Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
File: 8gLwqonAZ9ZjOLTVnSBSujmplEs.mft (raw, json)
Hash identifier: IDQ/NElyJvsg5z4LHWDzO5IAUDQ9IpTivCdxFwTNZFY=
Subject key identifier: EC:BD:05:1D:B8:95:50:51:6E:1A:C2:98:BE:8B:86:7B:80:C3:F8:37
Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Certificate serial: 019D38D326436BEDBE23FF041CC5AF094DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
Manifest number: 07F2
Signing time: Sun 29 Mar 2026 09:00:55 +0000
Manifest this update: Sun 29 Mar 2026 09:00:55 +0000
Manifest next update: Mon 30 Mar 2026 09:00:55 +0000
Files and hashes: 1: 8gLwqonAZ9ZjOLTVnSBSujmplEs.crl (hash: ArNOXE83qhQIzUmKcffe2c6iFx0xWWlo3eNG5wxHB20=)
2: osv-bPTm7EkX2UpBKK6PsetzURk.roa (hash: YSsmgcD36aEYgXK+zsIFKY4sSvKY/KyPq4ODZAfcm88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:26:43:6b:ed:be:23:ff:04:1c:c5:af:09:4d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Validity
Not Before: Mar 29 09:00:55 2026 GMT
Not After : Mar 30 09:00:55 2026 GMT
Subject: CN=ecbd051db89550516e1ac298be8b867b80c3f837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:33:a3:de:57:20:c5:5e:97:d9:1b:47:8b:4c:
98:ae:74:ef:15:66:db:1a:ed:02:4e:16:e1:f0:05:
30:24:b7:91:a1:a8:e0:97:03:8a:71:af:0b:ac:d3:
3f:7c:11:ae:bf:9e:f2:a2:f9:1c:bc:6f:fe:6d:3a:
97:cb:c1:d2:ac:7e:d3:94:be:a0:6b:af:47:5c:2a:
de:9a:b3:62:ea:ee:98:46:7b:b2:19:6a:2d:f2:ed:
69:0b:f9:d0:c1:2f:c3:dc:15:17:97:b9:85:92:65:
e0:c2:dc:47:3a:8b:b8:7b:c2:d5:94:96:97:44:59:
ca:47:10:62:cb:48:46:32:bc:d3:f9:b4:60:a6:44:
96:f7:99:29:89:4b:72:44:b8:58:2c:c6:3e:c5:6a:
a9:18:44:2b:24:84:38:2f:d4:62:85:85:da:a0:cb:
b6:86:49:a3:c2:8d:54:da:84:c0:97:a8:3d:25:b3:
92:b0:62:69:58:fc:e7:5e:ab:c1:64:c8:27:86:b5:
59:68:bd:dd:3f:38:13:00:a4:05:05:e1:e0:84:7d:
a1:df:c2:4d:53:27:06:e9:d7:ec:02:6a:8a:a5:48:
24:5d:09:43:ca:8a:b4:92:2b:5a:e0:a5:04:78:5b:
d2:68:9c:3b:0b:c2:57:1c:2c:ef:da:82:fa:24:e8:
3b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BD:05:1D:B8:95:50:51:6E:1A:C2:98:BE:8B:86:7B:80:C3:F8:37
X509v3 Authority Key Identifier:
keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:26:a8:87:85:8f:50:d7:0d:76:68:3e:f1:b5:28:cd:5f:b8:
7b:16:39:c3:3d:b5:17:33:25:c1:d4:4f:7b:8f:7d:fd:3c:53:
18:89:91:9e:a6:2c:ce:c1:47:23:7a:68:e1:22:33:44:ff:5b:
5d:23:af:76:85:c0:b6:d9:68:73:03:12:36:9c:78:6b:97:6f:
01:31:a3:0d:a8:c3:6a:78:4d:7d:1e:45:9a:0f:14:ec:4d:39:
9c:72:1c:3a:43:1a:30:8b:aa:4a:51:6f:f8:be:99:89:95:07:
1e:5c:bd:04:c3:5c:ff:df:46:cc:33:0d:58:42:1d:d6:c7:a8:
52:a6:09:15:a4:d1:7e:4d:12:c4:8e:a4:36:cb:29:07:05:71:
8c:31:fa:f2:76:1b:28:60:b9:34:a6:10:50:f9:13:47:53:65:
1b:8c:0d:53:86:e1:ed:f5:40:33:88:b6:57:56:b6:39:6e:41:
aa:b5:16:10:67:82:d3:60:a1:3c:fd:54:8a:6f:27:ec:83:03:
d1:8f:54:f5:37:6d:3c:37:87:1a:86:73:59:e5:6c:44:01:a4:
87:f0:e8:d7:09:d3:49:e3:d1:72:3b:d1:36:e3:f6:22:8c:b4:
35:f6:4f:b9:17:93:5a:af:ed:61:9a:37:77:43:1a:ff:01:7c:
40:a6:e2:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040yZDa+2+I/8EHMWvCU3sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMDJmMGFhODljMDY3ZDY2MzM4YjRkNTlkMjA1MmJhMzlh
OTk0NGIwHhcNMjYwMzI5MDkwMDU1WhcNMjYwMzMwMDkwMDU1WjAzMTEwLwYDVQQD
EyhlY2JkMDUxZGI4OTU1MDUxNmUxYWMyOThiZThiODY3YjgwYzNmODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zOj3lcgxV6X2RtHi0yYrnTvFWbb
Gu0CThbh8AUwJLeRoajglwOKca8LrNM/fBGuv57yovkcvG/+bTqXy8HSrH7TlL6g
a69HXCremrNi6u6YRnuyGWot8u1pC/nQwS/D3BUXl7mFkmXgwtxHOou4e8LVlJaX
RFnKRxBiy0hGMrzT+bRgpkSW95kpiUtyRLhYLMY+xWqpGEQrJIQ4L9RihYXaoMu2
hkmjwo1U2oTAl6g9JbOSsGJpWPznXqvBZMgnhrVZaL3dPzgTAKQFBeHghH2h38JN
UycG6dfsAmqKpUgkXQlDyoq0kita4KUEeFvSaJw7C8JXHCzv2oL6JOg7YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOy9BR24lVBRbhrCmL6LhnuAw/g3MB8GA1UdIwQY
MBaAFPIC8KqJwGfWYzi01Z0gUro5qZRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGIt
ZjYyNTcwMGU4YTkwLzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGItZjYyNTcwMGU4YTkw
LzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyaoh4WP
UNcNdmg+8bUozV+4exY5wz21FzMlwdRPe499/TxTGImRnqYszsFHI3po4SIzRP9b
XSOvdoXAttlocwMSNpx4a5dvATGjDajDanhNfR5Fmg8U7E05nHIcOkMaMIuqSlFv
+L6ZiZUHHly9BMNc/99GzDMNWEId1seoUqYJFaTRfk0SxI6kNsspBwVxjDH68nYb
KGC5NKYQUPkTR1NlG4wNU4bh7fVAM4i2V1a2OW5BqrUWEGeC02ChPP1Uim8n7IMD
0Y9U9TdtPDeHGoZzWeVsRAGkh/Do1wnTSePRcjvRNuP2Ioy0NfZPuReTWq/tYZo3
d0Ma/wF8QKbihg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:18 2026 by rpki-client