Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
File: 8gLwqonAZ9ZjOLTVnSBSujmplEs.mft (raw, json)
Hash identifier: d5Wb3GOS2Ecg/pRGYG0bfHPgKiDJeencGsBYRypY4vU=
Subject key identifier: FF:0A:3F:21:2B:FF:38:43:23:BB:35:8B:4B:D0:CF:FD:0D:C9:4E:51
Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Certificate serial: 01A0016ECC6D6F7F5C4F838C9FABF2CBC40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
Manifest number: 0963
Signing time: Fri 14 Aug 2026 18:00:33 +0000
Manifest this update: Fri 14 Aug 2026 18:00:33 +0000
Manifest next update: Sat 15 Aug 2026 18:00:33 +0000
Files and hashes: 1: 8gLwqonAZ9ZjOLTVnSBSujmplEs.crl (hash: 1J1HVLiuS3Yw7K7Fv+AhKelkPsTTIncncVdXMklSUmQ=)
2: osv-bPTm7EkX2UpBKK6PsetzURk.roa (hash: YSsmgcD36aEYgXK+zsIFKY4sSvKY/KyPq4ODZAfcm88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:cc:6d:6f:7f:5c:4f:83:8c:9f:ab:f2:cb:c4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Validity
Not Before: Aug 14 18:00:33 2026 GMT
Not After : Aug 15 18:00:33 2026 GMT
Subject: CN=ff0a3f212bff384323bb358b4bd0cffd0dc94e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:54:49:19:43:04:98:ab:2c:b9:b4:2d:a6:36:
0c:30:f5:d3:65:03:53:7f:98:84:55:b2:b2:38:fe:
a9:a8:f6:5a:63:b9:36:dd:b5:f7:df:41:df:8e:27:
03:61:41:8f:27:6a:61:49:54:17:00:f8:71:eb:fd:
4e:93:f8:39:f4:7d:19:ac:4b:b6:ad:a1:07:7e:fa:
6a:30:52:d2:ce:b0:e1:f9:41:3c:12:39:aa:63:c1:
15:dd:fc:d5:91:f5:f9:b2:fe:f4:82:a2:fd:2e:f7:
24:27:ae:50:ee:88:a0:37:dd:69:7e:ae:68:9b:38:
a8:d4:cf:8d:d2:a5:83:65:c2:b8:9d:97:24:a9:2e:
46:19:50:5b:3b:ff:4e:55:d2:b5:cd:04:8a:12:02:
83:9e:83:59:59:d5:11:44:b4:0d:7c:67:61:f3:65:
20:89:f1:4f:6e:76:9e:e2:1b:cb:1b:d4:57:20:92:
f3:6c:3d:a0:52:fd:a9:3a:81:52:0b:98:59:b9:b4:
ac:08:fc:e3:76:ff:6d:25:b5:ac:a2:e1:27:9a:87:
c9:f5:be:23:d7:d2:e0:04:e3:0b:cf:1c:a5:2e:0b:
06:c4:5a:22:3c:1d:a3:c4:e6:a5:4d:e5:11:91:7f:
1e:8a:a9:5c:ad:ff:3e:19:45:b0:b4:99:60:40:06:
8d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0A:3F:21:2B:FF:38:43:23:BB:35:8B:4B:D0:CF:FD:0D:C9:4E:51
X509v3 Authority Key Identifier:
keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7e:a6:37:a3:f8:ec:c3:39:80:18:c1:e6:9e:f5:8e:95:6d:
01:dd:2a:07:46:48:0c:ef:fe:4b:a5:2d:63:a4:00:f8:fd:ae:
4d:b3:99:40:ef:70:eb:61:02:b2:39:2f:23:76:e3:ef:9f:b1:
67:ea:17:f7:d8:98:b7:72:2f:93:20:a7:62:29:36:b5:8d:6b:
91:e3:32:75:6c:b2:1c:5c:d0:f0:79:f1:1e:e6:78:81:08:b9:
98:d9:ed:e3:0b:12:b0:48:80:e7:3d:cc:b5:02:90:20:6c:21:
93:b9:a6:0b:69:3a:7d:52:c6:3e:5b:fc:28:58:89:f5:df:e9:
04:e7:09:c6:a0:6d:46:1b:af:41:ef:74:d9:cf:9c:c3:0f:ae:
6b:88:e1:45:f2:e5:82:25:17:fa:5e:95:3d:f4:68:06:e8:38:
eb:10:e1:c3:43:54:db:4d:26:f3:91:d6:f0:a4:e2:31:72:1e:
bb:f5:d8:b9:f9:10:f5:18:8d:4c:f3:41:5f:74:2e:f9:9c:75:
37:e7:c0:83:80:93:f3:b5:ab:56:43:39:2c:84:f0:7e:95:20:
57:79:c1:c0:50:d1:4d:36:f0:7a:13:42:7f:9d:26:50:41:2a:
87:17:d9:ad:55:e7:15:6e:cf:c9:cb:f8:ca:93:19:f7:fc:f0:
25:b8:00:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:25 2026 by rpki-client