Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
File: 8gLwqonAZ9ZjOLTVnSBSujmplEs.mft (raw, json)
Hash identifier: 2PtPHmrJSDnSCJ0KzpNBSsVdRqUSmlQ4U4izP4gKIUM=
Subject key identifier: 8B:4B:52:E9:7E:E8:1F:A1:12:D4:1A:4B:AB:F7:54:60:24:16:EB:67
Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Certificate serial: 019E3004ACCB88624006EDCBB54460CF9BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
Manifest number: 0872
Signing time: Sat 16 May 2026 09:01:13 +0000
Manifest this update: Sat 16 May 2026 09:01:13 +0000
Manifest next update: Sun 17 May 2026 09:01:13 +0000
Files and hashes: 1: 8gLwqonAZ9ZjOLTVnSBSujmplEs.crl (hash: IDE6o8w02ndp9GRoqNj89GBjnoqwSCcQxELi83E+MrI=)
2: osv-bPTm7EkX2UpBKK6PsetzURk.roa (hash: YSsmgcD36aEYgXK+zsIFKY4sSvKY/KyPq4ODZAfcm88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:ac:cb:88:62:40:06:ed:cb:b5:44:60:cf:9b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Validity
Not Before: May 16 09:01:13 2026 GMT
Not After : May 17 09:01:13 2026 GMT
Subject: CN=8b4b52e97ee81fa112d41a4babf754602416eb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:68:09:e4:9c:d4:fe:ce:48:94:f7:9b:a1:
df:2e:e3:8e:0e:7d:c1:42:8d:9e:2c:53:51:f1:86:
74:86:bb:bd:0b:2d:c9:c4:a4:04:e2:16:99:6c:5d:
15:3a:06:6b:c5:a0:2e:96:7a:fa:30:05:c1:66:53:
d6:79:6f:e9:6b:2b:c4:4d:5c:e9:2a:2c:87:ed:71:
3a:ad:c7:38:a2:ac:5e:df:d4:44:da:2a:ca:15:a6:
2b:9a:a0:71:2e:85:fb:15:54:42:ec:8f:b0:ce:0a:
74:0f:54:0f:9b:e5:0f:0c:53:aa:30:bc:b0:de:0d:
5f:2a:93:c7:df:9e:c5:42:d5:db:97:f0:1b:fe:f9:
50:d6:35:f9:6d:25:56:00:b3:74:30:6b:d6:41:32:
30:6f:f4:99:42:08:a7:be:1a:0a:97:03:aa:bb:51:
73:7e:72:a3:17:7b:be:de:c7:78:ef:4a:4a:60:c1:
01:d8:33:dd:7e:a7:72:e8:f5:1a:64:79:ef:a9:55:
9f:e1:a0:8f:df:b5:bf:51:4a:73:87:13:84:c6:14:
a3:4a:88:1e:5f:40:5c:01:4b:8b:3a:a0:a5:cb:44:
dd:e9:a3:cd:63:59:61:37:ba:64:01:ca:2f:98:b8:
d8:47:37:d2:b5:c3:d2:40:a6:0a:fa:2a:eb:a2:77:
6b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4B:52:E9:7E:E8:1F:A1:12:D4:1A:4B:AB:F7:54:60:24:16:EB:67
X509v3 Authority Key Identifier:
keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8b:f1:e0:ea:50:c4:59:1b:b9:64:aa:4f:7d:9f:7d:a7:66:
a1:67:b8:10:0c:01:e0:ce:18:8b:4d:a8:4e:68:9b:43:f9:e1:
40:80:52:df:08:d2:86:16:b9:39:87:bf:4b:93:9a:0c:22:9a:
1a:22:5c:53:2c:98:08:88:9e:1b:ce:07:e2:ea:f9:26:dd:3c:
2f:f9:26:e5:d2:23:29:c8:6d:26:5d:f9:7b:fc:d6:c6:42:1b:
1b:bf:b6:13:38:46:2d:59:44:1d:ac:0a:58:7c:12:88:d3:57:
a8:92:e2:d3:a3:a0:05:ae:7b:7e:0f:93:f5:7e:7c:d3:cf:86:
3d:39:53:f0:c4:65:ae:78:7f:a3:03:b2:22:32:17:3b:68:b0:
b0:be:33:ec:91:59:42:93:26:aa:6d:86:8f:a3:48:f3:81:02:
41:a6:2e:97:a1:b1:d1:70:f9:32:b2:98:ba:90:62:fa:2f:f7:
6c:69:aa:c4:3c:fd:b5:7f:52:ed:dd:dc:f6:de:ee:99:11:14:
50:58:20:43:ff:5c:18:9b:83:8b:a6:cc:1c:f1:ea:99:a3:ab:
2a:69:c5:b8:0d:f3:f0:f4:89:a1:ba:51:9c:b1:f8:1d:eb:3b:
7e:19:ae:63:1c:20:fe:9a:c1:5f:bd:9a:a7:d6:77:8e:56:28:
6b:99:1e:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBKzLiGJABu3LtURgz5vQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMDJmMGFhODljMDY3ZDY2MzM4YjRkNTlkMjA1MmJhMzlh
OTk0NGIwHhcNMjYwNTE2MDkwMTEzWhcNMjYwNTE3MDkwMTEzWjAzMTEwLwYDVQQD
Eyg4YjRiNTJlOTdlZTgxZmExMTJkNDFhNGJhYmY3NTQ2MDI0MTZlYjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtNoCeSc1P7OSJT3m6HfLuOODn3B
Qo2eLFNR8YZ0hru9Cy3JxKQE4haZbF0VOgZrxaAulnr6MAXBZlPWeW/payvETVzp
KiyH7XE6rcc4oqxe39RE2irKFaYrmqBxLoX7FVRC7I+wzgp0D1QPm+UPDFOqMLyw
3g1fKpPH357FQtXbl/Ab/vlQ1jX5bSVWALN0MGvWQTIwb/SZQginvhoKlwOqu1Fz
fnKjF3u+3sd470pKYMEB2DPdfqdy6PUaZHnvqVWf4aCP37W/UUpzhxOExhSjSoge
X0BcAUuLOqCly0Td6aPNY1lhN7pkAcovmLjYRzfStcPSQKYK+irrondrtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItLUul+6B+hEtQaS6v3VGAkFutnMB8GA1UdIwQY
MBaAFPIC8KqJwGfWYzi01Z0gUro5qZRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGIt
ZjYyNTcwMGU4YTkwLzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGItZjYyNTcwMGU4YTkw
LzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIvx4OpQ
xFkbuWSqT32ffadmoWe4EAwB4M4Yi02oTmibQ/nhQIBS3wjShha5OYe/S5OaDCKa
GiJcUyyYCIieG84H4ur5Jt08L/km5dIjKchtJl35e/zWxkIbG7+2EzhGLVlEHawK
WHwSiNNXqJLi06OgBa57fg+T9X5808+GPTlT8MRlrnh/owOyIjIXO2iwsL4z7JFZ
QpMmqm2Gj6NI84ECQaYul6Gx0XD5MrKYupBi+i/3bGmqxDz9tX9S7d3c9t7umREU
UFggQ/9cGJuDi6bMHPHqmaOrKmnFuA3z8PSJobpRnLH4Hes7fhmuYxwg/prBX72a
p9Z3jlYoa5kelg==
-----END CERTIFICATE-----
Generated at Sat May 16 17:57:20 2026 by rpki-client