Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
File: o8-bZGUWkotdBsKoGestvA_pkgo.mft (raw, json)
Hash identifier: 9luzsOVzlMA74LPlJJJYUfJWb4eR9nvh5CFomL5myZg=
Subject key identifier: 88:86:DC:35:90:3E:14:12:35:7E:3F:27:02:72:2F:42:F5:17:83:44
Authority key identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
Certificate issuer: /CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Certificate serial: 01A1833E0160F1BC66BF1BE05EAF15DAABD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
Manifest number: 051C
Signing time: Wed 28 Oct 2026 16:00:41 +0000
Manifest this update: Wed 28 Oct 2026 16:00:41 +0000
Manifest next update: Thu 29 Oct 2026 16:00:41 +0000
Files and hashes: 1: 699-AVQHq9A-mOz16n5eWo61zOY.roa (hash: qmU7lIRPt6s/fJ1Asi4/dDcElLOynVYiN3n5hO5Ttcc=)
2: kp_i2pjZWCStZ6J6pQgyDWR7Sqg.roa (hash: LLIB6t+pAw1QpuEvAEpebhxvws4LvkK/fY8SsOFrje8=)
3: o8-bZGUWkotdBsKoGestvA_pkgo.crl (hash: u3csoq0c0PRUrWkJSfYLU4gwitU8wvE8QXWiaoENwsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:3e:01:60:f1:bc:66:bf:1b:e0:5e:af:15:da:ab:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Validity
Not Before: Oct 28 16:00:41 2026 GMT
Not After : Oct 29 16:00:41 2026 GMT
Subject: CN=8886dc35903e1412357e3f2702722f42f5178344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:ab:7e:41:f0:f4:11:d1:e4:62:98:e6:88:
08:73:99:72:39:25:94:f1:12:93:98:9a:67:3e:49:
2f:e5:97:0c:92:4f:45:ad:da:c9:ed:29:da:6f:ef:
7b:ca:69:35:ca:4f:ac:5d:e4:0c:9f:e8:7f:17:b7:
60:e5:0f:59:72:ae:9c:58:7d:29:bc:44:84:98:ed:
49:d2:37:10:a9:91:96:85:de:7d:12:f0:d1:a6:22:
8a:69:5e:9c:45:c2:e8:82:d5:bd:ab:44:88:28:7f:
e9:52:59:af:24:b4:38:dc:47:1f:e2:36:c2:cd:b4:
42:52:42:45:74:d3:cb:62:fb:fb:60:e1:70:24:0c:
ce:1f:a3:97:5d:c9:6e:3a:11:de:0c:b0:e6:99:a5:
ea:31:1a:fd:b8:b3:39:58:89:4f:c5:fa:14:54:89:
0a:91:49:64:d6:19:be:76:b9:e7:6b:42:38:ae:a4:
ec:08:31:75:c1:e7:20:8e:ba:86:f5:8b:c2:5b:37:
57:a0:95:0c:61:63:93:c9:ed:40:2f:c9:1a:a5:96:
83:f4:ef:d2:6b:ed:f5:5a:4f:a9:cb:93:64:46:e1:
63:f7:6f:e1:a9:51:6b:73:c8:7a:13:89:4c:bf:bc:
c7:77:cb:bf:0f:15:ae:20:7d:c1:74:82:5a:95:5d:
b8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:86:DC:35:90:3E:14:12:35:7E:3F:27:02:72:2F:42:F5:17:83:44
X509v3 Authority Key Identifier:
keyid:A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c0:56:27:df:58:01:d3:39:96:b5:20:88:de:1c:f6:1d:a1:
df:ba:36:ef:98:83:6f:5a:1a:29:12:15:12:33:55:b3:46:2c:
79:df:f9:1d:16:bb:21:59:ef:d0:3a:74:2f:e8:e3:4e:57:ee:
cb:e7:5f:f4:d1:cc:47:f2:36:ca:93:18:0c:76:4a:3c:8e:c0:
cb:bb:f9:66:8d:e0:24:87:87:c9:b4:b4:8f:07:93:11:96:1c:
7f:55:46:21:a2:07:b6:bc:74:4b:0c:d0:b3:08:db:49:9a:95:
bc:37:6c:03:bb:90:76:e1:c5:54:68:78:37:8f:fa:0b:6d:ab:
4a:b2:46:71:aa:f7:90:39:46:87:fc:b2:e8:d3:fd:e9:f5:64:
88:ec:83:66:28:bc:88:9a:97:66:fd:cb:87:ba:89:a7:75:e9:
22:cc:c2:f5:b8:71:3b:e3:d0:fe:0d:d8:f6:df:66:dc:ec:72:
23:b9:7f:aa:73:d3:cd:5b:d1:c5:57:01:24:79:80:46:8c:a8:
a3:72:d6:a0:8a:91:96:20:15:62:22:c9:de:c2:51:1c:4e:7e:
2f:b9:68:4d:df:32:95:e0:f5:e8:d5:a0:5a:56:27:7b:0a:7d:
d0:e4:8b:b8:cf:13:ef:cd:24:1a:9c:e6:9d:44:5c:58:64:ba:
b9:50:2c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:43:46 2026 by rpki-client