Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
File: 8gLwqonAZ9ZjOLTVnSBSujmplEs.mft (raw, json)
Hash identifier: tWjmpzVs44xB3xpJ+FpJN+LVYkMPxm1LI3FFTBcOF8M=
Subject key identifier: B9:3B:91:0F:F6:D2:C2:40:93:3B:61:CC:87:D9:70:4D:F5:AB:20:4D
Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Certificate serial: 01A0E73F28166F5DAA457041E10DC134BF77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
Manifest number: 09DA
Signing time: Mon 28 Sep 2026 09:01:10 +0000
Manifest this update: Mon 28 Sep 2026 09:01:10 +0000
Manifest next update: Tue 29 Sep 2026 09:01:10 +0000
Files and hashes: 1: 8gLwqonAZ9ZjOLTVnSBSujmplEs.crl (hash: CJYjLMRa4ecYV1ygCgmt67AVMYU/v375mzJNcxVSEyo=)
2: osv-bPTm7EkX2UpBKK6PsetzURk.roa (hash: YSsmgcD36aEYgXK+zsIFKY4sSvKY/KyPq4ODZAfcm88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:28:16:6f:5d:aa:45:70:41:e1:0d:c1:34:bf:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Validity
Not Before: Sep 28 09:01:10 2026 GMT
Not After : Sep 29 09:01:10 2026 GMT
Subject: CN=b93b910ff6d2c240933b61cc87d9704df5ab204d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:f6:36:9a:be:d0:ec:c2:ff:72:59:62:58:
58:11:e3:21:32:9d:d2:a6:ca:23:a2:b4:fb:f5:f3:
b3:ea:cc:55:02:b0:23:dc:fa:8a:9b:da:bd:f0:fa:
fa:65:3e:03:db:01:e3:11:58:2a:30:f8:80:98:1c:
4f:ce:91:51:36:f4:f3:25:0d:3a:30:52:64:1e:6a:
29:60:50:61:f8:8e:8c:31:bf:2c:8a:31:94:79:fa:
c0:e1:b6:c5:b9:d0:08:20:05:d9:d7:c1:98:e6:df:
db:d9:3b:e0:3b:70:76:1c:19:fc:a0:c5:af:50:9e:
12:db:7c:ea:60:84:bc:b9:48:ec:9c:c4:c3:9f:3f:
ea:44:ec:c4:a0:80:54:39:21:e0:a5:5c:5a:99:7b:
dd:c4:34:ce:35:f8:f9:92:aa:32:bd:67:80:1d:ef:
2c:33:3b:0f:ee:d9:8f:c8:a4:1a:83:26:96:e7:19:
71:4e:8b:68:4a:00:15:d6:b2:b3:55:c5:b6:74:0f:
e5:ea:d7:2c:19:0b:ec:eb:6f:85:a0:da:c4:ce:46:
97:31:fb:8c:48:2f:2d:67:9c:65:4c:67:e1:6b:2f:
9a:a5:32:fc:9b:69:0d:50:b6:7e:41:f8:1b:e7:8e:
9d:57:b2:3d:87:83:48:d2:f6:16:bb:34:d1:1d:a6:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3B:91:0F:F6:D2:C2:40:93:3B:61:CC:87:D9:70:4D:F5:AB:20:4D
X509v3 Authority Key Identifier:
keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9e:47:50:de:9f:b1:92:5e:fb:51:4a:c2:45:83:9e:9b:17:
a6:cd:21:2c:bb:d7:0b:7c:b6:db:59:23:9c:7e:8f:b1:c1:6d:
58:f1:29:34:bc:e5:0b:5b:d7:8d:ed:f1:43:4c:f6:50:67:3c:
11:39:9e:20:7a:70:ec:0b:2c:17:87:cb:3d:92:4e:62:cd:e5:
62:53:65:86:54:11:41:3c:d9:3b:cf:8f:75:c5:cb:96:d3:e8:
7a:86:62:09:c2:ba:8d:ad:21:3e:85:60:86:a6:7d:a7:c6:9e:
a7:40:a6:3d:aa:22:07:6b:29:45:97:67:7d:b3:0e:51:69:f8:
2f:1c:c5:61:45:23:a3:24:af:b4:f5:8b:e2:c9:93:f6:74:52:
64:15:a2:2c:35:55:c0:72:8b:e1:d8:c0:f9:47:ce:ef:b5:88:
20:e9:b0:44:74:a3:55:15:04:4a:5e:10:d9:f6:41:33:07:12:
82:b9:b2:d4:6e:43:15:ff:2e:4b:4c:40:21:44:ea:63:c0:f3:
e6:ac:3e:bc:69:00:ce:27:3f:d6:06:56:bc:19:52:8c:36:06:
a3:03:ea:8e:19:8b:01:45:e6:23:b5:a4:2a:7b:95:3d:cd:85:
b9:53:43:f5:68:4e:0f:af:3a:45:c9:43:7a:86:4b:77:5e:a0:
9e:af:1d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:23:19 2026 by rpki-client