Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
File: 8gLwqonAZ9ZjOLTVnSBSujmplEs.mft (raw, json)
Hash identifier: RG7zgs5bfUyqKDRttLtaxp5MHXHpRnb81dydqnFR/bE=
Subject key identifier: B3:D4:8B:EE:9C:1B:1C:BF:56:08:98:76:0E:9F:00:5E:11:E2:B1:CC
Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Certificate serial: 01A0D3EF55E3941B8B201D92DAB2D820D557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
Manifest number: 09D0
Signing time: Thu 24 Sep 2026 15:01:12 +0000
Manifest this update: Thu 24 Sep 2026 15:01:12 +0000
Manifest next update: Fri 25 Sep 2026 15:01:12 +0000
Files and hashes: 1: 8gLwqonAZ9ZjOLTVnSBSujmplEs.crl (hash: 7/lUQYojNASHXsMRVDOSo9ECDg/0bBZJLW4X693oi8E=)
2: osv-bPTm7EkX2UpBKK6PsetzURk.roa (hash: YSsmgcD36aEYgXK+zsIFKY4sSvKY/KyPq4ODZAfcm88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:55:e3:94:1b:8b:20:1d:92:da:b2:d8:20:d5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Validity
Not Before: Sep 24 15:01:12 2026 GMT
Not After : Sep 25 15:01:12 2026 GMT
Subject: CN=b3d48bee9c1b1cbf560898760e9f005e11e2b1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:a4:a4:cb:20:da:58:ef:22:24:1b:6f:fe:
c3:a3:de:08:15:4d:3d:8f:44:ad:55:05:2d:8c:59:
68:14:ea:16:92:88:aa:36:23:e0:2e:38:fb:1a:d7:
03:66:34:d8:22:ea:d5:2e:ac:23:d9:3a:45:b5:6b:
ad:4b:22:6e:1c:af:82:0a:b9:fa:28:a7:3b:50:27:
cf:d7:a9:79:64:44:9e:30:cf:e3:32:8c:c9:76:46:
fa:9c:a1:7c:7a:e3:75:30:73:b7:6f:27:0e:2a:e3:
a5:c7:6e:50:25:73:60:33:5c:19:d4:0b:cf:9d:ce:
67:de:8d:4a:15:c1:9f:a1:65:e4:17:19:ef:02:b2:
65:e6:ef:f2:28:65:36:e7:5a:71:ba:6e:94:d6:6a:
07:a4:8d:25:86:fb:55:0b:b6:79:06:83:08:11:8c:
99:b0:ad:15:7c:6a:90:43:a3:47:ee:4a:5f:ce:92:
76:b8:4d:38:52:8b:44:b0:84:b3:9c:df:bf:de:4c:
68:c7:89:43:e0:32:b9:d6:b1:72:5f:3e:14:6a:43:
43:6b:f4:18:4c:6e:f5:ba:d5:13:30:90:35:84:bf:
03:b5:c7:d1:e3:43:ff:c3:51:bb:cd:41:27:bf:22:
21:20:18:34:28:bc:bb:44:12:b0:b3:11:00:69:67:
a1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D4:8B:EE:9C:1B:1C:BF:56:08:98:76:0E:9F:00:5E:11:E2:B1:CC
X509v3 Authority Key Identifier:
keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:34:e5:24:e7:a2:53:e4:ad:77:e4:3b:52:45:0a:39:71:5d:
da:2a:8d:43:88:63:4f:30:ed:a6:3f:f4:cc:c4:21:e9:49:9a:
07:94:ca:82:f5:c5:ce:84:ba:7a:d5:a3:1b:57:93:5f:02:db:
6b:b5:93:73:12:25:81:6b:7a:d1:2d:45:c8:92:c7:a1:25:fd:
ad:d7:71:6f:61:26:cd:24:c5:76:4a:79:cd:24:3d:ef:6e:db:
3d:ea:63:37:ba:58:e7:22:f0:a2:71:d3:58:74:81:bc:b6:70:
6e:61:4a:f4:cc:e4:58:5c:bb:36:f8:ca:f6:57:4d:0e:21:6c:
ed:a0:4b:b0:e9:1f:35:9d:01:1d:9e:f1:39:61:8f:c7:ac:14:
09:65:45:aa:5e:97:7a:33:fb:10:2f:73:3e:eb:53:99:bf:d2:
71:28:58:cd:4f:77:cf:01:80:f5:5c:83:a6:b7:91:c3:c0:ef:
39:7f:80:1f:14:5f:ec:15:2e:21:0d:6e:f9:f6:f9:5b:9d:6b:
ed:6a:90:98:8a:4a:65:7e:29:d3:42:d0:bc:19:9e:b2:3a:db:
e8:73:2f:c6:58:a1:b6:a6:de:1b:e6:bd:d6:ed:43:eb:11:9e:
92:a7:df:51:6e:fc:dc:3d:fe:c1:6f:32:c9:5a:4f:a9:da:d8:
f8:a6:36:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT71XjlBuLIB2S2rLYINVXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMDJmMGFhODljMDY3ZDY2MzM4YjRkNTlkMjA1MmJhMzlh
OTk0NGIwHhcNMjYwOTI0MTUwMTEyWhcNMjYwOTI1MTUwMTEyWjAzMTEwLwYDVQQD
EyhiM2Q0OGJlZTljMWIxY2JmNTYwODk4NzYwZTlmMDA1ZTExZTJiMWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPikpMsg2ljvIiQbb/7Do94IFU09
j0StVQUtjFloFOoWkoiqNiPgLjj7GtcDZjTYIurVLqwj2TpFtWutSyJuHK+CCrn6
KKc7UCfP16l5ZESeMM/jMozJdkb6nKF8euN1MHO3bycOKuOlx25QJXNgM1wZ1AvP
nc5n3o1KFcGfoWXkFxnvArJl5u/yKGU251pxum6U1moHpI0lhvtVC7Z5BoMIEYyZ
sK0VfGqQQ6NH7kpfzpJ2uE04UotEsISznN+/3kxox4lD4DK51rFyXz4UakNDa/QY
TG71utUTMJA1hL8DtcfR40P/w1G7zUEnvyIhIBg0KLy7RBKwsxEAaWehTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPUi+6cGxy/VgiYdg6fAF4R4rHMMB8GA1UdIwQY
MBaAFPIC8KqJwGfWYzi01Z0gUro5qZRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGIt
ZjYyNTcwMGU4YTkwLzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGItZjYyNTcwMGU4YTkw
LzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADTlJOei
U+Std+Q7UkUKOXFd2iqNQ4hjTzDtpj/0zMQh6UmaB5TKgvXFzoS6etWjG1eTXwLb
a7WTcxIlgWt60S1FyJLHoSX9rddxb2EmzSTFdkp5zSQ9727bPepjN7pY5yLwonHT
WHSBvLZwbmFK9MzkWFy7NvjK9ldNDiFs7aBLsOkfNZ0BHZ7xOWGPx6wUCWVFql6X
ejP7EC9zPutTmb/ScShYzU93zwGA9VyDpreRw8DvOX+AHxRf7BUuIQ1u+fb5W51r
7WqQmIpKZX4p00LQvBmesjrb6HMvxlihtqbeG+a91u1D6xGekqffUW783D3+wW8y
yVpPqdrY+KY2uA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:23:35 2026 by rpki-client