Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: tRPtXMSRAtk8hF45ZYjwIa8B6TFPWp/0S7NYx5rYMgo=
Subject key identifier: 4B:0F:50:5F:6B:01:F2:07:ED:43:81:03:D2:A1:39:62:11:9F:62:CA
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 01A16C4871533995159C409FBF7B5494E0E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 1ABF
Signing time: Sat 24 Oct 2026 05:00:49 +0000
Manifest this update: Sat 24 Oct 2026 05:00:49 +0000
Manifest next update: Sun 25 Oct 2026 05:00:49 +0000
Files and hashes: 1: 1-Dqswh2nOTAd-BLgdUyGvB-Z1kc.roa (hash: fQXXSs2gglVxP/y70N/IcdYPFQ/yUJztMiHuepjm5xo=)
2: n2KBANa3wBwM2_JjLezjaU7yil4.roa (hash: nQL7RujWiI6DbmiRr/tEusZiL9ZmH5N96DaqJuKa6wA=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: xFGquuqZ/ttLo/p0rREKa89pBpK4DKQVLK+ZNVl5Re0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:48:71:53:39:95:15:9c:40:9f:bf:7b:54:94:e0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Oct 24 05:00:49 2026 GMT
Not After : Oct 25 05:00:49 2026 GMT
Subject: CN=4b0f505f6b01f207ed438103d2a13962119f62ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:21:7c:e0:8c:55:d0:65:9e:5f:0b:ba:4a:
36:9b:75:6b:6a:03:79:72:c3:56:bd:2d:71:b4:06:
b2:e7:cc:5d:20:07:75:d9:06:09:4c:66:d8:3c:a8:
27:9d:4a:f4:d0:c9:0e:2e:94:ef:88:fa:50:8b:6c:
c3:b4:95:d0:b4:1b:b2:b4:31:59:6c:4b:57:8e:e4:
c4:da:92:9c:3a:77:20:02:13:3d:5c:d2:2f:fc:a5:
24:26:ec:82:14:18:34:2e:cf:68:98:fa:cc:4d:43:
ef:ca:00:87:d0:65:24:d8:21:ec:60:56:e1:ee:01:
d4:16:16:c3:dd:66:9f:fd:2e:6b:0b:76:38:53:77:
2b:66:10:11:97:04:f5:90:a7:dd:4f:7a:35:5b:ae:
d2:24:78:0d:71:f1:5a:00:75:87:a0:04:14:46:3a:
d4:4e:aa:40:4b:f1:6d:3a:e7:a0:c6:2d:17:a7:84:
dd:0d:27:1f:ac:69:17:fd:93:5f:16:59:05:e9:0a:
79:f0:17:2c:43:c3:0d:0f:02:3b:46:68:71:ab:2c:
6a:6f:5f:12:9f:a2:eb:e6:3c:9a:86:a6:13:8b:7f:
81:e8:dd:8c:d3:a5:23:ec:d5:b1:47:2c:67:eb:6b:
c6:f9:46:60:61:b7:2d:53:8b:6a:31:1c:81:bf:3b:
e1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0F:50:5F:6B:01:F2:07:ED:43:81:03:D2:A1:39:62:11:9F:62:CA
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:9a:90:82:36:90:3e:0f:6a:b3:2b:a7:57:6b:86:b0:01:69:
1d:fe:21:5d:f5:2d:af:63:ca:a5:73:8e:5b:37:22:c0:e2:1e:
a3:d8:1b:4d:53:33:4a:6e:ad:62:d5:d2:ba:c6:21:0d:b3:db:
39:b4:9a:5a:82:b5:41:c6:bb:64:10:5f:96:62:7f:37:ab:b3:
e9:ad:ea:b4:ec:52:84:fc:e8:67:e0:bb:2e:db:95:94:c4:60:
c8:12:80:a4:99:fa:61:97:0f:16:98:22:40:0b:ed:9a:59:71:
6f:b2:11:7b:c5:b0:91:cd:50:bb:4e:5c:87:37:51:32:e0:47:
0a:9c:32:2b:1c:89:8f:24:16:90:be:5b:94:60:3e:d9:5d:4f:
57:bf:2f:67:a6:94:a0:92:13:2c:de:d5:0c:60:c2:52:23:17:
04:44:66:03:07:dd:98:ce:1c:a4:dd:c8:80:70:10:b4:f8:55:
e8:06:bd:d4:72:40:e9:9d:4c:2d:9d:70:8b:72:6b:8a:55:13:
8c:2c:3a:32:8d:8e:94:84:71:fd:d4:87:57:8f:a1:6f:7a:bb:
13:bd:d9:ed:71:88:ed:87:98:ef:a3:8e:02:91:15:71:fd:ce:
e0:18:50:b9:6a:5b:ca:6f:68:83:76:06:bc:6b:d7:05:54:fe:
a7:84:c8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:53:54 2026 by rpki-client