Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
File: 8gLwqonAZ9ZjOLTVnSBSujmplEs.mft (raw, json)
Hash identifier: L2vlm1UOPZHVW3gg/YdygZHNXy4AvUBigGXteJlNfg8=
Subject key identifier: F9:BC:C7:FA:82:60:01:D1:E0:F1:13:F8:8C:14:F8:4A:ED:4E:36:0E
Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Certificate serial: 019E20915261B5731D1CD3A293804D83BFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
Manifest number: 086A
Signing time: Wed 13 May 2026 09:00:55 +0000
Manifest this update: Wed 13 May 2026 09:00:55 +0000
Manifest next update: Thu 14 May 2026 09:00:55 +0000
Files and hashes: 1: 8gLwqonAZ9ZjOLTVnSBSujmplEs.crl (hash: x7cpt/AHybbrh6nedYc0va+iHmhJmaM1GwliMuXHMM0=)
2: osv-bPTm7EkX2UpBKK6PsetzURk.roa (hash: YSsmgcD36aEYgXK+zsIFKY4sSvKY/KyPq4ODZAfcm88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:52:61:b5:73:1d:1c:d3:a2:93:80:4d:83:bf:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Validity
Not Before: May 13 09:00:55 2026 GMT
Not After : May 14 09:00:55 2026 GMT
Subject: CN=f9bcc7fa826001d1e0f113f88c14f84aed4e360e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:d1:98:32:e5:10:dd:0b:ce:e8:c0:93:57:
dd:9a:a8:78:1d:3a:4c:e4:83:8c:f6:ad:5c:39:4a:
3e:7d:f3:fe:47:25:c8:2e:1c:8d:15:f7:88:bd:e1:
14:d4:e7:8e:e4:a8:49:1a:2e:1b:53:3a:e1:65:c4:
64:1c:4f:97:ea:94:f4:34:58:00:e6:6f:2a:1f:cf:
a2:75:b6:45:bc:3a:ed:56:b1:21:99:20:02:1a:a7:
90:dc:95:33:1e:eb:09:c0:a3:03:70:b8:48:d8:0e:
78:4c:8f:60:d0:41:30:39:a2:cd:d7:79:a7:42:45:
bb:f6:d8:36:bf:bd:bd:4d:65:35:a5:58:d4:43:49:
58:12:88:55:31:2e:d3:32:fb:10:15:6a:11:b0:bd:
71:03:90:85:d6:d7:b1:89:cb:96:b5:5d:a8:43:8e:
76:4f:ea:32:08:ca:4a:2b:f9:9a:ac:ee:52:bb:34:
36:ec:56:63:b5:a4:bd:97:16:21:c9:e9:fd:16:a4:
ed:bd:05:1f:28:1c:86:90:00:e2:17:d5:f2:34:71:
9a:4e:ba:6d:af:b7:aa:bd:44:70:96:0e:66:e4:c9:
8c:32:ea:b8:14:16:07:50:b4:d7:06:1c:be:b7:fc:
ef:67:3d:11:59:c0:fd:94:18:20:a2:dd:08:9d:b8:
f5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BC:C7:FA:82:60:01:D1:E0:F1:13:F8:8C:14:F8:4A:ED:4E:36:0E
X509v3 Authority Key Identifier:
keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:19:5c:2e:91:13:28:52:27:3c:ae:0f:8d:ce:9e:07:dc:34:
82:d1:1a:d9:e3:24:28:28:9a:2c:11:34:37:31:34:43:5b:aa:
93:ca:e6:cc:00:34:e8:41:68:96:fa:5f:ba:8e:be:d4:f8:0e:
4f:87:d1:ec:78:3b:5d:cc:5d:21:9f:73:6d:1c:aa:c1:f2:8e:
ac:bd:5f:34:2b:fb:e8:82:1c:1f:94:27:af:c9:73:d4:95:dc:
58:4a:48:76:21:05:3b:49:13:93:35:24:3f:89:6a:d7:e5:ab:
8c:8a:c4:b8:28:cc:85:d6:95:eb:f2:8c:7f:ea:45:a1:9e:29:
bf:03:48:26:22:45:86:0d:dc:92:d2:12:9e:eb:2d:b1:69:2c:
99:90:f2:00:4f:cf:54:cc:f6:b8:c3:46:fb:13:aa:b3:d9:a3:
3f:42:2b:5d:27:88:75:3c:fc:e2:f6:22:94:14:d9:fd:16:4d:
dc:a4:2b:e1:8d:98:af:9e:19:f4:6e:11:5e:88:55:cd:e3:4e:
cc:dd:97:e9:31:8b:24:d8:d4:bb:ba:d5:5a:58:77:62:0a:23:
f9:e8:82:25:a6:b9:79:32:bc:f2:d4:48:ed:fb:22:8a:82:26:
3c:82:91:77:28:b1:89:58:ff:25:70:9c:0e:86:42:aa:63:9a:
e4:f5:db:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:29:03 2026 by rpki-client