Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
File: OBLJfb0yGVtq-pEUC1UgteDCxb4.mft (raw, json)
Hash identifier: JOliSp06PHIYOszioqlR3ouuYdF/p7uwAxdw6zvA8c0=
Subject key identifier: 3F:89:2B:5A:90:95:6F:B5:97:79:56:40:13:AD:0E:F5:76:EE:B7:EC
Authority key identifier: 38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
Certificate issuer: /CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Certificate serial: 019CAC0FFE3F0409366D755E18EC4845F811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
Manifest number: 158C
Signing time: Mon 02 Mar 2026 01:00:55 +0000
Manifest this update: Mon 02 Mar 2026 01:00:55 +0000
Manifest next update: Tue 03 Mar 2026 01:00:55 +0000
Files and hashes: 1: OBLJfb0yGVtq-pEUC1UgteDCxb4.crl (hash: GiCkWT+hfckwHYQbVaSNQjpr7TccnLQkjXEqarfTRc8=)
2: nyzykzCSciL9b7XcY2Eb25U1248.roa (hash: y0AO2J7wuOu2+dkp56Hwq0efMMez1I5zXW1sHLiGxC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:fe:3f:04:09:36:6d:75:5e:18:ec:48:45:f8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Validity
Not Before: Mar 2 01:00:55 2026 GMT
Not After : Mar 3 01:00:55 2026 GMT
Subject: CN=3f892b5a90956fb59779564013ad0ef576eeb7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:5e:c1:80:4a:23:3c:6a:66:f7:24:e7:f1:
87:be:c7:ed:4f:ab:ef:89:84:4d:b6:97:a1:98:01:
6e:18:bb:04:61:53:b8:28:12:59:b0:5d:d7:f7:4c:
33:71:c5:d9:6e:72:c0:42:4b:67:da:3c:e7:e8:ce:
25:87:ed:18:c5:2e:22:7c:4b:5d:84:6f:3a:32:3e:
92:ae:e3:49:94:e6:a6:a5:91:09:f1:07:05:c5:6a:
4e:b3:bb:e5:7e:be:14:25:10:b0:7b:39:40:16:6c:
ba:48:8b:d9:d1:a3:46:ea:50:19:8b:7b:e7:7a:e1:
79:d6:3d:54:98:2f:87:b2:24:59:1e:c8:33:87:bb:
62:31:d7:25:3e:be:cc:c9:48:2d:48:29:6d:79:63:
8e:c9:2a:5e:20:ca:8e:28:2f:18:75:50:47:21:cb:
aa:2c:5d:b4:8f:ea:ec:34:fc:fd:17:23:12:a6:23:
3a:6a:65:0d:05:4d:e0:13:df:3b:fc:c2:bc:cf:08:
45:a3:47:ec:81:94:2d:0e:4d:c1:27:28:52:a2:3c:
53:76:98:5d:c1:96:8e:30:62:33:59:b5:24:e8:d8:
d9:d3:d8:63:5e:5b:56:59:d8:ff:b0:e2:48:ae:77:
cb:31:13:7d:61:d3:34:b7:78:bf:d8:22:dd:f4:d3:
b7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:89:2B:5A:90:95:6F:B5:97:79:56:40:13:AD:0E:F5:76:EE:B7:EC
X509v3 Authority Key Identifier:
keyid:38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:bb:3d:12:30:d0:15:c4:5d:0f:90:39:c0:b4:a7:95:08:a4:
a4:6a:d7:b7:bd:12:a5:9c:c3:4e:e9:a6:97:a3:13:ab:e9:63:
c5:54:d8:22:ab:42:12:20:62:e9:65:7d:50:25:b7:ba:bb:ac:
94:35:2c:08:b7:54:d8:27:c6:72:96:5e:98:85:15:14:24:35:
b1:8a:8d:05:3d:8d:e2:59:fb:4c:a4:bd:5e:84:59:bf:38:7c:
0e:7c:e2:06:f1:ea:9b:ff:74:b7:b1:e1:fc:10:d2:fa:3f:23:
76:2d:bb:1b:ee:0e:dd:9b:e6:fb:c6:5b:b6:76:b4:a4:1b:6e:
7b:da:53:30:22:bd:61:1b:f6:4c:c5:16:61:95:70:ad:57:43:
38:55:c4:2a:a9:6c:91:24:7a:6e:1d:76:ad:55:2b:cd:5a:27:
cc:87:fb:72:ef:8c:2b:fe:f4:98:d7:65:ab:2b:b0:0e:2a:1f:
cc:ca:69:98:da:55:11:90:53:c0:c1:9f:0c:f7:27:ab:e1:40:
36:ea:d1:78:56:b2:55:90:56:5d:0a:82:9a:1b:65:d6:dc:cd:
da:22:45:70:55:9e:6b:22:fa:ce:fc:90:79:a4:7d:93:a6:7c:
75:f3:1b:93:dc:3e:f0:18:d3:de:4a:28:f6:43:4c:c4:70:b8:
80:63:54:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:41 2026 by rpki-client