Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
File: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft (raw, json)
Hash identifier: 7WGZrK75xmjcfPbzD/Aq2K2w09hsBPFy+J0iy+yLNFE=
Subject key identifier: F6:4D:EB:67:A8:D8:B8:24:B8:20:DD:C7:C5:67:A0:FC:8A:3B:DA:CD
Authority key identifier: A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
Certificate issuer: /CN=a01012ec845500718cab76c9dd0af010890de26d
Certificate serial: 019CAB342AC0C98B458C01852EB228504FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
Manifest number: 11E8
Signing time: Sun 01 Mar 2026 21:00:48 +0000
Manifest this update: Sun 01 Mar 2026 21:00:48 +0000
Manifest next update: Mon 02 Mar 2026 21:00:48 +0000
Files and hashes: 1: cyts1p2wCvnwn0Aiq887XNaaeB4.roa (hash: 35IzE+3xgtlfUeRGehmvu6jrdJGF2F8RsbhMs7R8PLM=)
2: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl (hash: RYkef+fupWrLHyf6Ao8Wx64ghFanMANmpprwcDSWXyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:2a:c0:c9:8b:45:8c:01:85:2e:b2:28:50:4f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01012ec845500718cab76c9dd0af010890de26d
Validity
Not Before: Mar 1 21:00:48 2026 GMT
Not After : Mar 2 21:00:48 2026 GMT
Subject: CN=f64deb67a8d8b824b820ddc7c567a0fc8a3bdacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:de:13:93:17:3e:36:a8:de:53:79:7b:e5:
53:7f:79:df:93:5f:95:54:74:f0:bb:3e:32:22:e0:
fe:44:61:06:dc:d0:87:94:ae:3a:a0:09:0a:db:ff:
df:25:b8:ff:1a:75:13:7d:cf:54:0b:03:ff:67:f1:
23:b4:5f:97:ab:69:81:42:6f:e9:b2:ef:58:3b:50:
74:f8:69:96:cd:ec:f5:6b:b0:fc:11:3c:71:05:72:
f6:d9:64:a0:b5:50:39:1d:58:d9:76:06:de:7b:21:
19:b6:8e:cf:d5:cf:6d:e4:72:e2:27:6e:9a:ad:76:
14:7f:2f:c9:1d:c3:29:7d:21:0c:f6:a7:b3:bf:60:
1f:15:d6:a8:4c:70:bf:fd:6c:09:07:18:4b:b1:41:
3e:07:35:65:e7:75:f8:4d:5e:84:2e:55:d1:68:69:
59:ad:e3:be:6c:ac:85:93:8c:3b:56:43:6a:74:96:
93:56:e0:2c:f6:b8:37:7f:de:81:b9:b3:51:26:38:
8e:cf:e7:b1:27:96:6b:42:a1:6b:d7:a1:00:56:d0:
41:48:85:0f:7e:a4:24:af:9f:be:0b:d7:30:4f:44:
87:25:63:e1:2c:91:f0:75:28:2b:61:0a:a4:2b:6b:
bc:77:a8:43:ab:99:c2:3e:23:71:c4:f4:e7:5c:74:
7b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4D:EB:67:A8:D8:B8:24:B8:20:DD:C7:C5:67:A0:FC:8A:3B:DA:CD
X509v3 Authority Key Identifier:
keyid:A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c3:98:bd:a6:d9:8b:44:29:27:90:66:3c:9a:9f:b1:65:4f:
5a:ab:c0:e2:86:10:6f:b3:3a:52:29:a6:98:6f:01:8e:5e:3a:
84:09:9b:c9:e1:0c:c8:f4:dd:6a:36:d7:46:8b:13:03:87:da:
9d:0b:a3:b1:b7:9c:e7:79:66:5f:6d:4d:03:6e:fa:92:e5:49:
03:36:41:84:e2:c0:97:ed:60:95:4e:7e:4a:46:52:08:21:44:
4f:a6:30:0c:07:24:dc:4e:6a:00:0a:96:37:2d:54:1a:19:4a:
19:0b:f2:c3:3e:15:3b:95:13:6c:b6:ae:b2:db:79:a3:36:97:
70:bb:0c:1a:5b:f4:41:66:ec:62:86:8e:27:03:4e:e0:9b:a0:
87:ef:00:e7:6f:13:07:7b:fc:3d:5c:13:5e:86:6c:4e:16:66:
16:e0:07:98:bf:51:e0:49:09:f2:4c:ec:1d:02:d3:e6:46:d5:
46:4f:f1:63:0f:a2:8b:fa:81:a6:1e:59:7b:47:29:4b:04:73:
ec:79:c0:9b:51:0d:3e:21:3a:e0:cf:1d:20:62:93:06:fd:8c:
8b:06:59:f7:c8:b8:51:b5:61:de:c9:a3:61:b9:fc:6e:f4:63:
8f:4f:e2:cd:74:56:ee:93:0e:93:c3:67:67:2e:dc:fa:1d:2d:
8c:de:73:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNCrAyYtFjAGFLrIoUE+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMTAxMmVjODQ1NTAwNzE4Y2FiNzZjOWRkMGFmMDEwODkw
ZGUyNmQwHhcNMjYwMzAxMjEwMDQ4WhcNMjYwMzAyMjEwMDQ4WjAzMTEwLwYDVQQD
EyhmNjRkZWI2N2E4ZDhiODI0YjgyMGRkYzdjNTY3YTBmYzhhM2JkYWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4TeE5MXPjao3lN5e+VTf3nfk1+V
VHTwuz4yIuD+RGEG3NCHlK46oAkK2//fJbj/GnUTfc9UCwP/Z/EjtF+Xq2mBQm/p
su9YO1B0+GmWzez1a7D8ETxxBXL22WSgtVA5HVjZdgbeeyEZto7P1c9t5HLiJ26a
rXYUfy/JHcMpfSEM9qezv2AfFdaoTHC//WwJBxhLsUE+BzVl53X4TV6ELlXRaGlZ
reO+bKyFk4w7VkNqdJaTVuAs9rg3f96BubNRJjiOz+exJ5ZrQqFr16EAVtBBSIUP
fqQkr5++C9cwT0SHJWPhLJHwdSgrYQqkK2u8d6hDq5nCPiNxxPTnXHR7UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZN62eo2LgkuCDdx8VnoPyKO9rNMB8GA1UdIwQY
MBaAFKAQEuyEVQBxjKt2yd0K8BCJDeJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0JBUzdJUlZBSEdNcTNiSjNRcndFSWtONG0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83YjMwOGMtNzBjZC00ZjI0LWI2MTAt
N2FiYTU2OTY1OGQ1LzEvb0JBUzdJUlZBSEdNcTNiSjNRcndFSWtONG0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83YjMwOGMtNzBjZC00ZjI0LWI2MTAtN2FiYTU2OTY1OGQ1
LzEvb0JBUzdJUlZBSEdNcTNiSjNRcndFSWtONG0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMOYvabZ
i0QpJ5BmPJqfsWVPWqvA4oYQb7M6UimmmG8Bjl46hAmbyeEMyPTdajbXRosTA4fa
nQujsbec53lmX21NA276kuVJAzZBhOLAl+1glU5+SkZSCCFET6YwDAck3E5qAAqW
Ny1UGhlKGQvywz4VO5UTbLaustt5ozaXcLsMGlv0QWbsYoaOJwNO4Jugh+8A528T
B3v8PVwTXoZsThZmFuAHmL9R4EkJ8kzsHQLT5kbVRk/xYw+ii/qBph5Ze0cpSwRz
7HnAm1ENPiE64M8dIGKTBv2MiwZZ98i4UbVh3smjYbn8bvRjj0/izXRW7pMOk8Nn
Zy7c+h0tjN5zfQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:47:29 2026 by rpki-client