Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: j+bNfjSWKsKCmCM3s3YFuD9K2pSv3/6spcTPdnLN2rQ=
Subject key identifier: 0F:FF:BE:4F:D7:A9:10:7A:80:F6:B8:C1:DF:1A:BD:AF:9A:16:05:49
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 019CE5911117C9D702D70A9C3165E306AC2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 05:00:15 +0000
Manifest this update: Fri 13 Mar 2026 05:00:15 +0000
Manifest next update: Sat 14 Mar 2026 05:00:15 +0000
Files and hashes: 1: 1-Dqswh2nOTAd-BLgdUyGvB-Z1kc.roa (hash: fQXXSs2gglVxP/y70N/IcdYPFQ/yUJztMiHuepjm5xo=)
2: n2KBANa3wBwM2_JjLezjaU7yil4.roa (hash: nQL7RujWiI6DbmiRr/tEusZiL9ZmH5N96DaqJuKa6wA=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: DhVyTRezG6Xt5+RHwAS+hCUhnd2AfaqQikSHJGSN1x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:11:17:c9:d7:02:d7:0a:9c:31:65:e3:06:ac:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Mar 13 05:00:15 2026 GMT
Not After : Mar 14 05:00:15 2026 GMT
Subject: CN=0fffbe4fd7a9107a80f6b8c1df1abdaf9a160549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:d0:4b:08:e3:ae:bf:08:f5:05:99:e8:71:
6f:14:d0:47:3e:3b:c9:38:34:40:c3:19:44:5b:01:
e3:a0:7f:51:67:f7:37:a9:b1:97:17:95:5a:34:4f:
34:17:e3:f1:77:1f:d4:a0:84:b9:70:e4:5a:c5:e0:
c8:f6:e2:52:df:f8:53:ff:d8:eb:2c:79:05:0e:fd:
37:b5:f1:60:17:dc:93:1c:f2:be:6b:8b:57:72:3b:
79:56:f1:88:b5:d3:03:34:ab:38:7e:16:e9:ba:4d:
ec:ec:26:88:80:c7:8f:2e:b5:1f:9f:16:7b:1a:b2:
34:67:86:83:f8:e7:3b:11:24:f2:34:aa:6b:fb:dc:
43:0e:a1:94:ce:4e:0c:24:7a:0d:0d:57:6d:bc:70:
08:53:47:2e:de:2d:88:fa:7a:da:39:28:fd:19:1f:
4d:ff:1a:b1:05:6d:e4:52:18:5a:5e:3e:7b:45:cf:
39:3a:8e:0b:b5:fe:29:69:c4:71:83:03:ae:44:e2:
f2:35:73:7f:87:29:6b:6b:d3:18:d1:3a:70:dd:44:
03:f5:f0:0b:70:69:92:6f:34:3a:24:6d:34:6a:4f:
80:d2:d5:91:c7:5b:4f:24:45:df:1a:78:af:cf:1a:
ed:a2:46:88:c4:36:6a:8b:70:c8:03:06:bd:95:cd:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FF:BE:4F:D7:A9:10:7A:80:F6:B8:C1:DF:1A:BD:AF:9A:16:05:49
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b3:b1:e7:ee:0b:0d:25:f0:ce:8c:76:c2:63:af:4c:81:8a:
33:2f:fc:da:b9:a2:01:3b:9b:43:31:e8:3d:b6:96:08:77:e0:
20:fd:42:3e:6a:35:63:57:1d:1e:83:68:e5:e9:8f:fa:54:64:
cf:0a:20:d7:5f:f0:bf:7c:70:ef:7d:5a:dc:90:b8:09:94:fb:
1d:6d:ba:0d:78:db:45:92:0c:d2:01:e7:bb:ae:11:28:36:18:
36:43:8f:6e:76:da:2e:48:27:61:c3:f9:3c:96:50:a7:ff:1a:
b3:7e:53:0a:18:ce:78:d3:e3:7b:04:fe:a1:ad:c8:a9:da:ae:
41:49:04:f0:6e:e9:83:59:86:7f:82:80:76:35:d8:71:83:4f:
55:2e:94:43:e9:b6:f6:07:b4:40:af:5b:bd:b1:0a:44:bc:c8:
0a:7d:96:4e:89:c7:69:00:55:4f:dc:6f:dc:98:17:75:53:2e:
2b:fd:1f:a3:15:d6:d7:1f:ff:21:96:32:97:9f:4f:c5:6a:f1:
79:c2:01:4d:55:86:69:2e:36:00:4d:6e:9d:fd:db:66:cf:5b:
cf:a9:c1:56:61:e3:16:4a:4a:66:09:d2:ae:9e:d8:fa:ea:7f:
a9:df:1b:43:40:f5:30:3c:11:49:05:29:ec:65:b2:b6:aa:d5:
9a:95:2f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:36:13 2026 by rpki-client