0:fd:9b:08:b9:40:ce:ff:f5:93:5a:a8:47:ea:4b:64:92:
74:77:d4:1c:4f:d1:07:ec:cc:7f:05:60:8c:19:c8:31:06:44:
be:d7:11:68:ab:1b:c9:12:d2:fa:6c:20:87:0d:1b:75:b4:9b:
3e:b7:0c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:40 2026 by rpki-client