Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
File: o8-bZGUWkotdBsKoGestvA_pkgo.mft (raw, json)
Hash identifier: CB0jaNDF6sh93arPcHOaIDGzLRd4Q25axipCUcVf0ao=
Subject key identifier: B8:59:14:97:E9:96:29:7B:4C:46:3D:EC:94:CA:79:EF:75:D9:84:0B
Authority key identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
Certificate issuer: /CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Certificate serial: 01A105B7588F67E926520333B8BF55B33819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
Manifest number: 04DB
Signing time: Sun 04 Oct 2026 07:01:04 +0000
Manifest this update: Sun 04 Oct 2026 07:01:04 +0000
Manifest next update: Mon 05 Oct 2026 07:01:04 +0000
Files and hashes: 1: 699-AVQHq9A-mOz16n5eWo61zOY.roa (hash: qmU7lIRPt6s/fJ1Asi4/dDcElLOynVYiN3n5hO5Ttcc=)
2: kp_i2pjZWCStZ6J6pQgyDWR7Sqg.roa (hash: LLIB6t+pAw1QpuEvAEpebhxvws4LvkK/fY8SsOFrje8=)
3: o8-bZGUWkotdBsKoGestvA_pkgo.crl (hash: zXhpuG7px0qi6ickLR/kMU90IRsUYFo/4CIoC4ExmXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:b7:58:8f:67:e9:26:52:03:33:b8:bf:55:b3:38:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Validity
Not Before: Oct 4 07:01:04 2026 GMT
Not After : Oct 5 07:01:04 2026 GMT
Subject: CN=b8591497e996297b4c463dec94ca79ef75d9840b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:b0:40:00:75:cf:88:bb:86:ef:78:6f:03:
4b:8e:e5:8b:46:a0:4e:29:b8:59:1d:2c:a4:ea:62:
07:e9:cf:51:29:40:5b:41:ce:4f:7d:cd:67:ae:b3:
fa:9e:31:b3:2f:e8:d3:28:ba:0e:f2:18:a4:59:46:
0c:e4:f6:85:1d:3f:62:af:fc:33:49:13:95:76:e3:
f2:a5:7b:0c:2c:da:71:2d:7e:19:df:16:b9:00:09:
9f:b0:21:26:fb:49:b6:8d:1c:fe:48:60:79:19:9a:
bf:ad:c5:2f:d0:97:59:28:c4:d5:ef:a9:70:b4:53:
82:aa:b5:7e:d5:1f:ba:96:bb:ca:51:3e:0e:b8:72:
48:57:c4:56:6d:aa:96:2c:9c:42:d3:87:e5:01:be:
13:00:69:38:72:35:dc:c5:b6:e7:74:ff:5b:1c:e0:
03:3c:1d:f4:c6:a2:49:d2:43:d5:1c:79:6a:40:44:
c6:54:29:92:c0:a0:11:a7:f3:5b:bd:b0:37:75:c6:
c1:84:0d:2e:77:6b:df:34:e7:eb:32:8f:44:c1:d2:
d1:df:31:39:bd:58:81:27:39:fb:87:65:c3:17:82:
87:da:ab:f8:a9:2f:ce:87:ac:d9:be:1d:5a:de:1e:
12:42:19:c9:4f:81:3f:93:70:54:94:2c:e8:63:22:
99:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:59:14:97:E9:96:29:7B:4C:46:3D:EC:94:CA:79:EF:75:D9:84:0B
X509v3 Authority Key Identifier:
keyid:A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:06:6c:6b:34:ca:fb:3d:5c:12:1d:5a:b3:18:bb:e9:fd:3b:
e7:93:f2:e9:4a:20:cf:33:fc:1c:7b:1a:74:d2:f4:01:89:63:
b6:cf:30:27:82:d0:eb:bc:19:88:a9:66:84:d8:87:01:94:c5:
53:7e:94:b9:71:5b:06:cb:f0:3b:a1:ae:05:4b:fe:d7:1c:13:
32:45:5b:51:2d:d8:8c:7b:d3:61:42:87:4c:39:6a:54:a1:5a:
10:91:b1:47:aa:11:c4:ae:08:82:e1:d0:c2:23:af:c3:3e:3a:
53:2d:43:4c:d1:5b:9b:df:b0:73:b5:ea:d1:82:0f:45:c3:6b:
9e:17:71:9d:fa:fc:4a:1e:ba:82:b8:7d:9b:6c:36:1d:fa:13:
75:c9:fb:a9:15:26:bd:4b:3d:1e:75:39:a5:54:5c:80:bb:10:
4f:84:4f:94:a8:d2:d1:14:c7:4e:4f:5a:87:7d:76:10:ca:8e:
6f:52:61:01:ad:3d:de:74:6a:36:13:fc:1a:04:f4:72:24:eb:
58:81:ff:29:77:97:a0:52:ee:c8:51:fa:84:c5:c2:9b:03:06:
ce:75:ab:cf:a7:57:26:c4:f1:1f:2b:a8:1a:e2:df:78:a6:40:
c7:84:6a:a1:d8:d5:a3:16:9e:aa:83:1c:3d:5b:24:89:2d:30:
c2:31:10:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEFt1iPZ+kmUgMzuL9VszgZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzY2Y5YjY0NjUxNjkyOGI1ZDA2YzJhODE5ZWIyZGJjMGZl
OTkyMGEwHhcNMjYxMDA0MDcwMTA0WhcNMjYxMDA1MDcwMTA0WjAzMTEwLwYDVQQD
EyhiODU5MTQ5N2U5OTYyOTdiNGM0NjNkZWM5NGNhNzllZjc1ZDk4NDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDuwQAB1z4i7hu94bwNLjuWLRqBO
KbhZHSyk6mIH6c9RKUBbQc5Pfc1nrrP6njGzL+jTKLoO8hikWUYM5PaFHT9ir/wz
SROVduPypXsMLNpxLX4Z3xa5AAmfsCEm+0m2jRz+SGB5GZq/rcUv0JdZKMTV76lw
tFOCqrV+1R+6lrvKUT4OuHJIV8RWbaqWLJxC04flAb4TAGk4cjXcxbbndP9bHOAD
PB30xqJJ0kPVHHlqQETGVCmSwKARp/NbvbA3dcbBhA0ud2vfNOfrMo9EwdLR3zE5
vViBJzn7h2XDF4KH2qv4qS/Oh6zZvh1a3h4SQhnJT4E/k3BUlCzoYyKZXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhZFJfplil7TEY97JTKee912YQLMB8GA1UdIwQY
MBaAFKPPm2RlFpKLXQbCqBnrLbwP6ZIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzgtYlpHVVdrb3RkQnNLb0dlc3R2QV9wa2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zOTRkMDctMDVjYy00ZjcyLWJkNDYt
Mjg5Njk2Y2M5OWI5LzEvbzgtYlpHVVdrb3RkQnNLb0dlc3R2QV9wa2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zOTRkMDctMDVjYy00ZjcyLWJkNDYtMjg5Njk2Y2M5OWI5
LzEvbzgtYlpHVVdrb3RkQnNLb0dlc3R2QV9wa2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQZsazTK
+z1cEh1asxi76f0755Py6UogzzP8HHsadNL0AYljts8wJ4LQ67wZiKlmhNiHAZTF
U36UuXFbBsvwO6GuBUv+1xwTMkVbUS3YjHvTYUKHTDlqVKFaEJGxR6oRxK4IguHQ
wiOvwz46Uy1DTNFbm9+wc7Xq0YIPRcNrnhdxnfr8Sh66grh9m2w2HfoTdcn7qRUm
vUs9HnU5pVRcgLsQT4RPlKjS0RTHTk9ah312EMqOb1JhAa093nRqNhP8GgT0ciTr
WIH/KXeXoFLuyFH6hMXCmwMGznWrz6dXJsTxHyuoGuLfeKZAx4RqodjVoxaeqoMc
PVskiS0wwjEQew==
-----END CERTIFICATE-----
Generated at Sun Oct 4 16:46:48 2026 by rpki-client