Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
File: o8-bZGUWkotdBsKoGestvA_pkgo.mft (raw, json)
Hash identifier: mQA5SZPDjPu9eoY/ZxIUxvHGesTAxpa/Lg43oDx2L/g=
Subject key identifier: B5:B4:59:5A:73:60:A9:DD:3C:AF:27:2E:A1:5C:F4:34:49:5B:A4:BD
Authority key identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
Certificate issuer: /CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Certificate serial: 01A1852C66ED0496B9548C196AFD1281A4F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
Manifest number: 051D
Signing time: Thu 29 Oct 2026 01:00:41 +0000
Manifest this update: Thu 29 Oct 2026 01:00:41 +0000
Manifest next update: Fri 30 Oct 2026 01:00:41 +0000
Files and hashes: 1: 699-AVQHq9A-mOz16n5eWo61zOY.roa (hash: qmU7lIRPt6s/fJ1Asi4/dDcElLOynVYiN3n5hO5Ttcc=)
2: kp_i2pjZWCStZ6J6pQgyDWR7Sqg.roa (hash: LLIB6t+pAw1QpuEvAEpebhxvws4LvkK/fY8SsOFrje8=)
3: o8-bZGUWkotdBsKoGestvA_pkgo.crl (hash: 9MgQGk+5x97gO+zGnhuvdvGpAgguqXY9vi9H0rR3QTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:2c:66:ed:04:96:b9:54:8c:19:6a:fd:12:81:a4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Validity
Not Before: Oct 29 01:00:41 2026 GMT
Not After : Oct 30 01:00:41 2026 GMT
Subject: CN=b5b4595a7360a9dd3caf272ea15cf434495ba4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:06:9e:9e:cc:6d:48:b6:e6:4a:33:66:fa:a6:
77:f4:94:47:d0:d6:a0:07:7f:c6:c7:09:f4:cb:94:
d3:fb:56:9f:fe:e4:f3:cb:65:8c:60:62:5b:94:00:
ed:93:2c:d2:c4:06:90:69:05:5a:dd:43:4d:c1:59:
9f:d8:8c:67:bf:d4:24:43:35:e6:07:6a:e2:66:3e:
cb:14:44:e4:75:1a:2b:46:83:85:13:79:03:03:5d:
c6:43:3a:73:71:97:72:9a:d9:53:d6:35:57:1c:f0:
e8:31:86:1c:e6:39:fa:a5:2b:ab:85:e0:17:d2:77:
c9:be:08:62:fc:11:b4:72:1d:71:7b:69:25:8b:ff:
b4:bc:e1:5e:db:73:fc:49:4c:a7:6f:91:9c:75:26:
22:12:71:7a:3d:88:15:03:31:55:1f:4f:8d:25:f0:
de:b2:13:42:b7:e2:e0:57:5d:9a:3d:de:0c:50:34:
fa:cc:46:2c:e5:6f:8a:72:bc:9d:51:5d:d3:5a:d3:
95:ec:8f:f2:7f:f9:30:06:5d:8b:d5:db:e6:a8:34:
da:e4:ef:bc:51:65:e5:9e:2e:52:9e:c2:ee:b0:db:
c0:86:c5:dd:0e:b1:80:f6:2d:3f:98:47:87:c4:3c:
ec:08:eb:7f:32:79:7d:d9:3c:16:79:54:f2:dc:a7:
e2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B4:59:5A:73:60:A9:DD:3C:AF:27:2E:A1:5C:F4:34:49:5B:A4:BD
X509v3 Authority Key Identifier:
keyid:A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7e:7e:a4:58:dc:8e:22:60:b7:37:19:3b:61:d1:d5:d6:63:
d9:03:b4:49:32:98:1d:73:08:ba:9b:4d:5a:88:53:f8:b6:18:
35:99:8a:ea:86:fa:42:ab:b9:8f:ef:a1:c1:cd:25:ef:24:d4:
46:02:ce:2c:1f:37:08:33:99:e8:6f:e2:26:b8:4d:07:f2:71:
53:ab:8a:a3:cd:c1:57:2b:5c:ac:3e:31:4b:f2:51:60:30:97:
12:98:60:5d:20:a3:e3:1a:58:25:2b:f7:10:81:ff:fa:48:ec:
61:73:d3:f1:72:70:f5:21:70:67:87:9e:09:78:d3:d2:a4:43:
e7:3f:35:e9:85:ae:3a:67:ba:2a:17:19:bf:bf:0b:3b:9f:b2:
ba:87:2d:a3:56:97:65:86:18:85:a1:f5:fb:64:45:61:6a:9a:
4a:1a:9c:ca:2d:81:94:42:eb:0e:2f:84:70:b7:b6:83:c2:04:
e3:76:3e:66:ac:bf:29:cc:45:f4:23:45:fc:46:84:c9:e0:97:
6d:d5:ce:45:0e:53:0d:bf:0d:ca:e9:24:29:47:2e:c6:05:75:
77:53:02:17:da:5b:07:e7:ec:ca:c6:0c:f7:04:13:e5:d1:31:
cb:4d:a5:39:0d:82:9e:5d:dd:8a:74:d7:c5:a8:c6:61:cd:cb:
36:83:76:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGFLGbtBJa5VIwZav0SgaT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzY2Y5YjY0NjUxNjkyOGI1ZDA2YzJhODE5ZWIyZGJjMGZl
OTkyMGEwHhcNMjYxMDI5MDEwMDQxWhcNMjYxMDMwMDEwMDQxWjAzMTEwLwYDVQQD
EyhiNWI0NTk1YTczNjBhOWRkM2NhZjI3MmVhMTVjZjQzNDQ5NWJhNGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2waensxtSLbmSjNm+qZ39JRH0Nag
B3/Gxwn0y5TT+1af/uTzy2WMYGJblADtkyzSxAaQaQVa3UNNwVmf2Ixnv9QkQzXm
B2riZj7LFETkdRorRoOFE3kDA13GQzpzcZdymtlT1jVXHPDoMYYc5jn6pSurheAX
0nfJvghi/BG0ch1xe2kli/+0vOFe23P8SUynb5GcdSYiEnF6PYgVAzFVH0+NJfDe
shNCt+LgV12aPd4MUDT6zEYs5W+KcrydUV3TWtOV7I/yf/kwBl2L1dvmqDTa5O+8
UWXlni5SnsLusNvAhsXdDrGA9i0/mEeHxDzsCOt/Mnl92TwWeVTy3KfiXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLW0WVpzYKndPK8nLqFc9DRJW6S9MB8GA1UdIwQY
MBaAFKPPm2RlFpKLXQbCqBnrLbwP6ZIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzgtYlpHVVdrb3RkQnNLb0dlc3R2QV9wa2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zOTRkMDctMDVjYy00ZjcyLWJkNDYt
Mjg5Njk2Y2M5OWI5LzEvbzgtYlpHVVdrb3RkQnNLb0dlc3R2QV9wa2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zOTRkMDctMDVjYy00ZjcyLWJkNDYtMjg5Njk2Y2M5OWI5
LzEvbzgtYlpHVVdrb3RkQnNLb0dlc3R2QV9wa2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABn5+pFjc
jiJgtzcZO2HR1dZj2QO0STKYHXMIuptNWohT+LYYNZmK6ob6Qqu5j++hwc0l7yTU
RgLOLB83CDOZ6G/iJrhNB/JxU6uKo83BVytcrD4xS/JRYDCXEphgXSCj4xpYJSv3
EIH/+kjsYXPT8XJw9SFwZ4eeCXjT0qRD5z816YWuOme6KhcZv78LO5+yuocto1aX
ZYYYhaH1+2RFYWqaShqcyi2BlELrDi+EcLe2g8IE43Y+Zqy/KcxF9CNF/EaEyeCX
bdXORQ5TDb8NyukkKUcuxgV1d1MCF9pbB+fsysYM9wQT5dExy02lOQ2Cnl3dinTX
xajGYc3LNoN2hg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 05:50:31 2026 by rpki-client