Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
File: o875PLessPtJuiiKeg-_JtMAT6U.mft (raw, json)
Hash identifier: 4JJrHLZ6Sonn8CJ3vhpmaOGZO20vC9gDBi18UQPldzI=
Subject key identifier: E2:88:AA:74:81:1B:CF:5C:69:52:4B:89:49:E2:CA:E5:53:1C:DF:1D
Authority key identifier: A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
Certificate issuer: /CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
Certificate serial: 019D0CD6CF37EB5D6EC73EA30BDC582E631D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
Manifest number: 09E2
Signing time: Fri 20 Mar 2026 20:01:37 +0000
Manifest this update: Fri 20 Mar 2026 20:01:37 +0000
Manifest next update: Sat 21 Mar 2026 20:01:37 +0000
Files and hashes: 1: 5t3r-e7tyLlW84cUDqRXL5ROFSo.roa (hash: LjPlWorNn2ybzLX8+yX/V0IpzdHIQY94ZXTGvGnunJ4=)
2: o875PLessPtJuiiKeg-_JtMAT6U.crl (hash: VdYHP6MMzqa8FUkItjnlPuS9UFW8HE4JLLO0bqZpcZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0c:d6:cf:37:eb:5d:6e:c7:3e:a3:0b:dc:58:2e:63:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
Validity
Not Before: Mar 20 20:01:37 2026 GMT
Not After : Mar 21 20:01:37 2026 GMT
Subject: CN=e288aa74811bcf5c69524b8949e2cae5531cdf1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:6f:0d:ef:5a:68:d1:0b:71:90:8f:1f:fc:
82:e5:a5:7f:80:f8:fc:f8:3e:dd:04:34:07:8b:9e:
fa:08:69:1a:e8:62:fa:b7:1b:f8:e2:9d:53:57:c1:
39:c1:d4:3f:7f:d1:bb:f5:65:f7:8e:c7:c6:b8:0f:
ba:b4:4b:26:b4:ee:dc:db:9f:88:86:55:fe:3c:35:
85:55:02:4b:e1:41:bd:c7:9b:9f:30:d9:f6:4d:4c:
bf:92:f0:45:80:fc:c8:46:22:b3:fe:03:47:c8:36:
c4:6d:19:8a:da:27:3d:a7:d3:42:98:e9:26:da:10:
58:37:e9:db:b5:03:42:a0:e6:bc:83:dc:c6:34:52:
82:4a:47:3f:b4:13:53:b6:ce:5a:e1:44:75:03:2e:
08:89:48:e2:86:d0:ee:bb:f3:67:5e:7d:bd:01:76:
c1:4b:e1:77:90:b8:85:10:d3:86:4c:59:69:ab:08:
a9:b9:e2:d2:60:7c:51:bd:0e:fe:0e:18:d0:6e:a2:
a5:65:13:5e:39:62:cb:77:67:18:b0:5e:78:12:58:
3d:03:a7:fb:e7:ca:65:5b:d1:08:a4:24:b7:0b:18:
2d:f2:c7:48:19:62:a6:76:f9:ca:c6:cb:6d:e2:06:
3b:38:2c:c5:17:57:7e:58:5d:9e:fc:19:47:6f:07:
56:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:88:AA:74:81:1B:CF:5C:69:52:4B:89:49:E2:CA:E5:53:1C:DF:1D
X509v3 Authority Key Identifier:
keyid:A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4a:47:d2:61:84:86:77:f2:1d:1f:e8:d9:e9:10:9f:ea:f7:
43:36:b9:ed:19:96:99:87:6d:b1:37:37:dd:78:51:a2:0b:ec:
ba:79:96:ac:02:c5:3a:8c:cf:80:a7:cd:82:00:d7:27:67:9d:
2c:24:81:b9:be:92:69:63:29:0a:53:2d:77:c9:a3:62:23:a5:
84:5a:96:00:4c:4d:d4:66:c7:ef:46:24:6d:9c:f8:da:c5:e1:
45:a1:4f:b9:91:fa:de:7c:a3:fa:38:a9:f4:06:35:d3:14:9b:
27:5d:77:b4:41:70:70:9d:e0:24:64:07:63:c1:4a:3f:d2:20:
80:77:5e:1d:ab:d3:d1:c5:4b:36:da:70:5d:7d:30:0c:4e:12:
dc:f8:2c:58:8c:6e:d0:05:ab:f9:f2:a5:50:84:62:4c:98:ec:
fe:50:df:a5:ba:28:49:c7:c5:11:1e:94:de:0e:6c:87:d6:e8:
ad:b8:da:1b:16:e7:71:75:ee:9a:5a:66:46:86:ac:41:6d:84:
7f:2a:ec:0f:fe:66:e7:9a:0b:d7:5f:77:bf:ef:d5:6f:7c:c9:
15:dc:db:74:95:4a:c9:c6:0c:74:0b:77:6a:d9:43:b5:35:a8:
60:31:b3:83:62:05:98:a1:71:ea:5c:b3:7d:eb:03:84:70:a2:
8f:d7:9b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 04:07:47 2026 by rpki-client