Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
File: o875PLessPtJuiiKeg-_JtMAT6U.mft (raw, json)
Hash identifier: 0hNX4PCjafDkXiKXYbtGTZqQDK7R2Np/aUWPrdkEiiA=
Subject key identifier: 57:A4:A7:35:32:94:F7:45:7D:E4:33:C7:7E:97:01:B3:FB:B6:E7:07
Authority key identifier: A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
Certificate issuer: /CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
Certificate serial: 019CAA58C8F95F1878316052E17F87388628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
Manifest number: 09AF
Signing time: Sun 01 Mar 2026 17:01:11 +0000
Manifest this update: Sun 01 Mar 2026 17:01:11 +0000
Manifest next update: Mon 02 Mar 2026 17:01:11 +0000
Files and hashes: 1: 5t3r-e7tyLlW84cUDqRXL5ROFSo.roa (hash: LjPlWorNn2ybzLX8+yX/V0IpzdHIQY94ZXTGvGnunJ4=)
2: o875PLessPtJuiiKeg-_JtMAT6U.crl (hash: lpllBaqVUAHZIXwhLwQGPI1vScF/QbzYogQIP0sAtAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:c8:f9:5f:18:78:31:60:52:e1:7f:87:38:86:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
Validity
Not Before: Mar 1 17:01:11 2026 GMT
Not After : Mar 2 17:01:11 2026 GMT
Subject: CN=57a4a7353294f7457de433c77e9701b3fbb6e707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:12:e7:9b:8d:4b:6e:54:6a:56:5a:35:04:1c:
c9:70:29:d8:e5:a8:64:89:3b:c3:d5:98:9b:8d:c1:
60:69:fc:50:b0:15:b2:be:5c:42:0a:cf:a3:58:3d:
9c:a1:be:8f:b9:8e:72:72:32:6a:88:03:3d:1e:88:
77:b0:77:75:8e:5f:19:e5:86:4a:bd:e5:93:bb:91:
2e:18:22:62:dd:fc:74:02:30:25:18:c2:72:a4:da:
4c:9d:57:20:41:00:8f:19:12:ec:1a:b6:ab:9e:61:
36:29:54:6a:e7:1a:be:0d:80:61:80:96:c6:67:17:
40:89:eb:fb:4a:87:c2:6a:8c:68:a3:f9:02:26:b4:
4e:bb:f9:a9:4d:02:38:f6:e3:a8:1e:f4:d1:9e:ea:
02:70:5f:bc:ab:8c:e7:5a:05:80:b0:61:19:a1:bb:
18:2c:82:1b:82:2e:5b:4a:5b:88:3b:5e:bc:ec:49:
39:28:4d:54:09:26:64:f8:84:17:64:36:ab:f4:01:
00:4b:38:d5:5c:5d:5b:85:be:17:4f:53:a1:97:ca:
2d:fb:b5:79:54:03:63:e3:87:25:bd:7d:97:73:c2:
e0:3e:8c:be:42:ed:77:d8:7b:f8:5c:58:a3:a8:87:
d3:17:48:16:46:33:95:88:9b:7a:e7:c1:7f:b4:9d:
f9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A4:A7:35:32:94:F7:45:7D:E4:33:C7:7E:97:01:B3:FB:B6:E7:07
X509v3 Authority Key Identifier:
keyid:A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d0:8f:d1:38:2c:79:16:7e:aa:2d:22:e5:cb:32:84:88:b0:
f1:5c:fd:95:a7:ed:00:92:5b:5f:b7:57:fe:13:f8:0f:13:0a:
81:46:35:a0:c4:e8:d8:55:3f:b1:a7:23:1d:c3:01:8b:6f:af:
f3:64:a5:72:9d:45:c5:5d:ea:4c:65:db:cf:68:93:f8:c3:60:
a0:b1:62:ed:c0:13:e9:25:9a:f6:fa:3c:2a:b8:30:47:a1:4d:
10:9a:0d:65:fa:5a:8b:a0:10:87:cc:a4:f6:f3:46:09:52:1f:
77:04:56:26:a1:79:e6:45:34:2a:2d:3a:0c:5a:fe:e7:22:97:
2e:21:31:b5:46:8e:92:0f:de:8e:23:31:1c:38:80:ea:2e:1d:
1f:23:7a:9f:71:13:9a:dc:20:b2:85:83:92:b5:63:a4:69:4a:
c6:50:e4:82:78:51:db:16:44:7a:9e:3f:ff:70:69:5f:a2:8e:
2c:32:f7:43:a7:4b:6c:39:49:9e:e0:52:96:1a:88:55:35:c9:
5b:43:8c:c9:a2:80:e5:61:eb:bf:e9:04:6c:10:28:78:a7:95:
59:a2:89:84:38:2b:8a:3a:de:02:0e:3d:54:c4:5e:73:ca:cf:
ff:60:3b:f9:62:68:ad:91:4e:1d:03:50:a0:53:98:e7:35:a5:
11:9c:1a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:18 2026 by rpki-client