Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
File: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft (raw, json)
Hash identifier: KmjCfCcatIcLNrmwwTgpkr/963MP4BoHHRgPrrKa0Rs=
Subject key identifier: 5B:AB:72:D6:A8:E6:A4:98:00:17:41:D3:C0:7C:28:E1:BA:12:26:AF
Authority key identifier: D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
Certificate issuer: /CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Certificate serial: 019CAA8FEE0371E189FC00CD3E25456DB689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
Manifest number: 0F58
Signing time: Sun 01 Mar 2026 18:01:24 +0000
Manifest this update: Sun 01 Mar 2026 18:01:24 +0000
Manifest next update: Mon 02 Mar 2026 18:01:24 +0000
Files and hashes: 1: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl (hash: xnPhC4WZLadJ1BXjtUIyd+tcpM6mDPfhZNgmRQc4LYA=)
2: jZT-rA7xXgV9ISXMAJBVRKLq758.asa (hash: 1yFM7L3x3s5BQ7YW45Q8MwC00LEtrcdpmLfR0GtoPSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:ee:03:71:e1:89:fc:00:cd:3e:25:45:6d:b6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Validity
Not Before: Mar 1 18:01:24 2026 GMT
Not After : Mar 2 18:01:24 2026 GMT
Subject: CN=5bab72d6a8e6a498001741d3c07c28e1ba1226af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a3:a1:f3:4e:39:d7:c3:e0:58:dd:5e:cf:c7:
30:eb:fa:85:84:f9:06:c9:13:b1:f4:a9:eb:dd:d1:
1c:4e:2f:bf:85:ea:38:fc:6f:01:29:63:45:c6:16:
b9:30:f2:94:63:65:2b:15:92:7c:c2:f6:ab:70:9c:
79:e5:42:09:a2:9b:30:b8:24:b7:b9:f9:e0:96:43:
24:78:fc:21:ad:2d:49:69:4c:b7:61:9d:b0:49:2d:
c3:a7:c4:8b:30:32:67:6b:23:58:a2:97:bc:90:b1:
91:3d:d8:92:0c:d6:93:9b:8f:3c:05:23:0d:44:2c:
78:b9:fb:73:98:90:a5:f1:af:f5:89:ba:fc:1b:3f:
49:df:19:51:ca:3b:47:c4:da:e7:a5:e8:32:0e:79:
04:c6:6a:d4:56:1e:06:39:79:6d:90:e7:54:a1:be:
d7:47:91:21:7d:97:3d:1c:7c:9e:5b:23:6d:af:39:
00:d9:a6:22:48:93:f9:f1:bf:43:db:94:c6:e4:a7:
36:7c:83:92:d7:b9:9f:1e:48:0b:0f:72:54:c4:3e:
a4:c4:82:cc:a7:f4:6e:5a:e9:3b:12:2b:83:29:a0:
62:7c:5d:8f:32:dd:74:be:51:63:e4:02:5e:2c:9b:
7f:d4:cc:0d:b8:e8:48:5f:df:dc:dc:78:c9:ad:cb:
89:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AB:72:D6:A8:E6:A4:98:00:17:41:D3:C0:7C:28:E1:BA:12:26:AF
X509v3 Authority Key Identifier:
keyid:D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f8:fd:4d:cc:e0:2b:d2:fc:2d:8e:92:a1:dd:23:ec:45:d3:
ca:0d:7b:19:76:43:e1:85:10:4b:ec:04:62:72:4f:fa:9a:27:
83:ea:16:bb:f4:e5:c1:bd:f5:c1:95:86:a9:72:fc:22:ed:2d:
a2:9d:cd:74:82:0e:7c:28:45:35:c7:55:22:e3:9b:25:a7:79:
3a:f6:11:fa:61:ec:eb:13:73:6a:22:47:df:99:6a:8c:2e:b7:
0a:2d:d3:08:75:a9:31:89:7a:55:e6:66:42:f2:7f:00:b7:24:
de:40:7b:d0:68:4f:43:c9:84:38:b9:39:86:07:89:88:f7:93:
a3:10:c0:ae:4b:8b:36:f0:d4:07:72:7e:fc:df:6f:e2:98:31:
e2:3c:1e:04:c8:f4:0b:7f:1a:2f:bb:93:16:4a:91:a7:27:9e:
99:c5:d6:f4:6e:41:e4:72:a9:7f:b1:97:13:81:bd:9f:76:01:
29:7a:40:5a:0d:b9:19:cc:e1:11:03:a6:7b:b2:18:46:80:0c:
eb:c7:31:5f:dc:57:a8:0a:d5:27:65:64:e7:33:b1:75:07:10:
e5:4c:70:f1:66:19:1c:92:15:82:1e:e7:3f:1d:12:db:1a:ea:
6c:e0:64:13:19:42:56:f6:92:37:d4:a2:27:e3:c2:36:3b:44:
ef:d2:39:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:17 2026 by rpki-client