Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: haK2amfBCQZjjhvvL2H1nH0zxycx62Gka7B+5FXEfI4=
Subject key identifier: FE:67:91:8D:FC:0E:A3:71:EF:0B:7D:E5:6A:20:A5:ED:39:B6:3E:71
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 019FAC3F3B172709C2FF166D0DA51740DDC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 05:00:52 +0000
Manifest this update: Wed 29 Jul 2026 05:00:52 +0000
Manifest next update: Thu 30 Jul 2026 05:00:52 +0000
Files and hashes: 1: 1-Dqswh2nOTAd-BLgdUyGvB-Z1kc.roa (hash: fQXXSs2gglVxP/y70N/IcdYPFQ/yUJztMiHuepjm5xo=)
2: n2KBANa3wBwM2_JjLezjaU7yil4.roa (hash: nQL7RujWiI6DbmiRr/tEusZiL9ZmH5N96DaqJuKa6wA=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: Jk8CsjC6lm8LX3OfrbJKjNsDBy9uEtZqu9GfSb0s9bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:3b:17:27:09:c2:ff:16:6d:0d:a5:17:40:dd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Jul 29 05:00:52 2026 GMT
Not After : Jul 30 05:00:52 2026 GMT
Subject: CN=fe67918dfc0ea371ef0b7de56a20a5ed39b63e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:52:0c:4b:dd:8b:cd:20:74:88:30:61:c2:
12:1f:b5:0a:84:4f:f2:11:8d:6b:56:cd:e1:f7:9b:
6c:bc:29:47:66:8f:27:79:06:2c:8c:7d:92:88:48:
5d:c7:66:13:65:8d:a8:02:e8:f6:84:22:ed:77:f2:
0f:c8:90:0f:9a:b7:35:42:f9:35:c7:63:f2:1f:55:
71:ef:44:4b:4b:4d:52:fd:75:c9:be:4b:40:1b:87:
c8:4a:7f:b5:22:19:59:37:f4:b7:12:ce:82:0e:d6:
a2:20:71:16:71:b0:07:e8:d6:fb:ac:e7:45:01:b1:
79:1c:0e:6f:2a:f4:ff:63:f8:1d:70:25:16:65:e3:
01:cb:58:94:ce:af:5d:a2:9f:28:b9:0a:a5:55:76:
e3:16:7c:e1:8b:db:7f:2e:73:31:61:c4:34:a1:7b:
98:0a:b8:f2:1e:dd:65:74:7b:f5:13:66:b5:11:56:
5f:2a:2f:e7:25:e3:d5:de:65:41:a0:bb:79:ae:23:
17:22:1f:67:a7:ad:46:14:a5:16:9b:e6:6f:ba:b4:
56:5d:eb:17:8a:0c:54:8e:6c:22:29:0b:5a:44:64:
1b:71:3b:63:3f:ef:d7:46:d8:d9:d6:2a:a7:d8:ee:
4d:7e:fa:74:ea:ea:e6:34:76:62:2d:ba:c9:34:ef:
d2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:67:91:8D:FC:0E:A3:71:EF:0B:7D:E5:6A:20:A5:ED:39:B6:3E:71
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:42:55:7b:27:29:83:d5:77:1c:66:ba:30:58:66:35:91:d1:
d6:71:0f:bd:75:1a:c3:51:df:89:79:39:8c:59:70:b2:87:10:
4a:22:fc:85:9f:00:5b:94:92:e4:cb:ed:f5:05:e1:94:8e:11:
9b:a8:84:94:a9:8b:c4:17:ba:1d:f8:18:02:8f:88:2b:e5:0b:
11:6f:84:e2:de:b1:52:b6:f8:22:a8:57:d1:56:28:50:24:87:
c6:62:39:a0:72:32:d2:cf:08:f5:60:b1:78:dd:91:ef:49:28:
c7:fb:dd:02:2f:5a:51:5c:7a:bf:c1:30:75:e4:bc:95:12:10:
d2:fc:01:63:cf:3d:d2:b5:ce:bd:61:11:25:60:cb:bb:56:47:
11:c3:02:af:5b:39:4e:47:95:d4:cf:6a:c1:e4:cb:b3:d9:c7:
35:d9:fb:44:e8:85:78:c7:2a:9c:81:fb:0c:9f:f4:ce:e7:f5:
b8:1d:32:ee:bc:01:53:8e:ae:d4:6c:d5:d6:0f:e0:ec:bb:69:
dd:d6:27:bf:a2:29:6d:8a:80:df:e2:e8:47:c3:f2:4c:ae:b3:
8d:38:e3:ab:02:44:c0:7f:60:7a:c6:fc:03:cf:f1:b5:4e:d4:
11:91:fc:30:28:af:86:61:79:2e:88:c8:1b:8c:fe:c5:22:a7:
bf:88:c2:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPzsXJwnC/xZtDaUXQN3FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNzgxMThkYjA1ZTRjOTNlNzZmYTFmMWM5NTY3OWM3MDVi
ZWIyMDgwHhcNMjYwNzI5MDUwMDUyWhcNMjYwNzMwMDUwMDUyWjAzMTEwLwYDVQQD
EyhmZTY3OTE4ZGZjMGVhMzcxZWYwYjdkZTU2YTIwYTVlZDM5YjYzZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTFSDEvdi80gdIgwYcISH7UKhE/y
EY1rVs3h95tsvClHZo8neQYsjH2SiEhdx2YTZY2oAuj2hCLtd/IPyJAPmrc1Qvk1
x2PyH1Vx70RLS01S/XXJvktAG4fISn+1IhlZN/S3Es6CDtaiIHEWcbAH6Nb7rOdF
AbF5HA5vKvT/Y/gdcCUWZeMBy1iUzq9dop8ouQqlVXbjFnzhi9t/LnMxYcQ0oXuY
CrjyHt1ldHv1E2a1EVZfKi/nJePV3mVBoLt5riMXIh9np61GFKUWm+ZvurRWXesX
igxUjmwiKQtaRGQbcTtjP+/XRtjZ1iqn2O5Nfvp06urmNHZiLbrJNO/S7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5nkY38DqNx7wt95Wogpe05tj5xMB8GA1UdIwQY
MBaAFKN4EY2wXkyT52+h8clWeccFvrIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wZjM1NWEtM2EwYS00NmVjLWIwN2Yt
ODY2NjA3YWYyZmE1LzEvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8wZjM1NWEtM2EwYS00NmVjLWIwN2YtODY2NjA3YWYyZmE1
LzEvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyUJVeycp
g9V3HGa6MFhmNZHR1nEPvXUaw1HfiXk5jFlwsocQSiL8hZ8AW5SS5Mvt9QXhlI4R
m6iElKmLxBe6HfgYAo+IK+ULEW+E4t6xUrb4IqhX0VYoUCSHxmI5oHIy0s8I9WCx
eN2R70kox/vdAi9aUVx6v8EwdeS8lRIQ0vwBY8890rXOvWERJWDLu1ZHEcMCr1s5
TkeV1M9qweTLs9nHNdn7ROiFeMcqnIH7DJ/0zuf1uB0y7rwBU46u1GzV1g/g7Ltp
3dYnv6IpbYqA3+LoR8PyTK6zjTjjqwJEwH9gesb8A8/xtU7UEZH8MCivhmF5LojI
G4z+xSKnv4jCLg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:51:17 2026 by rpki-client