Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
File: oBocfbuaFXGlv0kkqz_FBJMUX08.mft (raw, json)
Hash identifier: haTWmYoy30yIluWmBa8SOHRIImOEqZghina+UBIyg4c=
Subject key identifier: 7D:B1:22:9F:60:4D:3F:38:38:B0:0D:85:AC:C6:9C:D3:D6:56:CB:63
Authority key identifier: A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
Certificate issuer: /CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Certificate serial: 019CAB341B03516246AC36F6464361EA4CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
Manifest number: 0940
Signing time: Sun 01 Mar 2026 21:00:44 +0000
Manifest this update: Sun 01 Mar 2026 21:00:44 +0000
Manifest next update: Mon 02 Mar 2026 21:00:44 +0000
Files and hashes: 1: HBEyLxpq6Zjz5sUTBEvkEU0PeDw.roa (hash: uYdJNtH72XeHZSBQgJWsgmqChwbMODpuyEXVyDLkE8Q=)
2: oBocfbuaFXGlv0kkqz_FBJMUX08.crl (hash: /UFGS6SCqR5yG5FngQdaCGWh0FzLCCqBN6YAdpANgYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:1b:03:51:62:46:ac:36:f6:46:43:61:ea:4c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Validity
Not Before: Mar 1 21:00:44 2026 GMT
Not After : Mar 2 21:00:44 2026 GMT
Subject: CN=7db1229f604d3f3838b00d85acc69cd3d656cb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:ea:56:98:d3:d6:12:3e:60:12:0e:cc:54:
80:6e:45:80:3e:84:5c:39:d4:84:62:32:bf:29:aa:
46:64:fb:94:6e:bf:48:eb:64:53:6f:53:48:4e:ef:
41:81:06:bc:ef:4d:bd:79:c5:81:7b:a5:d9:b1:2c:
c7:8f:ec:2d:3f:36:d3:9a:36:ef:ae:02:92:fe:be:
d2:b8:d6:83:f1:2c:92:9b:84:81:2e:1f:26:3d:3c:
60:92:37:d0:cd:bd:38:4f:e4:fd:99:15:ac:6d:56:
7c:17:c0:77:71:c9:eb:ef:e9:8a:e1:93:fd:81:be:
26:b8:f3:fb:99:b0:5e:f7:32:10:43:67:0f:0c:3d:
4b:11:cf:37:e3:97:1c:4c:e8:2c:2f:5c:f3:cc:c5:
d7:75:a1:04:05:c7:47:d6:07:ff:6a:29:34:6f:ec:
60:8b:ad:a2:ec:f4:82:20:2e:10:29:a8:5e:4b:7d:
20:b2:86:8d:c2:d9:83:88:64:10:d9:ff:5f:82:92:
d7:f0:4f:38:1b:2a:ac:b1:03:24:e6:a4:7c:43:6a:
5b:54:87:98:8f:a8:2f:a3:42:42:ef:0a:05:ee:da:
c7:cc:d5:09:bb:1d:d1:5d:ff:6a:97:a1:d8:45:e5:
f0:92:2b:b4:ea:68:84:b5:70:a0:1c:66:b0:23:06:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B1:22:9F:60:4D:3F:38:38:B0:0D:85:AC:C6:9C:D3:D6:56:CB:63
X509v3 Authority Key Identifier:
keyid:A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:28:3f:b4:2a:25:15:f5:ee:46:4d:e2:c6:23:ba:19:03:7f:
a2:07:bd:c5:5c:a4:88:4d:55:6c:67:24:b3:e6:7e:c1:a5:de:
fb:26:95:d0:f0:7b:b0:a0:94:e4:49:97:ac:b2:81:3f:2b:64:
b5:02:52:eb:cb:04:d6:f4:2b:02:aa:46:e4:dd:74:a6:c3:48:
44:f5:c4:9f:a2:b9:9b:d8:e1:41:38:74:e8:d2:ea:e6:65:2d:
35:58:4e:95:2d:c9:df:0a:19:7e:40:05:22:19:65:10:80:f5:
1b:1c:77:73:f7:f9:c0:0b:11:f8:15:ba:f3:c7:bf:b0:4b:d5:
26:2e:ec:97:2e:c1:1d:12:62:74:d6:50:2c:e0:be:c5:24:db:
b0:a9:99:3b:65:5b:54:b1:e0:f0:09:ae:84:6c:66:8c:71:07:
d2:9d:15:44:4b:5a:8c:2c:5e:7b:cc:55:ec:f2:59:e1:ce:da:
d5:99:e7:ad:f9:df:ef:c0:03:68:8e:13:cb:77:1d:67:8f:56:
4b:a8:70:58:8f:d3:9c:ca:52:13:ca:36:a2:91:c1:8a:55:05:
54:df:d4:33:77:e8:ab:29:12:42:c2:68:11:ef:8f:c6:c2:d3:
9e:7f:fb:27:86:f0:a8:a1:7a:96:7f:9d:b6:8e:51:a9:71:f2:
2a:55:95:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:07 2026 by rpki-client