Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: lzEpzDODQq7hSEZ9hK2PRwTqVnge+GF71+c0X0sEZoI=
Subject key identifier: 0B:8A:87:7D:AC:AB:B4:9E:DD:23:61:3A:40:B6:A3:F2:C3:E6:0F:8D
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 019D992B0BB754A0E653FF59243FE50A26E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 02:00:28 +0000
Manifest this update: Fri 17 Apr 2026 02:00:28 +0000
Manifest next update: Sat 18 Apr 2026 02:00:28 +0000
Files and hashes: 1: 1-Dqswh2nOTAd-BLgdUyGvB-Z1kc.roa (hash: fQXXSs2gglVxP/y70N/IcdYPFQ/yUJztMiHuepjm5xo=)
2: n2KBANa3wBwM2_JjLezjaU7yil4.roa (hash: nQL7RujWiI6DbmiRr/tEusZiL9ZmH5N96DaqJuKa6wA=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: Nc0CfN6T2ovuvyvpQdK8ngko2tG8lT6Yvle5CgmxUu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:0b:b7:54:a0:e6:53:ff:59:24:3f:e5:0a:26:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Apr 17 02:00:28 2026 GMT
Not After : Apr 18 02:00:28 2026 GMT
Subject: CN=0b8a877dacabb49edd23613a40b6a3f2c3e60f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:f4:ba:5a:c9:e4:e3:9b:2f:7c:e8:0b:b1:
82:31:df:33:af:7f:63:9e:2a:c3:4a:78:6a:b9:77:
03:6c:14:6e:26:b6:9d:32:a0:4f:9b:f8:13:df:89:
d6:9a:c2:22:a1:73:f1:8b:30:ed:6d:16:ec:29:4c:
30:b4:66:80:4e:69:e9:49:ab:9a:e2:72:66:0d:7e:
4b:6f:27:70:d4:5f:e5:7e:12:08:44:c9:d2:e4:b3:
5e:33:59:b8:64:9e:f9:07:98:5d:fb:8f:05:fa:eb:
6f:e2:ea:22:eb:59:8b:ea:06:db:4c:db:30:5d:b4:
b1:29:d3:84:e6:45:a2:61:0e:79:a8:ef:c9:1e:08:
f1:c8:83:10:20:a5:2d:e8:4d:2a:cf:81:dc:c9:b7:
15:e9:0b:30:3d:0c:3e:bc:c2:a8:33:05:ab:67:cb:
fd:ac:6c:c8:88:39:2b:68:78:ae:ae:df:a1:9e:23:
f8:0f:9b:3a:a8:ee:1b:e1:48:53:88:a6:e9:5d:b3:
2e:58:3a:2d:86:af:c4:5c:e1:0e:42:49:88:ae:f9:
15:ca:d3:92:35:6b:a2:44:73:40:f8:b9:b7:f6:3d:
7c:7e:72:e2:73:17:23:1e:33:6a:3a:f2:cb:f4:e7:
96:80:2a:0f:76:fc:ff:a5:d8:26:23:39:0b:e4:01:
a3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8A:87:7D:AC:AB:B4:9E:DD:23:61:3A:40:B6:A3:F2:C3:E6:0F:8D
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f8:18:f9:42:80:3d:e9:b6:7a:f2:86:2d:3b:f8:d1:b4:fc:
8b:07:74:be:d4:ca:8e:f2:e0:de:0e:0e:d0:dd:e1:09:b5:32:
28:1f:67:83:3a:6b:ab:ab:eb:0d:8a:c6:44:e0:69:99:b1:81:
47:1d:9f:94:28:0e:74:98:31:af:cb:8e:8f:d4:ed:5e:78:08:
7a:b2:88:5a:dc:27:37:b9:3a:07:ea:96:47:3d:28:6c:c0:1a:
16:39:a7:0a:d7:55:81:0a:a8:a4:18:15:9c:89:49:a7:53:45:
17:86:c5:c2:e1:86:1f:b3:47:94:74:9a:b4:f6:df:59:a8:87:
ac:f9:bd:ab:f9:57:4f:29:be:1c:3e:c9:29:b4:56:17:b7:b6:
f6:6c:ec:28:d6:a9:bd:da:bd:1b:03:52:b1:30:5a:48:05:a8:
54:63:2e:4f:fa:01:1c:7f:59:3a:70:05:fc:3f:63:8d:9e:36:
57:11:63:11:a7:2a:3d:3f:4f:c9:bc:eb:66:eb:01:69:63:cd:
a7:f7:63:0a:73:ed:ca:90:73:6e:3b:64:ee:d0:d9:14:0c:41:
dd:1a:30:2d:73:aa:bd:96:04:14:f7:af:52:16:fc:85:6c:51:
97:80:36:59:30:db:79:e9:a0:cd:62:0e:74:a9:47:30:42:33:
e2:b7:e2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:42 2026 by rpki-client