Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
File: o8-bZGUWkotdBsKoGestvA_pkgo.mft (raw, json)
Hash identifier: Wz17XVKzast0KHWd/XTXM+1rwh0rHRiRbLr/XBXMJq8=
Subject key identifier: 1D:31:BF:32:AA:5A:58:D8:FB:AA:31:1A:86:60:00:D0:65:FC:CE:7F
Authority key identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
Certificate issuer: /CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Certificate serial: 019F7218B384BA67756AEACABEC41B90252F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
Manifest number: 040A
Signing time: Fri 17 Jul 2026 22:00:49 +0000
Manifest this update: Fri 17 Jul 2026 22:00:49 +0000
Manifest next update: Sat 18 Jul 2026 22:00:49 +0000
Files and hashes: 1: 699-AVQHq9A-mOz16n5eWo61zOY.roa (hash: qmU7lIRPt6s/fJ1Asi4/dDcElLOynVYiN3n5hO5Ttcc=)
2: kp_i2pjZWCStZ6J6pQgyDWR7Sqg.roa (hash: LLIB6t+pAw1QpuEvAEpebhxvws4LvkK/fY8SsOFrje8=)
3: o8-bZGUWkotdBsKoGestvA_pkgo.crl (hash: cBjBrR7QjyQfNUlyI4TuewWHxhh1ElafFJuyPC208fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:18:b3:84:ba:67:75:6a:ea:ca:be:c4:1b:90:25:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Validity
Not Before: Jul 17 22:00:49 2026 GMT
Not After : Jul 18 22:00:49 2026 GMT
Subject: CN=1d31bf32aa5a58d8fbaa311a866000d065fcce7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c5:d0:40:84:84:e4:f5:2e:cd:9a:82:af:02:
36:09:ce:f2:5c:5f:52:f6:22:63:3b:30:a6:85:5e:
2a:67:a7:21:6c:9d:4d:73:4f:47:14:29:b8:1e:27:
ed:98:b3:8e:a3:2b:5d:4c:4c:f5:a9:b8:6f:5b:b4:
62:5e:dc:c7:05:a3:63:8d:5b:2b:36:b3:0c:69:7e:
8f:88:db:22:4d:83:74:9b:27:23:2c:23:71:9a:dc:
ab:cc:13:82:f9:11:9a:e9:cb:15:98:52:c2:3e:a8:
c6:bf:4c:3f:3c:90:e3:95:b8:94:8c:2e:27:a6:33:
f1:3b:0d:d6:a0:18:55:a1:14:0a:de:6d:26:9a:70:
fe:04:3c:d3:79:45:10:44:76:b5:6e:07:5e:36:a5:
95:e9:e2:59:e4:d5:c2:92:f4:2a:c6:f6:90:da:43:
99:93:5f:2e:2e:49:6c:ce:48:31:43:83:a4:b7:78:
cf:ae:3f:64:19:81:90:5a:37:cb:1b:a9:1f:b2:5c:
12:76:32:37:22:b3:22:16:85:a5:af:7c:61:45:aa:
b6:90:8a:e9:82:4d:11:2b:63:da:59:d3:91:1b:99:
6b:0b:8e:94:6e:bf:05:41:69:31:30:34:72:bc:c2:
95:96:25:7f:9f:ab:9f:ab:58:22:c8:74:37:10:de:
1f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:31:BF:32:AA:5A:58:D8:FB:AA:31:1A:86:60:00:D0:65:FC:CE:7F
X509v3 Authority Key Identifier:
keyid:A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4e:54:16:62:c9:cb:a8:27:7a:a0:dd:43:3c:f0:11:1e:65:
eb:d2:51:51:61:a0:c6:dd:77:50:24:35:fc:a6:3c:92:5a:13:
9c:b8:98:ea:8d:db:57:ce:e3:37:4f:e5:af:34:99:3f:d9:ce:
d2:ce:48:3a:6b:95:9f:c3:64:bc:a0:3d:50:16:4f:0e:c1:6e:
68:9c:77:5d:83:f0:1f:34:6c:dd:a6:73:70:7c:f4:68:85:5e:
38:13:bc:cc:3d:c8:a2:ef:7d:df:ac:bd:49:fc:38:9e:86:a7:
1f:12:19:b8:70:8f:3e:15:6f:bf:53:0f:c7:36:8a:78:4b:d9:
ce:48:e2:48:ad:09:55:11:ef:96:cc:3f:3b:e1:77:d9:e8:e4:
25:80:af:50:ba:bb:f6:50:bf:12:6e:e2:c4:80:8d:fb:6a:40:
af:1c:c0:37:d6:d5:69:de:49:44:33:0a:d2:cc:85:d6:6e:d2:
fa:43:0c:04:26:49:5b:98:58:f3:fe:f6:ae:ec:bd:6e:90:b4:
79:34:dd:85:59:8d:9b:5f:0c:24:68:8c:0c:50:65:c1:6f:a7:
13:82:0b:31:71:a8:94:30:3b:f3:e9:e4:d3:42:6b:a6:c8:30:
d4:4d:0d:39:5a:d1:5e:b0:25:7b:e0:7d:b1:02:10:f0:18:f8:
c9:df:21:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:16:40 2026 by rpki-client