Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
File: oBocfbuaFXGlv0kkqz_FBJMUX08.mft (raw, json)
Hash identifier: xAdN848KWfSVd2tJ2VYzxWL+yZIaNNAVIn4ApzpYpoA=
Subject key identifier: F2:7F:BB:C6:DD:4A:FB:22:FB:C1:54:60:0E:A5:AE:62:1E:C5:4A:95
Authority key identifier: A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
Certificate issuer: /CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Certificate serial: 019DA453BC2AA8ADB42C9CEA3445F942FFC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
Manifest number: 09C1
Signing time: Sun 19 Apr 2026 06:00:44 +0000
Manifest this update: Sun 19 Apr 2026 06:00:44 +0000
Manifest next update: Mon 20 Apr 2026 06:00:44 +0000
Files and hashes: 1: HBEyLxpq6Zjz5sUTBEvkEU0PeDw.roa (hash: uYdJNtH72XeHZSBQgJWsgmqChwbMODpuyEXVyDLkE8Q=)
2: oBocfbuaFXGlv0kkqz_FBJMUX08.crl (hash: YWcjQ5OWGhFHuBJeV9+T1hcvTvMxUmhhmH1fAocE2Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:bc:2a:a8:ad:b4:2c:9c:ea:34:45:f9:42:ff:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Validity
Not Before: Apr 19 06:00:44 2026 GMT
Not After : Apr 20 06:00:44 2026 GMT
Subject: CN=f27fbbc6dd4afb22fbc154600ea5ae621ec54a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:15:06:80:17:e2:74:69:21:da:70:4d:84:b5:
4e:57:db:3e:6a:33:bb:04:b3:08:c8:68:a4:c6:d7:
dd:36:e5:17:ab:bd:03:62:94:9a:de:03:09:b5:c5:
49:ed:3d:b8:44:a8:c9:9b:55:7f:3e:a7:0e:79:16:
eb:e6:21:90:20:63:29:90:b0:55:87:99:2e:1d:c6:
ed:92:60:7d:5e:a2:a3:8b:ed:8b:1d:be:b5:12:93:
7d:cb:f7:5c:28:28:ab:6d:29:23:a1:39:8a:84:35:
f0:0e:39:21:b8:29:9c:71:43:41:17:50:3c:fd:40:
64:90:3d:d5:78:75:fe:72:c7:cc:b2:c7:86:cd:c2:
c7:e6:0e:b2:ba:9f:49:88:69:fd:bd:d1:60:47:61:
7e:f4:d0:3d:02:5f:95:73:a5:10:5b:7f:43:39:72:
b8:4f:f9:9e:57:ff:2b:ee:bf:03:77:51:d7:ff:c6:
ba:6c:d9:f2:6c:50:d2:57:e3:a4:a9:3f:24:de:88:
db:1a:bd:80:6d:60:48:75:ca:c7:14:81:27:f5:1e:
65:36:ec:d6:37:11:14:7b:80:4d:7f:ae:6a:ed:9a:
7b:6f:46:56:67:02:8f:b8:35:df:fb:07:5c:aa:84:
0e:e8:bc:60:c9:6e:c7:fc:a5:da:a3:0a:7e:a4:0d:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7F:BB:C6:DD:4A:FB:22:FB:C1:54:60:0E:A5:AE:62:1E:C5:4A:95
X509v3 Authority Key Identifier:
keyid:A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:35:e1:60:6b:df:25:2b:57:94:d1:10:bc:c1:c2:70:6d:0f:
de:4e:c5:d8:98:7e:dd:0d:8b:05:f6:94:fa:e4:2f:47:9e:c8:
e2:fa:70:b1:a3:fd:41:09:8f:0e:8a:b7:f3:17:89:92:37:ef:
d2:7b:43:d7:9d:2b:12:9e:e2:b7:61:d4:b4:8e:a6:51:09:f6:
e3:b3:09:65:72:4b:78:3c:de:e7:4a:50:ea:93:1b:f9:ca:f7:
d1:2a:da:ac:2b:c6:5b:c6:6d:76:22:cb:ad:48:dd:d2:7d:bc:
80:c1:c7:99:5b:5e:58:81:76:36:8b:6c:07:73:93:cc:1a:c2:
b0:9d:e7:2b:d1:26:9f:5d:25:15:50:98:30:f4:d8:7c:4b:7d:
f8:68:2f:4b:2a:d2:4c:25:4f:8d:0c:f8:fd:d5:35:19:55:88:
99:ac:b9:0f:1b:34:29:a8:f9:46:dc:bd:aa:56:f3:e8:41:b4:
8b:69:f2:96:8d:76:53:73:d6:72:3c:39:65:fe:64:fe:53:43:
d3:56:7d:43:2e:08:22:bd:15:cd:a5:31:fe:a9:cb:fc:b8:38:
ca:6b:e0:04:de:2b:bb:b4:e4:28:ae:f4:bb:58:6d:93:6e:d3:
a5:2d:6b:24:1a:94:99:14:ea:35:64:58:38:07:25:24:12:b6:
a3:9f:f0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:59:43 2026 by rpki-client