Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
File: o8-bZGUWkotdBsKoGestvA_pkgo.mft (raw, json)
Hash identifier: dcSMzQTFPoIo+KBV5RcJruyj8TOdsHbnYrhIgycub60=
Subject key identifier: 6D:F8:B3:AD:33:81:45:48:4D:E7:A2:F1:96:33:2E:84:F4:F1:F9:02
Authority key identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
Certificate issuer: /CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Certificate serial: 019F92ED9E57918F16D279B8730287B32FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
Manifest number: 041B
Signing time: Fri 24 Jul 2026 07:01:13 +0000
Manifest this update: Fri 24 Jul 2026 07:01:13 +0000
Manifest next update: Sat 25 Jul 2026 07:01:13 +0000
Files and hashes: 1: 699-AVQHq9A-mOz16n5eWo61zOY.roa (hash: qmU7lIRPt6s/fJ1Asi4/dDcElLOynVYiN3n5hO5Ttcc=)
2: kp_i2pjZWCStZ6J6pQgyDWR7Sqg.roa (hash: LLIB6t+pAw1QpuEvAEpebhxvws4LvkK/fY8SsOFrje8=)
3: o8-bZGUWkotdBsKoGestvA_pkgo.crl (hash: AgzsHZN7DeG4ccNdckR3WTzSge/yg42pBRlVa2vi1+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:9e:57:91:8f:16:d2:79:b8:73:02:87:b3:2f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Validity
Not Before: Jul 24 07:01:13 2026 GMT
Not After : Jul 25 07:01:13 2026 GMT
Subject: CN=6df8b3ad338145484de7a2f196332e84f4f1f902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:33:50:88:06:67:fb:f4:55:1a:72:c4:ec:
35:ef:74:15:7e:61:60:2b:c3:74:fc:e7:21:50:aa:
fa:57:e2:9b:55:c1:00:b0:a4:97:6d:fb:d9:65:ed:
22:16:ac:38:0b:3d:61:ae:e3:c5:7a:02:02:80:dc:
48:29:e5:cb:0e:f9:5f:db:b1:1f:d5:13:19:21:18:
75:63:4b:bd:6b:69:57:77:1e:46:98:ef:1c:cb:14:
7b:29:8a:43:94:62:c5:3c:fc:39:d7:1a:a7:93:b1:
01:3b:2a:c3:5d:bb:04:d1:42:7c:ce:3f:96:c9:77:
6d:9c:94:bd:25:7d:6b:b4:04:2d:03:c8:7f:ca:16:
40:7c:fe:cb:de:bc:7d:23:a9:13:21:1c:19:3b:a7:
a3:f8:2c:2d:ed:42:cf:b1:07:24:97:0d:d6:98:90:
d2:46:07:da:22:71:b2:67:5a:f7:f7:dc:18:9d:61:
64:9d:dc:37:3f:a3:19:e8:75:22:d5:1d:71:99:0c:
c5:8d:00:ed:5d:11:09:16:e2:21:aa:2e:2a:35:0a:
d5:cf:e5:69:b7:75:15:28:fc:88:8f:ab:43:0d:26:
02:80:47:d3:21:7d:bc:6a:81:51:82:09:1a:e5:65:
56:eb:56:ea:a0:ec:e5:82:46:b0:c8:33:59:45:fe:
88:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F8:B3:AD:33:81:45:48:4D:E7:A2:F1:96:33:2E:84:F4:F1:F9:02
X509v3 Authority Key Identifier:
keyid:A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6e:40:14:35:4a:cf:11:1f:91:0b:b0:10:4d:1c:73:6e:a5:
89:0f:86:3f:f8:99:78:28:65:fc:b8:38:5a:ca:0a:aa:ce:93:
0b:95:95:fe:83:be:fb:8f:51:3f:cd:d3:81:22:f7:2e:df:79:
59:98:87:db:cf:96:9c:d6:fa:2b:a4:f0:21:2d:d0:49:f5:0c:
4d:c9:25:91:3e:bb:be:9d:56:bf:05:b6:89:83:e0:e5:4a:5f:
6f:f6:58:98:fe:2b:d6:05:1e:d1:43:f8:46:79:2a:8e:4e:d4:
9f:aa:7f:27:2c:99:f0:8c:b4:ed:8e:9d:e1:4a:dc:15:90:16:
23:44:9d:6c:21:61:34:da:cd:6c:71:09:31:ef:ca:9f:d7:4a:
b7:bb:09:7d:0e:64:6a:39:ca:16:cf:7b:a0:43:f6:46:c1:d9:
8a:db:16:37:c5:49:42:92:0f:15:f6:ea:3d:01:5a:9a:11:32:
c9:5a:89:70:20:44:04:bc:38:fd:cb:cb:b4:09:14:85:49:5e:
8d:d3:4a:ce:83:df:04:cb:0d:50:89:d2:c1:f2:01:ee:2d:38:
eb:05:d1:17:67:04:b7:56:9e:40:49:91:f7:df:3f:84:ba:52:
4d:cf:f3:9e:f6:e1:bd:03:5b:a8:98:34:eb:6f:0c:6a:47:44:
0c:4b:39:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:55 2026 by rpki-client