Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
File: o875PLessPtJuiiKeg-_JtMAT6U.mft (raw, json)
Hash identifier: y94KcTG29CrU/+Lxornjxxl78E4j4lMY9EpsxFNuaSc=
Subject key identifier: CD:14:2A:05:FB:7A:A6:F0:EB:AE:41:90:14:75:F1:20:67:1D:20:6B
Authority key identifier: A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
Certificate issuer: /CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
Certificate serial: 019D25F106B74E7BA6FED77726358BF9FA3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
Manifest number: 09EF
Signing time: Wed 25 Mar 2026 17:00:45 +0000
Manifest this update: Wed 25 Mar 2026 17:00:45 +0000
Manifest next update: Thu 26 Mar 2026 17:00:45 +0000
Files and hashes: 1: 5t3r-e7tyLlW84cUDqRXL5ROFSo.roa (hash: LjPlWorNn2ybzLX8+yX/V0IpzdHIQY94ZXTGvGnunJ4=)
2: o875PLessPtJuiiKeg-_JtMAT6U.crl (hash: lJHsKw6dI5cPGsnTR+nRBL3UFmoG7DqE5x5QkGFluSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:06:b7:4e:7b:a6:fe:d7:77:26:35:8b:f9:fa:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
Validity
Not Before: Mar 25 17:00:45 2026 GMT
Not After : Mar 26 17:00:45 2026 GMT
Subject: CN=cd142a05fb7aa6f0ebae41901475f120671d206b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:d7:f7:6b:bb:a8:7a:59:bd:69:86:7b:79:
df:a5:50:99:ee:0c:67:df:b6:7d:01:be:13:f1:31:
45:7f:db:10:da:34:34:ba:90:54:15:3d:bc:90:e0:
a8:7a:bf:c4:c0:c9:32:67:11:15:94:27:6b:38:98:
88:ea:ce:0e:29:b9:b9:3e:37:ad:3f:b0:02:ef:c4:
9a:54:86:3c:da:a8:e3:0c:3e:aa:47:53:4e:9b:a5:
2f:17:5d:d1:28:c7:0f:a5:b1:2b:de:9b:0e:3f:c5:
3e:d1:82:84:01:1d:ef:32:a9:cd:09:15:10:7a:3a:
f6:8f:5c:8e:bb:78:29:83:67:3b:2a:57:79:ce:50:
cb:af:71:57:26:e3:73:8d:a4:0f:4b:11:2f:a8:c0:
b9:18:c9:f9:5d:c1:ca:66:ea:a5:5f:68:a5:c6:97:
13:83:4e:ba:98:5f:0c:42:22:11:44:e7:a8:10:94:
95:77:3d:5c:00:42:25:15:46:7f:08:5a:aa:90:fe:
0a:3f:f5:04:32:52:15:d7:04:e0:f4:09:04:3f:da:
39:51:3d:b5:d9:d4:83:be:e1:b1:cb:42:32:7d:e2:
37:fc:63:35:52:a7:6b:4b:fa:99:64:7b:29:2a:f1:
3f:c9:df:8e:31:1d:8d:d5:82:94:34:7f:d6:7b:96:
0d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:14:2A:05:FB:7A:A6:F0:EB:AE:41:90:14:75:F1:20:67:1D:20:6B
X509v3 Authority Key Identifier:
keyid:A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a5:4b:56:d5:8f:cc:1e:3f:ce:9b:46:2b:75:e7:f8:42:2e:
93:d4:7d:11:7c:cc:b4:b7:6f:66:90:26:d5:15:10:91:58:2b:
da:2c:f1:75:0b:b5:ed:45:82:57:db:f7:08:e1:55:aa:e4:ca:
2a:ef:ac:ea:65:2a:c8:61:56:c1:fb:5e:83:41:ea:4f:d9:2f:
2e:5a:48:37:88:1d:77:1a:89:db:57:02:7c:c4:65:c8:54:fb:
7b:35:41:b0:75:db:72:6e:dd:eb:82:3e:bc:6f:c4:da:08:65:
c0:66:ed:f0:c5:e9:67:df:42:d9:91:0e:e7:ba:c3:27:b3:2e:
3a:aa:4c:58:fe:47:90:d0:fb:74:80:ea:1c:41:13:22:83:30:
f1:18:8c:b7:8e:70:1b:08:35:3d:3a:f0:db:57:ac:d2:30:af:
3a:85:24:40:8b:2e:77:56:73:da:f6:49:5f:bc:fd:c9:20:03:
13:e4:12:16:fe:37:48:87:fa:af:da:57:d8:bf:8d:3c:a4:ab:
89:0d:3a:be:2d:eb:4f:a5:8b:52:b9:9e:4e:51:29:1c:ef:f0:
a6:6c:7b:2c:d9:60:8d:1d:ad:32:25:00:b1:c0:e4:4a:d4:18:
c9:b6:fb:7b:14:8a:e0:56:ca:25:31:de:26:ed:62:4d:66:cc:
7f:eb:7a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:16 2026 by rpki-client