Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
File: sOJbzFUwtvRvPRHLgRPyGaRt_as.mft (raw, json)
Hash identifier: /HlRUZGyG9GQdvBzM8DM91z1ThiB47x6jQny3M+UsDw=
Subject key identifier: 38:BC:39:0E:5F:D1:94:4B:0E:FA:32:64:A8:0E:8B:33:08:EF:D2:5E
Authority key identifier: B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
Certificate issuer: /CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Certificate serial: 01A08AF9FCE96DC3474E41E57825A16FB94E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
Manifest number: 1213
Signing time: Thu 10 Sep 2026 11:00:34 +0000
Manifest this update: Thu 10 Sep 2026 11:00:34 +0000
Manifest next update: Fri 11 Sep 2026 11:00:34 +0000
Files and hashes: 1: l25-eagSr6WzVdrAzPnf48EkFxw.roa (hash: XM2IXA1Cpr5+PIWiHfTlP1Lkgcivd8xdrrN+uvVV9sQ=)
2: sOJbzFUwtvRvPRHLgRPyGaRt_as.crl (hash: 8jo/Fw8mfxKAxRsPLc0vdvAKo/xwy/53o7igUD0V7aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:f9:fc:e9:6d:c3:47:4e:41:e5:78:25:a1:6f:b9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Validity
Not Before: Sep 10 11:00:34 2026 GMT
Not After : Sep 11 11:00:34 2026 GMT
Subject: CN=38bc390e5fd1944b0efa3264a80e8b3308efd25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:96:bf:1b:b9:ca:61:6c:2b:46:3f:22:ef:
00:d5:ac:08:3b:54:eb:d3:b9:55:a4:77:43:51:24:
4f:6e:0a:ad:06:a1:db:ca:cf:56:14:e4:ef:8f:03:
da:91:6f:d1:a4:39:e0:9d:98:31:36:44:17:02:5c:
52:b6:e4:ea:ca:86:6d:0a:ee:36:71:cb:70:39:fc:
d0:74:65:02:c8:4d:19:00:70:b6:d4:d8:d3:5f:af:
f6:b3:6e:6a:3c:6d:e6:28:d3:07:9c:ce:9b:8b:1d:
44:18:de:c1:bd:00:49:97:d3:42:72:1c:0b:b7:66:
53:52:8e:68:7b:e7:50:0d:8b:53:49:df:a6:da:0b:
1a:b9:57:da:60:16:65:ab:03:3d:b7:d4:a3:03:ba:
01:b1:f7:6d:1d:57:c5:a6:ab:ad:19:ca:b1:ad:4a:
c8:37:52:45:1d:e2:10:a4:e5:40:43:47:d4:49:4d:
4e:cb:0c:32:70:a4:1b:b5:06:3c:10:49:9d:da:4d:
d5:42:da:91:14:51:f9:14:0b:95:bf:92:fe:81:ef:
8d:b7:97:2a:14:1e:9b:db:fe:53:5a:e9:74:57:7d:
f2:e7:a9:5a:9b:43:57:78:93:6d:e0:eb:24:a8:20:
1e:8c:ae:9f:a9:cc:ac:2d:80:a9:7d:7a:7d:be:d7:
14:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BC:39:0E:5F:D1:94:4B:0E:FA:32:64:A8:0E:8B:33:08:EF:D2:5E
X509v3 Authority Key Identifier:
keyid:B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4a:d3:ae:27:29:95:a8:58:89:68:69:8b:90:99:49:8a:8e:
5b:19:a5:4c:2c:7d:08:04:f9:2b:ea:f8:6a:43:45:05:99:0a:
aa:de:96:dd:7c:39:94:4f:6e:b2:87:29:ce:36:e9:dc:d4:e1:
a0:b5:81:32:28:84:7c:46:12:de:96:04:62:6e:3e:19:e8:8b:
ba:09:bf:e1:d9:a8:cb:1e:a2:c0:bb:65:64:34:fb:9b:44:85:
e2:5b:7e:f8:82:19:a9:8a:0b:b1:f3:c6:7b:cf:01:27:a6:7c:
0a:1c:e6:f1:62:24:3d:34:1b:c4:99:3f:0b:f5:7b:2c:2b:e3:
30:8c:f9:35:21:73:80:4c:5f:5e:ca:0f:25:f4:35:c9:86:3f:
75:a5:3d:36:ae:27:3b:b1:ee:d0:3a:b4:bb:35:f5:65:56:8a:
33:37:4a:89:a1:23:1f:db:11:8b:85:0f:8b:60:0a:a6:b9:b2:
8f:31:f3:87:9b:a6:80:94:89:36:4e:fb:3c:71:76:4e:57:c3:
cd:d4:59:66:b6:74:cb:18:1f:c3:96:ff:19:89:91:77:5f:40:
17:3b:cc:c9:56:bc:2a:55:a1:21:e8:f5:31:d2:b1:00:b1:d5:
c8:9d:93:e7:c8:77:65:18:d6:d1:95:c2:54:ea:68:44:f0:e8:
e4:c8:b9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:25:25 2026 by rpki-client