Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
File: sOJbzFUwtvRvPRHLgRPyGaRt_as.mft (raw, json)
Hash identifier: EIIPUpA9JAwDRjbqcjOVVibutwDXV2gOi3UL/4ZmyJc=
Subject key identifier: 39:62:BA:56:51:C3:BE:2E:0A:93:6C:61:46:2C:2F:35:3B:39:B3:E6
Authority key identifier: B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
Certificate issuer: /CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Certificate serial: 019D27DFAF09FA1D4FA1C4A4BD253694AA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
Manifest number: 1052
Signing time: Thu 26 Mar 2026 02:01:03 +0000
Manifest this update: Thu 26 Mar 2026 02:01:03 +0000
Manifest next update: Fri 27 Mar 2026 02:01:03 +0000
Files and hashes: 1: l25-eagSr6WzVdrAzPnf48EkFxw.roa (hash: XM2IXA1Cpr5+PIWiHfTlP1Lkgcivd8xdrrN+uvVV9sQ=)
2: sOJbzFUwtvRvPRHLgRPyGaRt_as.crl (hash: OWZSQe34BCH1VSTaLjtgsXy4fvbZOpUWogWb6pJt2GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:af:09:fa:1d:4f:a1:c4:a4:bd:25:36:94:aa:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Validity
Not Before: Mar 26 02:01:03 2026 GMT
Not After : Mar 27 02:01:03 2026 GMT
Subject: CN=3962ba5651c3be2e0a936c61462c2f353b39b3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e1:31:e1:f1:0b:20:d9:92:da:16:63:b3:62:
a3:a2:dd:a4:68:a1:f6:6b:69:f0:3d:45:20:71:76:
24:5d:9f:c8:d5:3d:a2:fd:64:bb:7c:0f:c6:5b:0a:
a1:88:46:46:47:79:8f:ad:23:52:d1:ea:8a:ee:7b:
87:49:9b:b4:11:5c:2a:1c:b9:fa:40:09:74:b0:b2:
34:ab:9c:c9:ac:2f:5d:51:76:4f:5c:10:d5:e2:d0:
16:48:e3:ca:29:41:a9:98:3d:28:64:f2:78:36:97:
09:2d:f9:88:4c:33:cf:17:7b:06:7c:7d:54:35:16:
85:db:9f:dc:65:61:8a:1f:00:73:d9:77:24:9a:56:
0a:97:bb:1f:1c:cb:a5:e3:93:31:02:db:b5:f6:12:
6b:7c:ff:37:96:b1:77:49:59:87:70:dd:e8:db:a6:
b1:1e:33:bc:07:7f:1b:2c:ea:e3:05:4c:86:43:be:
50:6f:0f:e2:8b:be:33:c1:40:65:bc:3b:dd:e2:fa:
b8:03:ea:7b:f5:45:91:4c:2e:a1:50:1a:a2:43:3a:
ac:31:95:bf:cf:83:e6:f9:74:3c:2f:68:8b:4f:ea:
60:11:d9:00:d2:28:25:b7:e9:80:e2:96:ee:c1:43:
de:a3:a2:16:49:8b:a2:94:60:b5:fb:78:95:20:4c:
9d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:62:BA:56:51:C3:BE:2E:0A:93:6C:61:46:2C:2F:35:3B:39:B3:E6
X509v3 Authority Key Identifier:
keyid:B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:42:e0:9e:cf:42:aa:29:93:b8:d5:e3:df:6b:4c:4e:63:2c:
d8:0c:69:26:1c:d2:75:ec:34:16:15:bb:cc:43:3f:f5:5a:6d:
6e:b1:90:3e:77:87:f0:b0:20:e1:47:e2:f6:b2:a2:42:44:40:
23:fd:40:33:a3:6b:7c:74:98:0f:53:d7:00:68:b7:f6:57:b6:
c1:59:ba:7f:71:e6:9e:87:34:48:ee:8a:f3:ef:7c:c9:69:bf:
a9:77:4c:38:11:64:79:49:fa:7b:f1:7a:98:99:64:4d:2d:14:
04:ee:dd:c9:63:ee:40:d0:07:c7:ba:bf:55:a4:ec:ed:cd:19:
e2:07:07:24:c4:96:f6:74:c2:7d:b6:6d:01:a0:6b:ba:2c:ec:
ae:cf:01:19:28:2d:92:0f:07:6b:64:33:78:4d:12:b2:76:5f:
d3:97:9a:58:1f:a1:25:0f:fe:9f:3e:91:a3:46:3d:87:c8:06:
fa:d9:d4:d4:b7:42:67:58:b1:98:da:4f:d6:2d:dd:13:44:d0:
42:c0:94:49:57:ad:ca:d5:ca:3f:df:e4:64:b5:cd:fd:ed:79:
1f:58:f0:c1:f6:1d:3a:30:c2:d8:9f:e3:d4:71:8b:f7:9e:2c:
2b:77:3c:89:a0:a2:6d:73:90:53:02:08:ea:a0:91:8b:25:04:
d2:ed:a0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:26:02 2026 by rpki-client