Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
File: 8gLwqonAZ9ZjOLTVnSBSujmplEs.mft (raw, json)
Hash identifier: WJYzrWkD0jSx96gxQ1E1sekKd8j5sumFuGfJy1OiHmY=
Subject key identifier: 08:92:97:0F:F4:AE:3D:0D:3A:F1:53:17:BE:71:05:F7:72:92:69:92
Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Certificate serial: 019F916C4CA8027E5F8F202A3730FAB20741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
Manifest number: 0929
Signing time: Fri 24 Jul 2026 00:00:21 +0000
Manifest this update: Fri 24 Jul 2026 00:00:21 +0000
Manifest next update: Sat 25 Jul 2026 00:00:21 +0000
Files and hashes: 1: 8gLwqonAZ9ZjOLTVnSBSujmplEs.crl (hash: PXdT5Xl9ugpq5opfAZszF+ZtzLZtOzl063Ex0oVW67M=)
2: osv-bPTm7EkX2UpBKK6PsetzURk.roa (hash: YSsmgcD36aEYgXK+zsIFKY4sSvKY/KyPq4ODZAfcm88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:4c:a8:02:7e:5f:8f:20:2a:37:30:fa:b2:07:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Validity
Not Before: Jul 24 00:00:21 2026 GMT
Not After : Jul 25 00:00:21 2026 GMT
Subject: CN=0892970ff4ae3d0d3af15317be7105f772926992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d8:93:73:af:7b:3c:2a:68:2d:6f:e6:83:05:
af:7e:f6:e8:cd:3e:7e:79:7b:a8:01:7b:29:a6:91:
b0:a3:e0:1b:23:be:e7:0b:63:ca:fb:ef:0b:29:c7:
ae:92:a2:af:70:ca:4a:df:22:d4:be:45:55:86:45:
a6:e7:61:2b:08:4e:fd:2c:c2:59:d6:30:e5:2b:d8:
15:bf:6f:e5:af:a6:f0:7d:33:38:f8:82:1b:e7:77:
bd:4c:09:dd:8f:d0:3f:17:c6:95:96:18:9b:c1:70:
d7:dd:5b:7e:26:b9:39:33:41:da:45:f5:40:75:ba:
5d:74:a1:23:86:61:18:72:e2:b6:4a:1e:09:d1:42:
be:06:1e:21:fe:13:01:8a:d1:88:d4:e4:d0:1a:28:
f0:1d:de:d6:56:a6:95:31:b5:78:70:f2:37:64:78:
77:67:2b:ac:aa:5d:ae:bb:c0:82:a8:03:45:4b:dc:
97:8b:c6:90:d4:d7:1b:2b:77:c4:53:2a:b3:82:75:
37:f2:4a:b5:88:19:7b:70:87:2e:17:28:db:4c:fb:
d9:88:d5:13:26:94:df:7b:81:57:de:d4:ba:f0:3d:
a9:18:b5:89:0d:b3:b0:6c:0d:66:a2:af:cd:d1:5b:
12:36:89:f9:b2:86:12:3e:6e:db:12:7c:71:ca:46:
d7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:92:97:0F:F4:AE:3D:0D:3A:F1:53:17:BE:71:05:F7:72:92:69:92
X509v3 Authority Key Identifier:
keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2e:14:80:71:25:e8:01:e2:22:18:0d:35:5a:da:ea:17:fa:
5a:16:4e:43:7e:3d:2c:fb:bd:2a:15:eb:8c:82:c5:0e:9a:38:
9b:74:90:b7:81:f9:27:39:85:02:09:28:f3:73:c7:8e:79:5f:
54:26:a3:cd:06:96:ff:b8:69:f9:ab:51:7c:72:67:7d:17:59:
fe:5e:44:5c:a4:92:03:8f:49:c2:42:0d:2b:09:97:a5:10:54:
d7:34:64:48:30:4b:14:a1:35:5f:90:a0:dd:00:18:72:7b:5f:
8e:97:12:e7:06:67:f3:8d:2f:35:ce:68:33:1d:5a:ee:1a:79:
05:68:5e:88:b4:a6:ed:c8:2d:9c:04:58:ef:6a:e4:0e:9c:bc:
fe:20:e4:52:2d:2b:81:91:88:93:d3:7d:8a:7a:6e:3e:f4:6d:
2c:93:a3:8f:ce:10:85:8b:42:5c:af:6f:1e:bd:df:f4:3d:b4:
bf:15:43:10:c1:6b:4b:a2:3b:4b:7f:91:7d:f5:a5:da:7d:54:
a3:a7:9b:89:1e:9c:23:ec:e0:03:24:b9:af:d1:83:b9:12:b6:
8e:d0:cf:b5:8f:07:23:5f:db:1b:47:a0:7c:a5:bd:0b:7d:d6:
12:db:7d:95:83:0c:8b:29:65:d5:e6:17:ae:56:74:bb:36:60:
21:fe:58:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:42:31 2026 by rpki-client