Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: 4IzkdNlWojhBTYruNcXh/SNc0FNmZ65GDdW5uBwfdpE=
Subject key identifier: FE:4D:25:56:4F:55:5F:6F:B0:AC:13:35:AD:35:BE:C0:30:39:6C:41
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 019D273ABF7BEBE463EE69DA2F63CC0DAA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 23:00:54 +0000
Manifest this update: Wed 25 Mar 2026 23:00:54 +0000
Manifest next update: Thu 26 Mar 2026 23:00:54 +0000
Files and hashes: 1: 1-Dqswh2nOTAd-BLgdUyGvB-Z1kc.roa (hash: fQXXSs2gglVxP/y70N/IcdYPFQ/yUJztMiHuepjm5xo=)
2: n2KBANa3wBwM2_JjLezjaU7yil4.roa (hash: nQL7RujWiI6DbmiRr/tEusZiL9ZmH5N96DaqJuKa6wA=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: B/h/x8UXXYCWAq+pFyKne3eLtJ96ufSGqdqPz1uV0Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:bf:7b:eb:e4:63:ee:69:da:2f:63:cc:0d:aa:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Mar 25 23:00:54 2026 GMT
Not After : Mar 26 23:00:54 2026 GMT
Subject: CN=fe4d25564f555f6fb0ac1335ad35bec030396c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:c2:23:78:4e:52:b6:49:b9:15:e2:df:70:
37:b7:96:9c:2a:a5:8c:fa:23:c4:23:b1:6c:8f:bc:
5b:93:32:08:8d:84:5e:8b:a7:93:35:bf:6d:bc:86:
51:5b:fe:2c:f8:b3:cf:09:f9:ba:c0:ff:04:b2:d3:
c5:4c:83:d5:92:5a:cd:ac:0c:d0:8c:c3:67:af:f1:
28:b2:e9:0e:40:15:09:c9:e1:2d:1e:a9:74:12:0a:
bb:90:8a:af:3c:4d:20:4f:d2:b7:a0:53:7f:7c:a5:
2d:72:ac:a8:1b:10:8c:ca:97:c6:b1:fe:27:1a:0c:
04:4d:d3:9f:a9:fd:6f:36:4b:83:cc:c0:e3:2e:15:
87:3b:15:67:f1:ad:27:01:3f:42:fe:64:40:5d:e1:
12:27:02:9d:00:ae:a1:6c:b8:40:1a:88:51:bf:ef:
88:5e:9a:24:1e:1e:bb:c8:68:67:c4:dc:c6:a1:9b:
3a:bd:fc:48:56:61:7f:af:e1:53:5b:38:d1:d8:0b:
39:ab:bc:22:a8:3a:96:89:68:3c:8c:e7:6d:b2:e6:
32:50:98:81:22:48:45:18:c3:21:d0:46:ed:03:cc:
49:02:19:8f:51:a6:09:a9:f5:35:0a:24:97:84:98:
b1:af:75:40:1f:40:59:bd:64:4b:81:03:07:00:a4:
95:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4D:25:56:4F:55:5F:6F:B0:AC:13:35:AD:35:BE:C0:30:39:6C:41
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b9:ba:48:b0:16:35:6e:39:c4:2d:76:64:dd:43:f2:11:97:
c2:e0:0f:ae:bd:d3:74:33:db:94:d7:10:2f:d6:59:ac:55:ab:
46:b4:3c:e2:56:ed:b9:af:d0:d4:f4:ab:61:45:0f:7a:cc:ea:
55:9b:28:6a:9d:5b:6f:38:22:b2:ca:11:26:e6:14:b7:44:7b:
52:17:54:b2:9a:67:8c:d1:96:72:27:f3:0f:2c:a9:1f:b2:d7:
77:cd:8d:ca:27:0a:d0:e2:6e:ce:89:fd:9a:43:a3:8a:fa:b3:
65:4f:6e:39:95:ee:7d:a0:bc:ce:d1:aa:e5:5f:72:d5:bb:61:
58:a1:33:61:16:b4:f0:ec:fb:d8:05:03:7d:f3:17:8a:20:96:
c9:75:ef:fd:16:5b:0b:52:ba:11:0d:83:e2:51:fb:38:31:6f:
ce:05:36:a2:f4:1c:a2:8e:c3:20:be:d3:b3:ad:f2:77:ad:53:
ff:9a:60:4e:50:c9:00:6f:70:58:3c:7e:d8:89:d6:f3:11:00:
47:82:2f:05:9f:b8:36:71:3e:00:ab:0c:3a:8d:d0:52:83:4d:
ec:4e:7a:b9:41:1c:7b:ce:c1:75:cb:79:c3:9a:88:50:8d:d2:
42:6e:70:95:01:c6:c1:57:b2:3d:d5:4a:eb:48:e0:fa:45:db:
05:65:39:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:34 2026 by rpki-client