Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
File: o8-bZGUWkotdBsKoGestvA_pkgo.mft (raw, json)
Hash identifier: Sd5XA1y1kILL5Jtj2Pbu+msmToYICy/wPS48/dNDW8o=
Subject key identifier: 07:83:35:0D:94:4E:96:E0:42:19:D3:2D:5E:CB:54:43:AC:5D:43:FA
Authority key identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
Certificate issuer: /CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Certificate serial: 01A107A5BCDAD9422C7A5C3FB5908AD60411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
Manifest number: 04DC
Signing time: Sun 04 Oct 2026 16:01:04 +0000
Manifest this update: Sun 04 Oct 2026 16:01:04 +0000
Manifest next update: Mon 05 Oct 2026 16:01:04 +0000
Files and hashes: 1: 699-AVQHq9A-mOz16n5eWo61zOY.roa (hash: qmU7lIRPt6s/fJ1Asi4/dDcElLOynVYiN3n5hO5Ttcc=)
2: kp_i2pjZWCStZ6J6pQgyDWR7Sqg.roa (hash: LLIB6t+pAw1QpuEvAEpebhxvws4LvkK/fY8SsOFrje8=)
3: o8-bZGUWkotdBsKoGestvA_pkgo.crl (hash: rzaDikDTmyXv4QaUxwWirwavWGyrr6ZLUHQitGVp5WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:a5:bc:da:d9:42:2c:7a:5c:3f:b5:90:8a:d6:04:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Validity
Not Before: Oct 4 16:01:04 2026 GMT
Not After : Oct 5 16:01:04 2026 GMT
Subject: CN=0783350d944e96e04219d32d5ecb5443ac5d43fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:50:6d:7c:1a:69:1f:ec:8e:e3:15:e0:ef:b4:
8d:68:6a:c5:48:41:01:ee:33:cb:7e:8b:0d:6b:d9:
3b:b8:00:e0:fe:97:86:ff:0e:f1:0c:f8:0b:49:83:
de:d3:a8:63:1a:8a:0a:b7:a5:b9:09:b0:49:54:ad:
7c:f0:98:eb:c2:d4:01:c1:59:61:d4:32:54:32:88:
3d:36:99:f2:26:92:10:e0:d9:ad:3a:de:d6:21:70:
07:17:61:22:24:16:41:21:3a:b8:98:8a:50:b3:ae:
5d:d5:e4:65:a6:f0:7c:67:0a:06:1f:e0:b0:11:98:
56:ae:14:cc:8f:e0:dd:d9:72:3e:60:8d:2d:dd:d7:
87:ce:23:eb:cb:07:24:eb:b0:65:f0:4b:e6:5a:18:
79:be:c9:34:34:ec:79:d2:73:b7:92:b1:07:17:a0:
d1:98:63:0f:4f:0f:27:0c:d4:18:06:85:8c:d1:4a:
5b:35:44:17:35:3b:9d:5b:a2:c2:32:4b:0c:56:58:
a9:15:bd:36:36:8d:5c:2c:4c:41:f5:db:67:77:a1:
13:39:bc:fc:08:e1:7b:eb:c5:99:b7:05:b0:cf:6e:
e2:67:24:90:e9:77:3b:69:96:f0:3e:85:bd:c4:2d:
d6:bf:39:d1:6e:04:ed:c4:ae:42:f4:ee:00:40:22:
bb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:83:35:0D:94:4E:96:E0:42:19:D3:2D:5E:CB:54:43:AC:5D:43:FA
X509v3 Authority Key Identifier:
keyid:A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:89:78:67:9a:1d:1e:50:41:71:00:dc:52:f9:a6:8f:49:64:
32:1d:07:7b:26:f6:35:fd:d9:7d:27:61:e4:43:d1:31:ee:5a:
30:0f:94:bc:29:a1:28:37:8d:b8:7b:4d:75:05:0f:2c:88:bc:
49:80:65:a9:6a:4d:f0:9f:ed:3f:79:78:c4:bc:da:d7:a9:05:
a0:18:bf:af:82:97:b9:f6:ec:1a:47:ba:11:9c:f6:f6:da:b9:
7c:1e:b3:f9:00:8b:bd:98:d4:d8:74:51:c8:38:5d:49:87:d0:
f5:16:d7:da:b0:ab:d7:fe:49:00:23:a5:6b:24:68:98:52:dc:
ad:d8:9a:ad:c6:76:c1:fe:8d:49:a8:4d:1d:b5:21:40:e2:df:
d6:f7:3e:cb:5c:65:11:46:33:03:57:11:38:fd:13:47:16:d3:
ee:86:12:76:4d:a5:77:a6:b3:19:06:b5:7f:14:cf:b3:53:ff:
d1:60:73:ed:bb:f9:d3:7a:fe:26:a9:d7:a2:35:7f:62:c4:9f:
93:41:d4:48:6a:35:09:47:b1:0c:ae:89:bb:c6:f6:3c:cb:2d:
db:a1:cc:a8:fe:89:b4:88:04:6a:a8:17:a0:8a:39:b4:0d:cf:
2c:2b:11:fb:8a:0f:85:ab:5b:d9:9d:6b:52:d5:b0:a2:31:90:
fb:ec:cb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:04:43 2026 by rpki-client