Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
File: o8-bZGUWkotdBsKoGestvA_pkgo.mft (raw, json)
Hash identifier: FQ1UClHyFynlJPlffkUFI231dFZb8/l0kXOwPCxJkc0=
Subject key identifier: 2F:AD:7D:65:5F:EB:33:0B:F2:DA:4C:E6:AA:CB:03:3E:97:80:88:32
Authority key identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
Certificate issuer: /CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Certificate serial: 019E3184D5F67436EA7F41198A3CCDACF348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
Manifest number: 0364
Signing time: Sat 16 May 2026 16:00:49 +0000
Manifest this update: Sat 16 May 2026 16:00:49 +0000
Manifest next update: Sun 17 May 2026 16:00:49 +0000
Files and hashes: 1: 699-AVQHq9A-mOz16n5eWo61zOY.roa (hash: qmU7lIRPt6s/fJ1Asi4/dDcElLOynVYiN3n5hO5Ttcc=)
2: kp_i2pjZWCStZ6J6pQgyDWR7Sqg.roa (hash: LLIB6t+pAw1QpuEvAEpebhxvws4LvkK/fY8SsOFrje8=)
3: o8-bZGUWkotdBsKoGestvA_pkgo.crl (hash: 0XN1uNBWi+h9C6pHZyE1pzpbu85sA0oz9UakbYP+YG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:84:d5:f6:74:36:ea:7f:41:19:8a:3c:cd:ac:f3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Validity
Not Before: May 16 16:00:49 2026 GMT
Not After : May 17 16:00:49 2026 GMT
Subject: CN=2fad7d655feb330bf2da4ce6aacb033e97808832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:0d:2c:aa:e3:c3:0e:e7:9e:ce:34:b2:03:
34:7b:3b:7b:d7:94:76:9f:9d:9e:d3:d2:22:07:5c:
21:91:c3:8d:d9:a0:1b:15:e5:7c:8b:b4:59:10:d5:
6b:85:af:f4:fd:5e:b0:8d:6d:24:84:3f:60:0a:f0:
08:ef:32:bd:d8:51:90:b1:5d:42:59:29:57:94:83:
c3:d8:f4:0c:a3:56:a1:33:fe:42:b2:20:d6:66:98:
5c:a0:2d:26:66:17:de:61:92:ad:b1:5f:da:9b:e6:
1f:f4:05:80:a4:49:38:6d:94:78:66:96:00:a2:c3:
de:98:1d:21:36:54:47:21:12:9d:bd:d4:44:5b:24:
4b:6a:b9:c2:48:6d:5a:47:2f:15:07:41:1b:ce:f5:
a3:b3:cd:58:90:22:b4:58:6a:2c:d3:db:73:78:63:
eb:b7:3f:55:8b:63:72:45:f5:c4:28:bf:3b:1a:7c:
59:9c:b6:45:dd:0d:1c:4f:d3:58:da:f0:83:b3:2c:
ed:3a:3c:99:2a:52:16:a5:be:04:6c:94:a7:1f:a5:
bb:06:e3:0b:7c:11:4b:e1:b7:77:9e:3a:60:18:37:
7e:0b:ac:36:fe:53:df:8b:94:47:7b:44:a0:a4:0c:
fe:39:4e:5a:5a:b9:65:85:22:ba:6f:d3:68:49:db:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AD:7D:65:5F:EB:33:0B:F2:DA:4C:E6:AA:CB:03:3E:97:80:88:32
X509v3 Authority Key Identifier:
keyid:A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ac:d4:af:77:30:49:bc:af:49:bc:e6:c7:7c:72:92:2f:7d:
ca:a5:23:cd:5e:44:63:2a:bc:d4:04:5d:55:44:44:7e:bc:2c:
cd:fc:64:1d:14:81:87:1e:7b:4e:6c:1c:4d:90:c4:84:e7:1c:
ae:10:f4:d2:52:f3:88:87:bb:04:7b:d4:15:3f:08:7a:95:6d:
5c:c7:00:9e:e2:01:6c:72:a0:64:f4:81:e6:bb:4f:ff:aa:74:
03:26:76:05:95:76:e4:33:f7:16:3c:13:18:98:07:13:c0:47:
7a:e8:e6:49:4e:64:84:b8:7d:37:6a:90:c3:d1:ca:55:e4:d5:
3e:ef:9c:05:bb:d0:07:ea:89:40:42:a3:94:a5:3a:f2:c7:46:
45:6f:33:a8:db:63:8d:71:b0:6e:9d:06:a9:88:70:71:93:1e:
a1:45:2a:79:f4:14:30:b3:1d:5e:a4:43:af:e4:4a:ae:0a:9e:
0e:48:55:42:97:12:b8:f3:66:ba:a3:f2:59:e3:23:b8:cd:fb:
23:3a:ba:3f:7d:52:b3:de:36:a8:cd:89:8b:fd:f3:dc:ba:1d:
38:d2:9d:de:c1:96:d0:68:6b:0f:7c:b4:b3:40:57:fc:fc:0f:
c8:bc:fc:9b:94:c5:98:47:a3:13:54:93:c1:f3:bc:3a:69:65:
51:f5:75:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:50 2026 by rpki-client