Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
File: o8-bZGUWkotdBsKoGestvA_pkgo.mft (raw, json)
Hash identifier: iIITfYmZunIpRhZfb1uCxaKB6hBpN3tUTqePhHYcbx4=
Subject key identifier: 42:53:E2:20:02:3B:40:98:1F:9F:8D:F0:A4:22:72:0D:1D:0D:D7:B8
Authority key identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
Certificate issuer: /CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Certificate serial: 01A08C0D2920B7960616B071E318BFD59AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
Manifest number: 049C
Signing time: Thu 10 Sep 2026 16:01:07 +0000
Manifest this update: Thu 10 Sep 2026 16:01:07 +0000
Manifest next update: Fri 11 Sep 2026 16:01:07 +0000
Files and hashes: 1: 699-AVQHq9A-mOz16n5eWo61zOY.roa (hash: qmU7lIRPt6s/fJ1Asi4/dDcElLOynVYiN3n5hO5Ttcc=)
2: kp_i2pjZWCStZ6J6pQgyDWR7Sqg.roa (hash: LLIB6t+pAw1QpuEvAEpebhxvws4LvkK/fY8SsOFrje8=)
3: o8-bZGUWkotdBsKoGestvA_pkgo.crl (hash: cOPi0E9IdZ9EME37aGciCksZXv59ZIFz6QX5jrsvaRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:29:20:b7:96:06:16:b0:71:e3:18:bf:d5:9a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Validity
Not Before: Sep 10 16:01:07 2026 GMT
Not After : Sep 11 16:01:07 2026 GMT
Subject: CN=4253e220023b40981f9f8df0a422720d1d0dd7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:0f:32:fc:56:a1:f8:88:b9:bb:fe:72:84:
fe:c6:00:25:6d:a1:48:1e:35:09:6a:f0:17:a2:7a:
62:0b:06:ac:63:e9:98:8a:5e:2f:52:43:5f:16:4d:
62:a3:4e:6d:a6:d7:35:83:37:8e:97:97:5c:1d:4f:
d5:81:92:c8:8d:26:7d:e0:4c:41:00:54:98:df:aa:
c1:97:fd:78:3d:30:52:9c:85:a7:e0:8d:f6:09:71:
6a:90:ad:3c:5d:13:ea:f1:3a:74:c3:cd:10:64:18:
5f:a2:7c:b6:8c:8c:80:ee:a0:e7:6d:55:d7:ee:42:
ee:7e:83:16:1b:f2:9e:c5:39:be:ec:fd:a8:f2:48:
6e:8c:25:c0:1d:6f:9f:56:4a:38:ae:d9:ff:1e:75:
a1:b1:98:b8:ad:15:0d:af:fa:16:c2:2b:f7:b8:94:
0d:16:29:9f:6a:d4:87:2e:6a:7f:51:81:83:30:14:
cf:ea:a3:cd:ff:d3:36:ad:c4:48:b9:55:f6:2d:e2:
41:6e:d8:02:c6:2b:73:7e:75:c3:e0:da:35:c6:be:
f5:8c:92:2d:90:27:25:f1:08:0e:c6:01:e3:d2:51:
2f:e5:b0:48:c3:b7:57:94:58:9c:40:af:71:a9:ec:
02:c4:f0:13:bd:e2:82:e5:43:e6:a5:62:62:8e:c6:
44:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:53:E2:20:02:3B:40:98:1F:9F:8D:F0:A4:22:72:0D:1D:0D:D7:B8
X509v3 Authority Key Identifier:
keyid:A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d0:c9:88:2e:5c:cd:77:47:84:89:80:82:54:6e:d1:2f:23:
6a:49:a3:0d:1b:c6:42:83:0d:56:da:a5:16:31:10:31:3f:27:
07:19:c6:75:0c:ba:26:e5:e4:d4:f0:29:de:03:34:92:04:a0:
9f:07:bc:7f:db:74:7f:c0:c3:2b:da:6b:42:dc:15:55:9a:0d:
9c:1f:de:1a:be:2a:a6:a2:9a:da:4a:23:3e:58:b8:46:f2:8b:
79:56:dc:d7:16:ad:de:99:17:97:d8:59:31:0e:29:0b:4e:fe:
b6:d8:60:a6:a6:f3:4e:c9:39:d5:55:2e:15:2c:15:05:59:b3:
2b:4f:3a:07:bd:ea:3e:a1:9b:83:96:9e:da:5c:05:bf:55:75:
7d:56:bd:8e:7e:fd:10:b3:af:e5:8b:1b:df:60:9f:1a:38:50:
9a:56:09:8c:96:d0:66:4f:0b:bf:ce:d1:d2:ad:86:01:1c:60:
e1:f5:78:cc:40:23:a5:b6:03:e6:c8:b6:3c:ea:ec:e0:e5:f4:
d4:5b:15:1b:d6:4a:dc:55:fd:a9:06:c2:ef:ba:bc:28:96:9d:
f4:35:87:42:b2:1e:f2:22:fe:a4:c5:ca:17:ab:f2:10:7d:05:
2b:bf:32:ef:a3:d7:9b:95:26:b4:7c:cc:9f:db:70:cf:42:94:
4f:14:cb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:21:28 2026 by rpki-client