Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: DU+r220m5FRIjEzF1SuRl7Ym1D/lLgwP5csPQk7dRY8=
Subject key identifier: 13:35:2A:D0:C6:97:50:4A:16:31:5D:7C:9E:A9:90:C9:E0:B9:AF:63
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 019F9324486ACB752CDC9258AC8A734CB740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 08:00:56 +0000
Manifest this update: Fri 24 Jul 2026 08:00:56 +0000
Manifest next update: Sat 25 Jul 2026 08:00:56 +0000
Files and hashes: 1: 1-Dqswh2nOTAd-BLgdUyGvB-Z1kc.roa (hash: fQXXSs2gglVxP/y70N/IcdYPFQ/yUJztMiHuepjm5xo=)
2: n2KBANa3wBwM2_JjLezjaU7yil4.roa (hash: nQL7RujWiI6DbmiRr/tEusZiL9ZmH5N96DaqJuKa6wA=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: yK7NwzOEpAG1qN/tiDQaFDPpzYTRM3MDWP+8UXN5jC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:48:6a:cb:75:2c:dc:92:58:ac:8a:73:4c:b7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Jul 24 08:00:56 2026 GMT
Not After : Jul 25 08:00:56 2026 GMT
Subject: CN=13352ad0c697504a16315d7c9ea990c9e0b9af63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:c6:63:7b:5f:ba:b3:f9:9d:fe:12:e2:45:
11:43:5b:ea:d1:ca:38:13:c4:87:9c:6c:96:a5:44:
80:df:63:c5:21:1d:25:ff:fe:f6:4f:dc:ee:50:91:
0f:2e:54:19:a8:be:f8:09:34:ed:34:bb:e2:0a:7d:
0a:f8:03:98:db:9e:50:50:b9:d2:ac:e1:cd:56:4c:
d9:fe:df:69:8b:59:15:1b:71:ef:93:cc:5d:56:0b:
5b:26:33:00:4a:14:3c:35:fb:1e:70:37:be:dd:be:
d9:b5:b0:b4:58:64:13:ae:cd:3f:68:dc:ec:bb:2e:
4e:b1:a3:de:a6:e5:71:39:f3:a1:5c:3c:d4:b8:b1:
30:14:07:55:6e:af:d6:46:85:10:bb:fc:98:f6:b7:
33:1b:f1:bb:67:bf:89:54:20:e2:a0:0c:b3:cf:d1:
9c:84:7e:70:6d:13:3e:3f:71:8a:e2:76:70:5d:ef:
25:f8:61:2c:40:83:2f:74:ac:88:8e:37:24:cf:b4:
2f:6d:50:90:e0:b7:31:8d:fa:35:93:00:25:b4:d6:
dc:a6:19:91:3d:b9:f8:f9:e9:ed:2c:ae:2e:36:a4:
65:fb:17:7b:7d:65:ca:1a:26:dc:c8:55:8f:24:a0:
78:57:88:f6:af:54:5a:de:1b:12:fe:e1:66:4f:11:
44:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:35:2A:D0:C6:97:50:4A:16:31:5D:7C:9E:A9:90:C9:E0:B9:AF:63
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f8:74:39:08:42:81:eb:49:38:1a:b8:29:ec:f4:da:95:44:
30:d2:da:bf:ff:c3:37:3c:d6:64:82:d4:b0:37:e1:41:b0:9c:
e3:51:97:56:81:2d:2e:b5:9f:f9:34:59:b9:c2:7a:af:b0:14:
49:d7:a5:77:2b:c4:82:ab:6a:5c:19:7e:86:d8:d6:11:4d:c4:
79:b7:43:74:08:6f:2c:79:d2:ca:d4:a0:82:87:4b:69:c9:93:
26:93:73:07:b4:fd:eb:ea:55:67:c1:36:66:a4:db:ee:f8:f9:
73:72:b9:a5:de:3e:bf:6e:82:8a:cd:8c:94:43:27:b0:0f:44:
c2:f4:81:32:10:7b:4a:21:3f:c9:11:00:8a:2f:70:c9:af:06:
14:8d:ab:5c:12:08:4f:a4:ed:19:e0:bd:70:0f:bc:40:14:1c:
2d:d2:f8:da:88:b0:20:cf:46:b8:2f:bf:f7:f5:c2:d1:13:68:
2f:18:32:b5:af:a6:91:22:d9:f2:8b:0c:a6:50:d6:2d:11:aa:
1d:66:d6:f3:72:13:74:c3:36:36:a5:03:61:41:9b:ec:13:af:
50:b7:7a:ef:cb:7c:7b:e4:91:f1:43:a5:6e:82:4f:0d:b2:5c:
6a:f9:73:5c:09:a9:c0:b5:12:0a:75:c5:cc:97:3a:bd:85:9a:
66:56:3e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:03:56 2026 by rpki-client