Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
File: o8-bZGUWkotdBsKoGestvA_pkgo.mft (raw, json)
Hash identifier: bAPWiAvqUVDOuQ8NhSLmTygT60dpigp/q29+Tn1MFU0=
Subject key identifier: F6:F6:0E:F3:4B:E2:7D:B6:8C:E0:0E:F2:DE:B4:D3:75:0E:9B:7F:98
Authority key identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
Certificate issuer: /CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Certificate serial: 019FAA19DD564BF66202459E9FA50E03485B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
Manifest number: 0427
Signing time: Tue 28 Jul 2026 19:00:49 +0000
Manifest this update: Tue 28 Jul 2026 19:00:49 +0000
Manifest next update: Wed 29 Jul 2026 19:00:49 +0000
Files and hashes: 1: 699-AVQHq9A-mOz16n5eWo61zOY.roa (hash: qmU7lIRPt6s/fJ1Asi4/dDcElLOynVYiN3n5hO5Ttcc=)
2: kp_i2pjZWCStZ6J6pQgyDWR7Sqg.roa (hash: LLIB6t+pAw1QpuEvAEpebhxvws4LvkK/fY8SsOFrje8=)
3: o8-bZGUWkotdBsKoGestvA_pkgo.crl (hash: wGqu2ho0NmLURIVxUVRKBj4mCHa1b127LiU07zekASY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:dd:56:4b:f6:62:02:45:9e:9f:a5:0e:03:48:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Validity
Not Before: Jul 28 19:00:49 2026 GMT
Not After : Jul 29 19:00:49 2026 GMT
Subject: CN=f6f60ef34be27db68ce00ef2deb4d3750e9b7f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ef:78:e5:98:6b:18:59:40:db:c3:74:21:46:
ad:79:8b:47:7e:9e:f3:45:3c:1b:7e:7b:f4:fd:ea:
0a:d5:96:a2:45:0b:77:7a:96:8a:75:91:53:e9:45:
06:e7:f5:c6:e7:5f:cf:11:a7:84:45:07:09:b5:0f:
bb:a1:f5:ed:29:31:1b:72:87:71:ab:68:34:f7:86:
48:94:57:cb:5a:43:60:ed:41:f7:1f:5d:d3:75:1b:
bb:c9:9b:6c:b3:9c:fd:4f:df:5b:6e:2c:e3:a6:2c:
b6:c8:f8:a8:71:dd:c0:a4:42:16:65:f3:5b:0a:e3:
e7:c2:32:45:6b:92:f4:73:b3:e5:31:74:66:25:b2:
84:16:cb:96:61:49:1d:c5:c9:ec:b0:64:bb:58:41:
66:69:06:75:e6:67:7a:6c:f8:32:72:ac:17:66:c6:
bd:f7:c8:d5:98:91:8e:0b:95:44:60:ac:4f:0c:8b:
03:36:de:bd:b3:b0:d9:9b:ef:6f:7e:9a:e3:7f:ee:
20:63:02:c7:98:d1:b3:95:26:96:39:5e:5a:53:c3:
d8:34:61:81:1d:ce:12:99:c5:a9:a0:3b:fb:59:da:
fc:72:96:66:a4:1e:9b:d3:1a:31:09:d9:45:dc:76:
d4:e2:2f:78:8d:b3:fb:b8:1b:ba:81:a8:6a:50:48:
be:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F6:0E:F3:4B:E2:7D:B6:8C:E0:0E:F2:DE:B4:D3:75:0E:9B:7F:98
X509v3 Authority Key Identifier:
keyid:A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a2:11:c5:6a:96:5c:25:5b:5c:67:fe:9e:53:03:a0:ac:f6:
3b:20:d7:25:08:4a:11:84:ad:97:c8:06:91:06:2b:19:1a:8d:
09:ac:ab:46:37:8a:01:7b:75:42:78:d4:25:06:b9:47:e9:40:
7d:55:78:9d:58:93:0b:00:97:d8:6a:09:82:57:e3:11:c4:ef:
c6:77:92:0b:38:c5:18:a2:36:93:89:07:16:61:e7:65:d1:93:
54:a5:37:36:0e:fb:17:b6:9b:e0:50:69:5b:fb:c8:29:22:5e:
64:a4:f9:19:91:33:45:66:b4:54:31:46:45:95:bc:f3:b5:6f:
9f:e4:3b:3c:4a:ba:9a:3d:da:27:52:49:e7:77:51:9b:03:b1:
e8:8c:67:77:5d:30:66:ac:79:fe:f1:7d:5f:5e:f0:f0:dc:e3:
b1:61:3a:ce:eb:74:19:e7:4c:60:ac:5d:b8:18:96:28:3d:f2:
43:f3:8c:bd:7b:9c:ac:d6:48:de:5f:ed:8a:76:86:95:03:3b:
4d:29:f5:1f:2d:68:55:e2:14:9a:b7:ac:59:55:a5:b2:d9:80:
e1:48:5c:50:ef:8f:21:fd:22:c1:b7:4e:76:4b:63:82:05:a3:
a8:33:40:88:39:2b:9b:78:d4:2b:00:08:a6:82:96:2f:01:f7:
7c:ca:59:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:58:28 2026 by rpki-client