Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: RqEjzmzl9/BCI0s3rw2QzBys2b/l6X+LFJvSH/9YV74=
Subject key identifier: E5:90:32:22:08:E1:E5:87:FA:FC:35:D2:ED:D9:F1:C4:CB:BD:A6:11
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 019EC292DD2F22BAE7CF05DDF418C9D57DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 20:01:05 +0000
Manifest this update: Sat 13 Jun 2026 20:01:05 +0000
Manifest next update: Sun 14 Jun 2026 20:01:05 +0000
Files and hashes: 1: 1-Dqswh2nOTAd-BLgdUyGvB-Z1kc.roa (hash: fQXXSs2gglVxP/y70N/IcdYPFQ/yUJztMiHuepjm5xo=)
2: n2KBANa3wBwM2_JjLezjaU7yil4.roa (hash: nQL7RujWiI6DbmiRr/tEusZiL9ZmH5N96DaqJuKa6wA=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: PL1UtjXhenRKVNwh3U9YIMP55W6Nt/n623+8YGdMKQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:dd:2f:22:ba:e7:cf:05:dd:f4:18:c9:d5:7d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Jun 13 20:01:05 2026 GMT
Not After : Jun 14 20:01:05 2026 GMT
Subject: CN=e590322208e1e587fafc35d2edd9f1c4cbbda611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:02:d5:5e:cf:b7:97:82:66:64:60:f4:c9:
25:1f:10:1f:63:e7:f8:3f:3f:25:00:ef:9c:56:58:
b4:dd:0e:57:19:88:c3:05:5f:e9:57:ac:fe:4b:a4:
b8:9b:ab:17:a8:f5:7d:18:5d:c2:ee:77:6e:c8:8b:
92:d2:96:d5:a4:f4:ed:4f:ea:53:65:16:8f:f5:fa:
e9:42:ca:5d:ff:8c:93:95:3d:31:af:4e:fa:d0:b6:
40:6e:bf:83:bc:a3:db:ac:1a:9c:9f:81:ea:b7:0f:
c5:49:84:6a:67:2b:21:1e:c2:3b:58:8b:9b:89:ce:
a2:db:a4:be:d0:36:72:84:c0:20:13:db:cf:39:59:
12:f9:fb:a4:4b:6f:4b:ca:1e:e8:fd:94:d1:8e:db:
73:c8:61:5e:ea:d2:74:80:57:5b:70:5c:46:e0:41:
28:c3:4b:3a:b7:e3:9f:95:af:6f:04:bb:90:66:df:
a2:cc:14:19:64:27:5a:a0:a3:b2:bd:65:79:8b:cf:
2d:70:93:1d:fc:67:2a:23:ea:be:5f:01:f1:e5:8b:
d3:f9:bf:21:44:6e:3a:92:e4:09:3b:ee:38:1e:9f:
a6:b9:1b:7b:4d:2e:db:0b:d5:f6:31:51:48:f2:f5:
f2:f7:71:58:e9:c5:f2:1b:24:c5:e2:72:1f:9c:e7:
3b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:90:32:22:08:E1:E5:87:FA:FC:35:D2:ED:D9:F1:C4:CB:BD:A6:11
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b1:57:c4:2e:b3:7c:cc:e8:b1:ef:4e:5c:b2:3e:e4:6d:3a:
a0:e0:60:2d:a1:5c:7c:4b:8f:b6:38:b1:b5:20:90:58:e3:55:
7e:17:a1:c8:52:0b:1c:59:f0:83:ae:35:89:ab:ed:f6:52:8e:
ce:94:57:c4:66:34:69:d0:aa:e4:43:f9:3a:73:be:a7:13:81:
f7:cb:0c:20:d2:23:82:8c:7e:03:04:66:38:59:50:8e:db:e5:
79:40:84:f4:a2:02:9e:b1:23:60:04:82:11:65:6a:a5:3c:25:
de:64:e5:1a:4e:46:02:80:8a:39:3c:da:4e:1a:10:52:5c:5b:
ea:16:25:61:5c:41:75:26:34:95:62:e6:e2:55:0d:7d:47:01:
56:a3:b8:d4:d1:df:e1:b4:e1:fa:32:77:d4:ad:ca:62:44:8b:
aa:ca:b0:d9:47:f6:a6:3a:8e:46:15:1c:ec:24:ff:bf:f6:4a:
be:32:7f:3a:09:71:40:b2:d3:cb:39:50:55:75:f0:0a:2a:12:
7c:cf:6f:3a:24:23:01:dc:5d:e1:7d:27:56:ab:19:32:f8:dd:
15:b9:08:ed:98:7c:b1:12:6e:e0:6d:19:f6:b5:0d:cb:56:98:
b1:2f:b6:4d:4b:e5:7d:e4:e2:4d:9e:f9:62:66:20:39:83:47:
f8:21:fe:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:02:29 2026 by rpki-client