Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: DYAH23gtuzFnv9hZ95n8H/OoPbV4IpT1+xJDslFvWrE=
Subject key identifier: 29:6D:F8:B7:BF:B5:3A:55:36:AC:9D:19:8F:34:0B:4B:1F:A9:B2:28
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 019DD12CD9E7A3D5B46DF92F2D41211628FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 18E1
Signing time: Mon 27 Apr 2026 23:01:10 +0000
Manifest this update: Mon 27 Apr 2026 23:01:10 +0000
Manifest next update: Tue 28 Apr 2026 23:01:10 +0000
Files and hashes: 1: 1-Dqswh2nOTAd-BLgdUyGvB-Z1kc.roa (hash: fQXXSs2gglVxP/y70N/IcdYPFQ/yUJztMiHuepjm5xo=)
2: n2KBANa3wBwM2_JjLezjaU7yil4.roa (hash: nQL7RujWiI6DbmiRr/tEusZiL9ZmH5N96DaqJuKa6wA=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: Pyrzbf403izFVzLhb7ruipmcEAx0v5sBIuICIJcwOns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:2c:d9:e7:a3:d5:b4:6d:f9:2f:2d:41:21:16:28:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Apr 27 23:01:10 2026 GMT
Not After : Apr 28 23:01:10 2026 GMT
Subject: CN=296df8b7bfb53a5536ac9d198f340b4b1fa9b228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:89:24:cd:b4:2e:80:68:c2:d0:9e:fb:7e:9f:
40:f7:48:ba:84:63:a1:4d:9b:a9:66:9d:9c:74:8f:
9d:2c:b1:90:36:1b:50:fd:89:8f:f5:82:4a:81:3d:
34:97:9d:7f:cb:07:11:61:ab:c2:9c:35:9a:a3:eb:
f8:9d:31:8a:a9:b5:22:72:ea:7a:41:74:80:0e:0c:
ad:76:67:08:67:26:fc:7a:ec:ca:5d:e4:82:49:b0:
8c:7f:c2:c3:ee:8f:0d:7b:4e:e7:b5:9d:57:80:a5:
c3:4b:ae:f5:1b:3d:02:80:2a:93:83:91:b8:7d:cc:
dc:43:01:e0:49:95:b7:9a:be:ec:f7:28:9a:22:7f:
52:b5:e1:42:87:d0:cc:05:d5:a9:67:28:b9:2b:39:
6e:37:a0:57:2a:be:d1:e5:2b:8c:c6:83:b3:d1:c3:
cd:fe:1e:7a:f5:2d:63:87:29:9d:3b:f4:5c:33:d8:
e1:cb:ba:db:07:1d:ad:bd:65:73:65:01:f6:69:de:
89:6b:bf:36:f1:22:df:60:e4:66:5d:15:19:bb:48:
68:20:3f:4c:88:fe:fb:a4:85:9d:71:cd:0d:bd:49:
71:8a:bd:30:00:76:68:5d:2a:5b:8b:15:80:da:67:
ba:db:b8:a2:8c:bf:5e:53:c2:7e:5c:74:48:4b:4f:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6D:F8:B7:BF:B5:3A:55:36:AC:9D:19:8F:34:0B:4B:1F:A9:B2:28
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f4:d0:b3:42:37:2c:e2:e8:08:28:76:83:98:5a:9f:5f:fe:
e5:75:95:05:ad:99:e4:91:50:9c:71:2a:eb:d4:97:6e:ef:ea:
73:ef:a5:1b:b3:0b:3a:82:23:13:50:39:4c:c2:87:1c:1d:47:
83:74:6d:ae:37:be:dd:5a:2d:f0:ae:1d:fc:a2:9b:c0:27:7c:
71:a2:9f:eb:13:a4:7e:41:34:0c:6b:62:ce:5a:9a:5a:a8:75:
44:11:ef:bd:7f:9f:ec:a6:c6:a1:0b:ec:03:9c:ad:7e:b1:b6:
c7:91:09:8b:99:4b:74:3d:bd:ff:fd:f1:b2:47:91:05:49:24:
45:c8:69:37:33:1d:8e:1d:9f:db:77:4c:d9:8f:e2:11:d5:1d:
d7:d4:61:f5:c4:5f:ff:5f:0b:26:32:9a:53:f5:15:b2:98:12:
10:41:8f:bd:4e:c4:1f:e9:b0:3e:4b:47:c6:c7:8a:8f:35:6a:
d4:62:29:0f:60:f8:91:ca:8b:ad:a8:0b:c0:73:be:fc:ea:47:
cc:07:d5:31:21:74:2d:8c:f5:7e:63:23:ef:17:7d:f9:2a:f2:
9e:e2:bf:72:09:21:75:bf:0c:09:a4:22:f4:20:f1:db:60:71:
8b:0d:d8:e6:a1:be:28:a6:ba:21:44:7c:c7:3e:28:6f:90:2c:
2a:1a:d8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 01:43:49 2026 by rpki-client