Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
File: o8-bZGUWkotdBsKoGestvA_pkgo.mft (raw, json)
Hash identifier: Lmz44k8tp/VjlaPkUKNslteet0PmX+2MHkLbLQ/YWC0=
Subject key identifier: C6:C8:ED:54:25:B1:2A:12:7E:2F:D6:81:EF:91:4B:4C:19:E7:B9:52
Authority key identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
Certificate issuer: /CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Certificate serial: 01A122AFEA50D8C5B0A190A85ADD167227C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
Manifest number: 04EA
Signing time: Fri 09 Oct 2026 22:01:56 +0000
Manifest this update: Fri 09 Oct 2026 22:01:56 +0000
Manifest next update: Sat 10 Oct 2026 22:01:56 +0000
Files and hashes: 1: 699-AVQHq9A-mOz16n5eWo61zOY.roa (hash: qmU7lIRPt6s/fJ1Asi4/dDcElLOynVYiN3n5hO5Ttcc=)
2: kp_i2pjZWCStZ6J6pQgyDWR7Sqg.roa (hash: LLIB6t+pAw1QpuEvAEpebhxvws4LvkK/fY8SsOFrje8=)
3: o8-bZGUWkotdBsKoGestvA_pkgo.crl (hash: WD5izIkFQI9SbCeXndkb0vML8gAvEzps60xS/O5E+0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:af:ea:50:d8:c5:b0:a1:90:a8:5a:dd:16:72:27:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Validity
Not Before: Oct 9 22:01:56 2026 GMT
Not After : Oct 10 22:01:56 2026 GMT
Subject: CN=c6c8ed5425b12a127e2fd681ef914b4c19e7b952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3f:42:be:63:44:66:04:10:fa:bf:64:cb:60:
60:fe:e6:fb:ce:85:74:8b:2a:cd:2e:e8:46:48:de:
c0:af:2b:a4:4f:30:2c:07:9a:e9:e1:d4:3b:83:81:
8e:b3:62:ed:ff:ec:0c:1f:32:7a:e5:34:da:87:50:
9d:3f:f6:e9:ba:e6:5a:fd:83:38:38:98:e9:3e:6c:
04:02:0f:e0:b7:b3:9f:05:91:e5:95:d2:95:a4:1b:
32:2c:9e:8b:84:cf:bd:6d:5c:de:2b:0f:e5:c3:80:
35:e0:38:25:e9:b5:00:f8:c7:af:7c:6e:fe:cf:8e:
52:5e:25:03:06:99:83:cd:ad:5f:fa:14:bf:bf:6c:
bd:4e:44:f8:c3:d7:06:40:a3:77:40:b1:c6:d9:f7:
5b:ec:1f:94:98:d2:10:a3:06:c8:e7:69:86:f4:a1:
01:17:96:a3:06:54:01:76:b7:2b:48:3f:76:e1:cb:
77:79:b9:42:72:db:08:20:ec:89:e4:4e:e5:bc:1f:
04:36:38:47:5c:ca:84:6e:e6:8e:43:f4:5b:dd:5f:
26:ad:d3:12:0a:b0:d0:39:49:6c:27:f2:01:23:0a:
f1:90:09:03:5b:1e:9b:6b:20:d6:2a:9a:40:ec:58:
af:18:98:3a:ca:89:85:05:2e:46:70:ab:41:58:5e:
aa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C8:ED:54:25:B1:2A:12:7E:2F:D6:81:EF:91:4B:4C:19:E7:B9:52
X509v3 Authority Key Identifier:
keyid:A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b2:81:77:72:41:32:c7:e4:6b:31:17:c7:d3:3d:86:3e:b2:
45:6b:5d:3f:d4:70:a2:ce:5a:57:88:0e:27:00:b0:b1:aa:c5:
9e:50:f2:10:1d:f5:ec:50:5b:5f:e1:44:fc:2e:fd:e5:a2:1b:
88:71:46:35:c4:76:8d:93:72:5c:0f:81:d7:9f:a2:04:02:f2:
aa:49:c2:15:99:d6:92:9a:ef:86:c0:95:ca:b8:cf:29:ba:2e:
ae:32:a2:30:98:b8:8b:7a:bb:e8:65:29:2f:61:05:50:16:a8:
0b:33:25:7a:4f:d3:96:ef:93:7b:77:72:3b:25:01:80:fb:cf:
08:31:18:f2:6b:f1:36:e6:42:0e:2a:74:12:f7:7f:ac:65:75:
f2:95:9b:f6:e2:9b:ed:42:45:21:9b:b1:37:dc:42:71:5c:c4:
b9:8e:b7:e2:c5:5c:d6:51:ce:66:81:2b:9e:ed:3e:10:5e:90:
35:6b:5b:57:68:32:16:e9:bc:fe:81:6f:27:46:1c:09:e3:89:
5a:0a:6e:b5:3c:b1:97:6b:6b:60:38:40:45:b9:ae:2d:65:fc:
cc:eb:2f:db:ae:1b:86:0b:28:09:75:90:3c:1c:3b:f4:de:87:
b8:6e:26:52:d8:bd:75:e6:83:e9:41:5e:de:e4:dd:8c:01:50:
69:f7:51:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 04:06:39 2026 by rpki-client