Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
File: o8-bZGUWkotdBsKoGestvA_pkgo.mft (raw, json)
Hash identifier: Oto4NnTrZx2C7ur9vevBEL9qdu1MFWa9mdZKBM0IBJw=
Subject key identifier: 44:F3:2D:BA:22:DD:70:2A:3D:20:3C:9E:66:90:E7:B4:E4:8D:B1:9B
Authority key identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
Certificate issuer: /CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Certificate serial: 019EC25BAE4307BA352E15405A329A37BD89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
Manifest number: 03AF
Signing time: Sat 13 Jun 2026 19:00:48 +0000
Manifest this update: Sat 13 Jun 2026 19:00:48 +0000
Manifest next update: Sun 14 Jun 2026 19:00:48 +0000
Files and hashes: 1: 699-AVQHq9A-mOz16n5eWo61zOY.roa (hash: qmU7lIRPt6s/fJ1Asi4/dDcElLOynVYiN3n5hO5Ttcc=)
2: kp_i2pjZWCStZ6J6pQgyDWR7Sqg.roa (hash: LLIB6t+pAw1QpuEvAEpebhxvws4LvkK/fY8SsOFrje8=)
3: o8-bZGUWkotdBsKoGestvA_pkgo.crl (hash: a/MDCgHB2zgpzeP5g7aVrZfPQr5yDxiSvU+Fm/aFlFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:ae:43:07:ba:35:2e:15:40:5a:32:9a:37:bd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Validity
Not Before: Jun 13 19:00:48 2026 GMT
Not After : Jun 14 19:00:48 2026 GMT
Subject: CN=44f32dba22dd702a3d203c9e6690e7b4e48db19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:9c:33:09:43:6e:ff:56:75:b9:42:07:dc:
20:56:95:72:82:84:a9:fe:68:9c:23:0c:46:1a:a6:
52:c5:ab:48:4c:5a:b3:7f:a4:39:a8:b7:88:68:dc:
49:eb:cc:3b:82:1a:5b:9d:bc:d3:71:11:86:6a:6d:
4a:81:95:12:f5:98:82:52:f5:bb:26:49:44:68:86:
ff:f5:50:99:91:d4:7f:e0:4b:41:a1:fa:83:98:74:
4a:93:f7:cf:31:d7:8f:42:cd:ee:80:de:67:cd:d5:
0a:5d:83:6a:10:d5:d4:68:91:c8:dd:68:09:ea:f7:
44:1d:d9:5f:01:d5:67:c0:c3:13:7b:7c:92:9b:45:
dc:bc:ef:e5:0e:6d:ae:2b:c2:79:6f:46:e5:1b:5b:
29:e3:0d:6f:1f:fb:14:56:44:91:9b:e9:b3:e9:97:
e1:7c:ac:d9:8a:04:6a:80:9b:ab:3b:37:ac:c5:f1:
da:14:0e:de:58:e4:cf:82:74:c8:52:38:3c:50:10:
8c:a6:69:bd:ed:5b:97:4c:8d:d6:bb:bd:08:27:56:
ca:98:ff:c9:5c:40:8e:25:0d:d0:ae:ec:f9:a3:95:
b2:79:56:01:de:5b:ec:76:d3:8f:3c:3b:31:2c:8d:
25:e6:b5:f7:cc:b2:af:60:79:ed:02:a9:21:69:1f:
a4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F3:2D:BA:22:DD:70:2A:3D:20:3C:9E:66:90:E7:B4:E4:8D:B1:9B
X509v3 Authority Key Identifier:
keyid:A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9c:46:55:b4:18:ad:ea:b9:d4:b0:ea:6c:87:62:df:4d:6f:
ba:d9:d2:54:95:18:e8:b1:d7:a6:a8:e8:8e:00:d3:a0:1b:bb:
82:1e:4f:5f:65:5c:32:24:f9:e7:f2:87:6f:79:b0:42:ab:c2:
55:75:8e:3a:f9:95:c4:2d:43:f6:ed:ea:d8:34:04:67:7a:40:
8f:72:07:08:e2:4d:83:06:9d:42:36:81:be:4c:a0:69:bb:d7:
fd:eb:4b:ab:2b:64:f9:1e:81:7a:e4:9d:1b:a2:37:23:28:17:
a3:09:40:b6:f6:a4:57:62:59:85:ae:7f:9d:d3:67:de:05:c2:
9f:a9:03:84:9f:d6:ed:bb:a2:e4:39:40:57:14:49:0d:d9:a7:
2e:41:41:04:e1:4a:4d:30:58:14:99:40:00:f6:b4:aa:e6:e1:
b3:c7:bf:91:1c:3b:c3:8f:74:de:2b:69:2f:98:38:9d:07:5b:
50:56:00:cf:8a:e6:ae:5c:42:1a:e8:0f:ca:14:7b:48:f1:ce:
b7:bb:f9:2a:65:5b:b5:b9:99:23:cc:6d:1b:86:5a:30:97:bc:
26:96:29:22:86:76:b7:21:60:78:a4:92:8f:31:2f:2d:db:a6:
2e:6f:3f:64:27:66:ee:e8:05:38:60:48:8e:c3:9b:66:7b:8e:
71:7b:c1:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CW65DB7o1LhVAWjKaN72JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzY2Y5YjY0NjUxNjkyOGI1ZDA2YzJhODE5ZWIyZGJjMGZl
OTkyMGEwHhcNMjYwNjEzMTkwMDQ4WhcNMjYwNjE0MTkwMDQ4WjAzMTEwLwYDVQQD
Eyg0NGYzMmRiYTIyZGQ3MDJhM2QyMDNjOWU2NjkwZTdiNGU0OGRiMTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjqcMwlDbv9WdblCB9wgVpVygoSp
/micIwxGGqZSxatITFqzf6Q5qLeIaNxJ68w7ghpbnbzTcRGGam1KgZUS9ZiCUvW7
JklEaIb/9VCZkdR/4EtBofqDmHRKk/fPMdePQs3ugN5nzdUKXYNqENXUaJHI3WgJ
6vdEHdlfAdVnwMMTe3ySm0XcvO/lDm2uK8J5b0blG1sp4w1vH/sUVkSRm+mz6Zfh
fKzZigRqgJurOzesxfHaFA7eWOTPgnTIUjg8UBCMpmm97VuXTI3Wu70IJ1bKmP/J
XECOJQ3Qruz5o5WyeVYB3lvsdtOPPDsxLI0l5rX3zLKvYHntAqkhaR+kxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETzLboi3XAqPSA8nmaQ57TkjbGbMB8GA1UdIwQY
MBaAFKPPm2RlFpKLXQbCqBnrLbwP6ZIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzgtYlpHVVdrb3RkQnNLb0dlc3R2QV9wa2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zOTRkMDctMDVjYy00ZjcyLWJkNDYt
Mjg5Njk2Y2M5OWI5LzEvbzgtYlpHVVdrb3RkQnNLb0dlc3R2QV9wa2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zOTRkMDctMDVjYy00ZjcyLWJkNDYtMjg5Njk2Y2M5OWI5
LzEvbzgtYlpHVVdrb3RkQnNLb0dlc3R2QV9wa2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJxGVbQY
req51LDqbIdi301vutnSVJUY6LHXpqjojgDToBu7gh5PX2VcMiT55/KHb3mwQqvC
VXWOOvmVxC1D9u3q2DQEZ3pAj3IHCOJNgwadQjaBvkygabvX/etLqytk+R6BeuSd
G6I3IygXowlAtvakV2JZha5/ndNn3gXCn6kDhJ/W7bui5DlAVxRJDdmnLkFBBOFK
TTBYFJlAAPa0qubhs8e/kRw7w4903itpL5g4nQdbUFYAz4rmrlxCGugPyhR7SPHO
t7v5KmVbtbmZI8xtG4ZaMJe8JpYpIoZ2tyFgeKSSjzEvLdumLm8/ZCdm7ugFOGBI
jsObZnuOcXvBrw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:21:33 2026 by rpki-client