Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
File: sOJbzFUwtvRvPRHLgRPyGaRt_as.mft (raw, json)
Hash identifier: TE0InK9XZyhCXxNGsV4Z7qIcZiWYBgRhbbhBvHE1CcE=
Subject key identifier: F8:8D:10:35:E0:A9:79:01:0A:05:BC:95:CA:CA:56:C6:67:B8:E4:82
Authority key identifier: B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
Certificate issuer: /CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Certificate serial: 019D394115B205838F4FA2A2D024A39C37F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
Manifest number: 105B
Signing time: Sun 29 Mar 2026 11:00:59 +0000
Manifest this update: Sun 29 Mar 2026 11:00:59 +0000
Manifest next update: Mon 30 Mar 2026 11:00:59 +0000
Files and hashes: 1: l25-eagSr6WzVdrAzPnf48EkFxw.roa (hash: XM2IXA1Cpr5+PIWiHfTlP1Lkgcivd8xdrrN+uvVV9sQ=)
2: sOJbzFUwtvRvPRHLgRPyGaRt_as.crl (hash: gEzIyFhkQgj85O/phR4ggD29ltSdNKZJMm5MrJ+S5m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:15:b2:05:83:8f:4f:a2:a2:d0:24:a3:9c:37:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Validity
Not Before: Mar 29 11:00:59 2026 GMT
Not After : Mar 30 11:00:59 2026 GMT
Subject: CN=f88d1035e0a979010a05bc95caca56c667b8e482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:5b:e9:3a:2c:b7:b7:63:45:c4:29:ad:77:
1c:26:92:e1:db:2e:cb:e8:a2:b4:e4:8c:a0:c6:61:
93:5d:c5:5f:bd:57:a5:7e:d0:bc:57:a8:9a:a5:69:
48:70:2b:4c:f5:b2:9a:3e:ae:e0:2d:43:cc:a0:e1:
9d:95:a9:6a:5b:f6:44:e4:c6:7c:e3:0b:95:91:f8:
16:db:79:19:54:b0:52:56:f7:b1:50:d8:0c:33:1e:
4d:ad:f4:9c:25:11:8d:5c:ae:e8:e4:3c:09:69:91:
10:2a:b5:2e:d0:64:88:78:41:82:a5:d2:75:a1:66:
62:d2:a7:4d:ad:ed:8f:86:e4:2d:73:f2:08:4f:e3:
87:5f:2f:61:a0:ac:85:02:a5:9f:22:40:3e:4d:d8:
d6:81:29:16:e6:b3:6c:d2:ef:98:03:ae:76:27:02:
8b:0f:b9:b4:6e:17:7c:62:a9:ea:41:81:90:f7:35:
05:99:bc:7a:30:f9:92:66:05:e7:90:41:70:37:ce:
36:9b:26:d6:2f:e6:2c:8b:bb:96:c6:ce:43:cd:e9:
24:46:a7:d1:36:9d:16:23:59:e2:38:a2:9d:8c:7b:
43:57:33:53:88:22:d6:d8:e5:6c:64:16:b7:a6:95:
13:22:aa:b8:e3:a8:b6:fa:13:b3:e8:5e:c0:75:85:
e0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8D:10:35:E0:A9:79:01:0A:05:BC:95:CA:CA:56:C6:67:B8:E4:82
X509v3 Authority Key Identifier:
keyid:B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6b:96:24:94:94:e4:c2:9f:5c:80:ad:6b:9e:83:6b:17:a6:
ce:8e:6e:1f:55:0b:bf:0c:b2:75:a1:97:08:5b:c5:e1:b4:1d:
40:20:a4:46:5d:8d:35:63:d2:c2:f5:31:6a:55:da:83:2d:1c:
81:cb:fb:76:30:8c:dc:a5:1d:7a:e5:cb:e2:50:88:99:df:1a:
df:70:eb:fe:07:4e:79:f6:6a:ab:8d:4d:a2:e7:8b:9c:d0:06:
df:a6:63:f6:40:c8:2c:40:06:20:ae:a6:b0:be:c5:00:cb:27:
23:a5:41:b0:8d:5b:95:73:b6:1c:f3:19:23:1d:7c:47:ca:1a:
c2:03:4e:e9:82:ea:83:11:b1:85:95:13:9f:78:8f:b5:33:74:
ae:87:6d:a8:a1:15:b8:4d:41:ec:b0:73:22:77:47:d2:4f:57:
2f:4f:f3:9d:e7:b1:88:b4:2c:66:de:cb:35:6c:d4:14:72:95:
5e:29:59:cf:b1:d7:e5:33:c3:49:97:e3:7f:9e:0f:79:9a:7c:
d8:09:1b:8b:f1:60:3f:86:28:61:3c:59:e6:8e:13:69:91:a8:
90:64:85:3b:8c:d2:40:2e:ba:32:02:31:d8:37:68:88:5a:d4:
68:0a:65:11:27:6e:aa:1f:69:2b:03:cf:e2:95:0b:a6:ad:78:
53:be:07:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QRWyBYOPT6Ki0CSjnDf3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZTI1YmNjNTUzMGI2ZjQ2ZjNkMTFjYjgxMTNmMjE5YTQ2
ZGZkYWIwHhcNMjYwMzI5MTEwMDU5WhcNMjYwMzMwMTEwMDU5WjAzMTEwLwYDVQQD
EyhmODhkMTAzNWUwYTk3OTAxMGEwNWJjOTVjYWNhNTZjNjY3YjhlNDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv1b6Tost7djRcQprXccJpLh2y7L
6KK05IygxmGTXcVfvVelftC8V6iapWlIcCtM9bKaPq7gLUPMoOGdlalqW/ZE5MZ8
4wuVkfgW23kZVLBSVvexUNgMMx5NrfScJRGNXK7o5DwJaZEQKrUu0GSIeEGCpdJ1
oWZi0qdNre2PhuQtc/IIT+OHXy9hoKyFAqWfIkA+TdjWgSkW5rNs0u+YA652JwKL
D7m0bhd8YqnqQYGQ9zUFmbx6MPmSZgXnkEFwN842mybWL+Ysi7uWxs5DzekkRqfR
Np0WI1niOKKdjHtDVzNTiCLW2OVsZBa3ppUTIqq446i2+hOz6F7AdYXgOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiNEDXgqXkBCgW8lcrKVsZnuOSCMB8GA1UdIwQY
MBaAFLDiW8xVMLb0bz0Ry4ET8hmkbf2rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc09KYnpGVXd0dlJ2UFJITGdSUHlHYVJ0X2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zODMwYzgtODAyZi00ODQ2LWI2ZTUt
MWFhZGFiYTgwMDcyLzEvc09KYnpGVXd0dlJ2UFJITGdSUHlHYVJ0X2FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8zODMwYzgtODAyZi00ODQ2LWI2ZTUtMWFhZGFiYTgwMDcy
LzEvc09KYnpGVXd0dlJ2UFJITGdSUHlHYVJ0X2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2uWJJSU
5MKfXICta56Daxemzo5uH1ULvwyydaGXCFvF4bQdQCCkRl2NNWPSwvUxalXagy0c
gcv7djCM3KUdeuXL4lCImd8a33Dr/gdOefZqq41NoueLnNAG36Zj9kDILEAGIK6m
sL7FAMsnI6VBsI1blXO2HPMZIx18R8oawgNO6YLqgxGxhZUTn3iPtTN0rodtqKEV
uE1B7LBzIndH0k9XL0/zneexiLQsZt7LNWzUFHKVXilZz7HX5TPDSZfjf54PeZp8
2Akbi/FgP4YoYTxZ5o4TaZGokGSFO4zSQC66MgIx2DdoiFrUaAplESduqh9pKwPP
4pULpq14U74Hig==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:43 2026 by rpki-client