Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: KIsRV2l+ldV9vryxhktqg6gS+EFlYNOjQidLVRKDuy8=
Subject key identifier: 2E:D0:AA:91:2D:AE:0B:C2:7A:67:A5:58:B8:38:83:46:4A:45:3F:8D
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 01A0EAE522CFF7783ABA0D7125FF767A5E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 1A7C
Signing time: Tue 29 Sep 2026 02:01:20 +0000
Manifest this update: Tue 29 Sep 2026 02:01:20 +0000
Manifest next update: Wed 30 Sep 2026 02:01:20 +0000
Files and hashes: 1: 1-Dqswh2nOTAd-BLgdUyGvB-Z1kc.roa (hash: fQXXSs2gglVxP/y70N/IcdYPFQ/yUJztMiHuepjm5xo=)
2: n2KBANa3wBwM2_JjLezjaU7yil4.roa (hash: nQL7RujWiI6DbmiRr/tEusZiL9ZmH5N96DaqJuKa6wA=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: uIdUPhq1lrnflBfglfDDLCRDcymMIQGWm5j5hdL5cUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:e5:22:cf:f7:78:3a:ba:0d:71:25:ff:76:7a:5e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Sep 29 02:01:20 2026 GMT
Not After : Sep 30 02:01:20 2026 GMT
Subject: CN=2ed0aa912dae0bc27a67a558b83883464a453f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:24:1a:65:19:e5:95:1e:a9:83:65:15:bb:03:
42:c7:52:70:1c:ce:48:6f:28:28:3f:6e:b9:4f:69:
77:1b:ff:79:a4:45:85:91:7e:e6:4e:0e:45:ee:ec:
13:5b:9b:fb:4a:41:69:5a:77:e0:5b:b8:b4:bc:e9:
20:e9:14:5e:44:2e:5d:e9:64:b9:bf:c8:b9:37:5f:
a4:72:df:07:dd:ea:fb:c6:00:4c:08:fb:a6:b6:58:
98:28:97:07:51:39:3b:8d:44:60:28:43:c2:c4:a9:
b9:a6:e1:9c:48:9f:fc:b4:a9:ef:e1:81:76:cf:63:
0a:eb:d9:53:a8:0e:ab:fd:ac:52:a0:41:df:bc:b0:
df:33:47:b7:aa:d3:1c:1b:98:d0:6c:b9:c6:0e:92:
cc:e7:e9:92:4a:03:80:f8:a2:ec:15:b6:88:90:13:
b8:69:84:7f:2a:18:81:60:99:74:fc:fa:95:b2:a8:
08:43:75:00:16:9d:d5:11:c1:9b:4b:cb:e5:9a:92:
a4:39:db:87:44:57:c0:87:d9:a3:4c:42:f7:c7:43:
93:49:a0:be:ff:8c:37:8b:28:02:0a:4e:57:61:f1:
79:64:1f:58:2b:70:9d:de:48:45:c2:f4:c0:57:2b:
61:f8:79:2e:e2:11:12:0a:11:e0:37:88:36:f1:67:
2f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D0:AA:91:2D:AE:0B:C2:7A:67:A5:58:B8:38:83:46:4A:45:3F:8D
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:12:83:ef:d7:04:7e:99:6e:03:b0:c4:ce:c0:96:82:12:21:
56:05:1b:56:8f:fa:5f:1e:55:81:61:13:70:a5:f3:a0:40:3c:
70:03:5e:54:ca:1b:23:56:d0:3f:31:ef:42:b3:8c:46:77:50:
b3:c6:0e:ca:32:e1:95:b9:47:8b:a0:de:c5:f6:91:9d:7a:83:
68:79:7b:6b:02:f5:b3:e7:b9:20:05:25:1d:ba:be:2e:9f:73:
fc:42:c9:30:04:4e:bc:82:ca:49:bb:78:5d:cb:e7:b2:5d:02:
06:48:c2:e6:47:ab:d1:de:11:b3:c8:9c:02:1f:ba:37:45:ef:
56:45:87:47:3b:b6:5f:31:42:bc:0c:67:f4:e2:7b:e4:ab:e9:
b1:bc:93:a8:31:8f:c3:e4:7f:78:2c:62:21:a3:75:a7:b3:48:
2b:a5:19:cd:a2:b8:c2:ee:0a:23:d5:72:8c:48:ab:53:08:48:
45:e0:63:08:6f:d8:00:75:43:e6:cf:5c:31:e5:3d:55:d4:2a:
98:f5:37:fa:3a:40:be:f0:e3:27:e3:76:3f:c4:26:1b:72:71:
f5:c5:1d:60:50:fb:f1:1d:ec:39:3a:c0:38:16:3e:b2:88:ac:
22:de:a5:a3:50:ac:80:c2:8d:a0:29:07:90:d3:50:09:ba:84:
59:da:33:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:53:43 2026 by rpki-client