Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
File: o8-bZGUWkotdBsKoGestvA_pkgo.mft (raw, json)
Hash identifier: +RAyvgtAFhIlZ67SVp2C54DSTl+w63tGgJop/v1YEFA=
Subject key identifier: D7:C2:E7:1C:37:78:5E:DC:F1:B4:9F:65:B8:CC:9A:D0:0B:B0:93:43
Authority key identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
Certificate issuer: /CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Certificate serial: 019D39AE8EBCA010A85422176A7916A1467F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
Manifest number: 02E3
Signing time: Sun 29 Mar 2026 13:00:34 +0000
Manifest this update: Sun 29 Mar 2026 13:00:34 +0000
Manifest next update: Mon 30 Mar 2026 13:00:34 +0000
Files and hashes: 1: 699-AVQHq9A-mOz16n5eWo61zOY.roa (hash: qmU7lIRPt6s/fJ1Asi4/dDcElLOynVYiN3n5hO5Ttcc=)
2: o8-bZGUWkotdBsKoGestvA_pkgo.crl (hash: KKZ6r3O+CGHJTGxjqUoWwFo3ouoIPGZ92FgKzf0g7j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:8e:bc:a0:10:a8:54:22:17:6a:79:16:a1:46:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Validity
Not Before: Mar 29 13:00:34 2026 GMT
Not After : Mar 30 13:00:34 2026 GMT
Subject: CN=d7c2e71c37785edcf1b49f65b8cc9ad00bb09343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2f:c9:43:24:0d:e9:a6:36:fa:fb:2d:72:cb:
fa:fe:f0:97:23:e8:5c:d9:0e:a7:f0:d7:c0:34:dc:
3f:35:b6:ae:9a:ea:4d:d9:f5:83:42:67:ea:60:0b:
fe:9b:16:64:4b:a0:a2:37:af:77:77:76:40:c7:22:
63:76:4d:70:01:e7:a8:bc:37:e4:c4:63:ca:e8:d4:
b2:81:99:02:bb:de:bd:1a:64:10:aa:62:87:9f:fd:
b8:e0:18:4b:c9:18:71:6b:ef:e1:cd:15:6a:b9:d3:
c0:ec:2b:52:ef:d7:87:4e:4a:70:d4:46:78:79:03:
8d:71:b3:ac:bc:0a:9e:a1:b8:f0:8c:9d:ce:73:10:
f5:bc:ee:e2:c2:af:b1:7b:34:82:f6:58:e4:67:f1:
e6:98:b9:96:ef:9c:56:79:34:c7:b8:2d:c6:8d:50:
a9:30:5d:e4:80:06:a2:c9:a9:fe:b3:46:64:38:aa:
3d:bd:6c:8d:40:20:f0:3f:a2:ca:33:4b:c8:f1:88:
4e:e7:38:05:78:14:83:4b:6c:7f:64:36:b5:28:f3:
fe:f8:3a:98:95:db:cf:b2:76:1f:df:7d:6c:f2:4b:
44:98:b4:fd:85:9f:d6:c5:e6:20:29:f1:de:89:24:
85:43:cb:f4:09:9f:01:4b:d9:60:d0:c8:e9:71:4b:
e9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C2:E7:1C:37:78:5E:DC:F1:B4:9F:65:B8:CC:9A:D0:0B:B0:93:43
X509v3 Authority Key Identifier:
keyid:A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5d:3b:1d:77:9b:55:45:8f:50:a0:a8:6c:35:39:3b:28:76:
8f:99:6a:7b:04:8f:b3:8c:2d:19:36:56:ee:67:00:73:66:8c:
e8:f1:86:0a:d4:d3:1f:b6:ee:66:e2:1d:8d:6d:f3:32:65:26:
0a:7c:40:1d:c2:1d:b3:23:c9:8f:32:58:9c:ff:18:c5:a4:21:
8a:04:1e:43:b7:72:e7:43:f1:ea:78:55:c8:79:33:72:55:4e:
27:94:c9:49:ad:b1:fc:0c:9a:9e:49:a3:8b:8b:c2:21:79:41:
47:3d:c4:90:f6:59:0c:51:12:c1:b2:d7:7c:a2:8a:a8:7a:12:
46:74:00:f4:67:f3:80:11:49:1b:7e:3f:f3:15:61:66:49:11:
62:4a:24:90:e8:69:96:62:7d:18:55:14:ae:fa:05:ff:0b:2d:
d4:5b:94:48:a9:17:5f:4a:8c:06:bf:eb:f4:30:2f:e0:f8:b5:
e8:be:8e:aa:df:e2:9f:03:00:ac:8b:18:7e:fd:b7:54:02:06:
34:91:f0:07:d2:01:92:3a:51:3d:e9:2c:f5:55:24:78:19:c9:
c3:4f:b0:e0:d9:0c:a9:0f:80:e2:32:e7:61:f2:65:7a:9f:5e:
95:cf:6d:b0:b9:28:53:2a:db:b4:e8:73:f7:4b:c4:77:7a:59:
05:27:95:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:15:45 2026 by rpki-client