Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
File: 8gLwqonAZ9ZjOLTVnSBSujmplEs.mft (raw, json)
Hash identifier: g/w4wqxyKS9ae19gc73vZz1DYIhsfHHSYBghgAQnqnk=
Subject key identifier: 46:2A:FA:0F:C9:F2:61:E9:1C:24:BF:D6:8A:BE:D4:40:7F:C1:5D:3C
Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Certificate serial: 019D296185AFD0CD3293658B9F97FDAAB473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
Manifest number: 07EA
Signing time: Thu 26 Mar 2026 09:02:30 +0000
Manifest this update: Thu 26 Mar 2026 09:02:30 +0000
Manifest next update: Fri 27 Mar 2026 09:02:30 +0000
Files and hashes: 1: 8gLwqonAZ9ZjOLTVnSBSujmplEs.crl (hash: Yvk8zxK7Gzzv3d9EgxKikAZWdR7k17Y16ckNvEGX3mw=)
2: osv-bPTm7EkX2UpBKK6PsetzURk.roa (hash: YSsmgcD36aEYgXK+zsIFKY4sSvKY/KyPq4ODZAfcm88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:85:af:d0:cd:32:93:65:8b:9f:97:fd:aa:b4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Validity
Not Before: Mar 26 09:02:30 2026 GMT
Not After : Mar 27 09:02:30 2026 GMT
Subject: CN=462afa0fc9f261e91c24bfd68abed4407fc15d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:0d:4d:1b:eb:fc:a6:59:74:81:96:e9:22:
ae:2b:61:b2:13:28:57:fa:3f:33:e0:1d:d6:a0:81:
0f:7d:06:bb:91:07:50:3a:70:96:9d:cc:65:19:25:
39:b8:44:3f:8e:2d:54:96:c0:19:d6:24:3f:f9:a8:
6c:a4:46:61:e0:6f:37:8e:8b:25:53:18:8e:69:8a:
81:dc:0c:59:44:88:95:3b:69:99:d4:c8:84:a4:01:
a9:f6:78:4f:e3:88:c3:63:82:48:b4:38:c3:57:b5:
36:e4:f4:bd:18:6c:77:c1:ce:fd:99:50:4f:5e:73:
dd:af:f7:ea:96:55:a9:2d:75:37:9f:cd:eb:75:87:
e4:74:5a:72:94:c1:6e:90:a9:88:83:76:54:d6:ec:
73:f7:34:8f:f7:cc:14:9c:e2:5e:d7:50:60:d4:86:
fd:09:9c:03:eb:1f:85:30:7c:8d:c4:ee:6e:de:0b:
79:fe:37:a4:3a:1a:e6:dc:51:21:e3:db:cf:34:ee:
ee:a1:02:3a:d3:d5:ef:d0:f6:b8:89:21:4f:c0:fb:
a8:95:0d:8f:39:d8:c4:46:b5:6f:5a:fa:a7:3a:02:
f6:03:2f:63:24:52:3e:51:ef:03:87:7d:1b:68:f2:
fe:3f:45:f3:9f:4e:ce:16:e5:4f:71:24:c4:2f:04:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2A:FA:0F:C9:F2:61:E9:1C:24:BF:D6:8A:BE:D4:40:7F:C1:5D:3C
X509v3 Authority Key Identifier:
keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:95:56:78:d1:0a:d6:e9:e6:a5:fc:e2:ee:3f:68:d6:55:e1:
3b:d5:fe:1f:71:11:28:e7:63:4a:76:fd:79:8a:a0:82:50:ce:
ac:65:a7:69:d2:26:27:f5:23:6e:b1:15:79:1c:7d:5e:ad:7c:
84:c6:6c:f6:dd:7b:8b:ea:3d:47:20:42:66:9d:3e:fb:ed:13:
07:2c:ce:b2:6b:86:47:13:23:24:41:1a:0c:31:47:2b:71:6e:
98:d2:c1:65:e9:b7:25:5c:68:94:ef:f4:13:72:b2:69:ea:bd:
87:fb:ed:03:68:c2:37:d0:5e:ad:c6:17:af:76:d3:b5:ac:85:
f4:86:49:4c:5d:3b:92:30:0b:08:a9:f5:12:b4:c8:10:d7:82:
ff:5d:5f:7c:eb:9c:09:31:6a:e1:8d:65:f2:90:7e:c5:c8:4a:
96:9a:e2:57:e4:20:2b:35:a1:f6:cb:64:71:f8:2c:26:f2:7d:
f7:7b:73:09:45:95:12:79:8e:35:50:2b:d6:82:9c:67:ee:74:
2a:ce:2e:36:8a:88:91:0b:ba:e4:5b:9f:31:68:0f:ea:84:7e:
80:c1:33:26:7b:e5:a4:f7:6d:3f:96:d6:d0:57:b5:ef:d0:f9:
60:64:db:93:f1:f2:20:a9:c2:f6:9b:ae:be:e2:e6:ed:3f:ba:
2a:1d:62:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:05 2026 by rpki-client