Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: zQthOWJvmDtASYwHfZxZbSdoNxuGheri+WGO9w5ClKY=
Subject key identifier: DB:DF:A3:5C:4E:84:4F:26:B6:E7:4A:47:A4:A6:68:F8:D8:0C:F6:6C
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 019E1E6CC098379AB8AB46DC20CA397C3E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 23:01:44 +0000
Manifest this update: Tue 12 May 2026 23:01:44 +0000
Manifest next update: Wed 13 May 2026 23:01:44 +0000
Files and hashes: 1: 1-Dqswh2nOTAd-BLgdUyGvB-Z1kc.roa (hash: fQXXSs2gglVxP/y70N/IcdYPFQ/yUJztMiHuepjm5xo=)
2: n2KBANa3wBwM2_JjLezjaU7yil4.roa (hash: nQL7RujWiI6DbmiRr/tEusZiL9ZmH5N96DaqJuKa6wA=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: R/FXvr9F3Qs8QFI2CA9IhxoN+ekBXiNNP9Z/4ihSBJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:c0:98:37:9a:b8:ab:46:dc:20:ca:39:7c:3e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: May 12 23:01:44 2026 GMT
Not After : May 13 23:01:44 2026 GMT
Subject: CN=dbdfa35c4e844f26b6e74a47a4a668f8d80cf66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:12:9d:41:ba:cd:82:b9:a6:17:2a:f3:ef:2e:
98:a8:98:cd:88:ff:b6:b5:52:1c:78:8d:32:c9:78:
45:e4:67:20:7b:40:7f:24:d4:77:1b:9c:78:e0:99:
94:ee:20:f9:c0:dd:74:de:79:42:08:c4:ca:5e:72:
ea:77:cc:56:1d:a0:c8:58:90:96:69:31:d9:20:26:
3c:ea:75:52:11:ff:f0:bb:e7:ad:a8:f9:b3:19:cc:
3f:c1:ab:18:47:62:1c:c9:98:56:8c:d3:7b:e7:0a:
33:7c:2c:98:5b:5e:9f:a0:77:4d:49:31:8a:4e:20:
63:51:b1:66:78:81:15:67:d2:5d:a6:41:30:8d:65:
c6:fb:d4:57:0b:85:95:cb:3e:00:70:ff:bb:36:18:
b5:39:51:ba:a7:4a:0c:7a:7e:4c:9d:e9:f9:7b:11:
10:e4:c1:0b:23:05:e9:f1:4a:19:d5:08:eb:31:76:
f3:21:bd:f8:09:eb:6d:22:e6:cc:5b:83:97:78:b6:
67:9d:0d:2c:d9:02:9f:bb:b1:18:1b:ae:83:36:cc:
4c:85:8e:77:29:ca:ba:0d:bb:42:e4:0d:49:ca:6f:
95:2d:a5:5e:5c:a4:86:df:5e:06:79:fe:67:cd:46:
3b:27:c8:10:65:b9:0a:75:83:3c:d1:5b:76:32:a3:
ce:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DF:A3:5C:4E:84:4F:26:B6:E7:4A:47:A4:A6:68:F8:D8:0C:F6:6C
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:3a:fb:18:c5:24:58:42:98:41:1a:79:55:99:53:87:0a:4d:
8b:51:dc:2f:56:5f:bc:aa:76:35:df:97:43:af:76:f2:de:d9:
73:d2:f0:84:96:9c:cf:a7:eb:ff:91:3c:53:9f:0c:14:e0:49:
e2:7b:32:cc:76:f8:2c:d5:32:7e:70:34:b6:51:78:94:95:d4:
2a:9c:07:fc:79:57:b8:1b:7b:ea:a1:75:57:72:02:6b:88:f7:
77:5c:21:34:75:e4:95:7e:e9:91:61:1f:1e:5b:bc:21:80:28:
39:73:e5:2f:d6:e5:2b:a5:e1:18:10:cf:6e:d1:a1:76:65:78:
de:d7:1e:3f:6b:61:90:87:97:f3:2e:a9:91:b9:d5:b4:21:11:
18:b5:57:83:a8:05:24:2b:a4:32:d1:1d:54:04:b2:ce:93:86:
0e:d1:72:44:79:10:5d:c4:31:db:62:79:42:d9:94:c9:46:87:
bc:b7:b6:c9:34:70:80:e8:d0:4b:7c:06:1c:d9:d3:b4:26:62:
05:08:95:30:77:c7:93:d4:e7:7c:ce:99:f4:7d:d2:47:9c:d9:
a7:6c:20:ef:80:6d:13:d6:0c:6f:ff:98:a2:fa:ef:33:72:2c:
2f:b1:13:45:16:8a:ce:97:bc:e8:db:63:76:6d:81:bd:05:89:
8f:0f:36:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebMCYN5q4q0bcIMo5fD5pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNzgxMThkYjA1ZTRjOTNlNzZmYTFmMWM5NTY3OWM3MDVi
ZWIyMDgwHhcNMjYwNTEyMjMwMTQ0WhcNMjYwNTEzMjMwMTQ0WjAzMTEwLwYDVQQD
EyhkYmRmYTM1YzRlODQ0ZjI2YjZlNzRhNDdhNGE2NjhmOGQ4MGNmNjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBKdQbrNgrmmFyrz7y6YqJjNiP+2
tVIceI0yyXhF5Gcge0B/JNR3G5x44JmU7iD5wN103nlCCMTKXnLqd8xWHaDIWJCW
aTHZICY86nVSEf/wu+etqPmzGcw/wasYR2IcyZhWjNN75wozfCyYW16foHdNSTGK
TiBjUbFmeIEVZ9JdpkEwjWXG+9RXC4WVyz4AcP+7Nhi1OVG6p0oMen5Mnen5exEQ
5MELIwXp8UoZ1QjrMXbzIb34CettIubMW4OXeLZnnQ0s2QKfu7EYG66DNsxMhY53
Kcq6DbtC5A1Jym+VLaVeXKSG314Gef5nzUY7J8gQZbkKdYM80Vt2MqPOmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvfo1xOhE8mtudKR6SmaPjYDPZsMB8GA1UdIwQY
MBaAFKN4EY2wXkyT52+h8clWeccFvrIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wZjM1NWEtM2EwYS00NmVjLWIwN2Yt
ODY2NjA3YWYyZmE1LzEvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8wZjM1NWEtM2EwYS00NmVjLWIwN2YtODY2NjA3YWYyZmE1
LzEvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuTr7GMUk
WEKYQRp5VZlThwpNi1HcL1ZfvKp2Nd+XQ6928t7Zc9LwhJacz6fr/5E8U58MFOBJ
4nsyzHb4LNUyfnA0tlF4lJXUKpwH/HlXuBt76qF1V3ICa4j3d1whNHXklX7pkWEf
Hlu8IYAoOXPlL9blK6XhGBDPbtGhdmV43tceP2thkIeX8y6pkbnVtCERGLVXg6gF
JCukMtEdVASyzpOGDtFyRHkQXcQx22J5QtmUyUaHvLe2yTRwgOjQS3wGHNnTtCZi
BQiVMHfHk9TnfM6Z9H3SR5zZp2wg74BtE9YMb/+YovrvM3IsL7ETRRaKzpe86Ntj
dm2BvQWJjw82Hw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:53:40 2026 by rpki-client