Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: hG4sttZ7auKbZZmX7ubWT8N6xz8V74C/FIlsJodj57o=
Subject key identifier: B9:F1:82:A0:49:D9:42:10:10:56:5B:FD:33:C4:16:AE:FA:D8:4B:5B
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 019E30A94F36E57F1C1B642E7406A0987746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 0820
Signing time: Sat 16 May 2026 12:01:02 +0000
Manifest this update: Sat 16 May 2026 12:01:02 +0000
Manifest next update: Sun 17 May 2026 12:01:02 +0000
Files and hashes: 1: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: 2OSET+4mIql+ihkQIbQgUvLCor9Fh6Njmi4gbFNpFXY=)
2: Qg_NIv-RM7UnjRckECfyRZCTx8A.roa (hash: Z0yhWHf6/7uOzwOZk+22dTKbH7UEa1tOBgn5LYlNNX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:4f:36:e5:7f:1c:1b:64:2e:74:06:a0:98:77:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: May 16 12:01:02 2026 GMT
Not After : May 17 12:01:02 2026 GMT
Subject: CN=b9f182a049d9421010565bfd33c416aefad84b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:f8:28:fb:80:99:c4:7f:16:1f:96:df:91:
ad:f6:7a:ae:d0:37:f0:28:f6:bb:3f:15:d9:5b:2b:
f2:be:de:6d:4e:74:f5:50:88:af:50:f9:e1:8f:eb:
6f:6b:ea:be:9e:d8:1f:4b:cc:05:b6:16:2b:24:38:
88:33:86:59:54:8d:ae:46:04:29:71:95:70:bf:4e:
b2:3c:37:d3:1b:ed:f4:ad:41:4a:59:56:2d:db:7b:
a0:67:3d:ff:19:78:d7:3f:98:49:d8:00:bc:97:1c:
b2:3d:e9:d5:2c:c4:88:4b:ea:ab:bb:c3:b8:a1:d0:
81:4e:bd:4b:33:f4:63:57:3c:e1:2f:e7:6d:33:bf:
a3:85:42:e8:fe:55:f2:a5:dc:50:53:63:dd:0f:32:
2e:90:f1:82:3c:86:bc:c9:bd:b8:7a:93:d8:f1:e4:
69:9f:db:ba:e8:fe:4b:0f:00:45:03:f2:77:35:f2:
c4:e7:d8:51:66:c0:01:73:bb:d1:4a:2d:56:0f:9d:
33:e8:ad:66:e2:fe:fb:29:73:dd:4f:3a:41:e2:06:
73:dc:a7:c0:f0:e7:1d:68:38:fa:3a:44:a3:6a:2e:
e8:84:0f:d9:07:51:f8:dd:b6:7c:06:9c:e9:65:a2:
a9:19:55:f7:21:eb:ab:94:65:7a:55:2c:53:c2:e3:
3e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F1:82:A0:49:D9:42:10:10:56:5B:FD:33:C4:16:AE:FA:D8:4B:5B
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:19:ea:98:fd:bc:a3:d7:d3:50:c9:d7:1c:4f:34:c3:70:7d:
86:0c:f0:86:ce:4f:08:e3:c9:65:d0:29:37:5a:c5:b2:2d:d9:
be:9d:1c:91:8e:4f:8d:e5:c3:ff:c8:3a:92:8d:fa:68:1c:96:
49:d7:5b:28:2a:56:31:18:72:16:8f:4e:56:e4:47:84:08:d3:
c3:b8:48:f7:73:6e:79:0d:a4:b3:05:f8:da:37:bd:ca:42:73:
2a:3a:f1:90:7a:f0:9c:8c:bf:76:22:3e:7c:f4:79:76:ed:6a:
ee:2c:27:1d:f9:39:2e:b1:12:ea:70:a0:81:c1:de:c4:86:7e:
be:88:c3:1f:55:f2:9b:18:80:4d:fd:7a:5e:38:80:63:91:1e:
48:34:20:3c:b5:ee:94:75:55:96:7c:ef:12:6f:3c:11:6e:e1:
6f:99:15:ec:3a:fd:99:1a:a7:6c:2c:93:f3:70:7f:f5:6f:01:
7e:c0:21:25:86:db:fc:12:63:b9:ba:6f:61:9b:8b:a3:99:71:
00:45:91:3b:75:16:c0:ae:cc:a8:ec:17:f4:a6:cb:b0:3e:81:
c6:2b:06:91:55:77:3c:43:dd:7f:8a:f4:04:4a:4c:3a:b8:24:
3e:42:8e:92:7c:97:90:f2:1f:90:88:a9:89:6e:20:05:cf:b3:
0e:d8:82:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqU825X8cG2QudAagmHdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZTE1MTA4M2EyZmYzODBkMTcyNTk0MzRiNjRiNGZjYjA2
YTg1ZWYwHhcNMjYwNTE2MTIwMTAyWhcNMjYwNTE3MTIwMTAyWjAzMTEwLwYDVQQD
EyhiOWYxODJhMDQ5ZDk0MjEwMTA1NjViZmQzM2M0MTZhZWZhZDg0YjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMv4KPuAmcR/Fh+W35Gt9nqu0Dfw
KPa7PxXZWyvyvt5tTnT1UIivUPnhj+tva+q+ntgfS8wFthYrJDiIM4ZZVI2uRgQp
cZVwv06yPDfTG+30rUFKWVYt23ugZz3/GXjXP5hJ2AC8lxyyPenVLMSIS+qru8O4
odCBTr1LM/RjVzzhL+dtM7+jhULo/lXypdxQU2PdDzIukPGCPIa8yb24epPY8eRp
n9u66P5LDwBFA/J3NfLE59hRZsABc7vRSi1WD50z6K1m4v77KXPdTzpB4gZz3KfA
8OcdaDj6OkSjai7ohA/ZB1H43bZ8BpzpZaKpGVX3IeurlGV6VSxTwuM+oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnxgqBJ2UIQEFZb/TPEFq762EtbMB8GA1UdIwQY
MBaAFPDhUQg6L/OA0XJZQ0tktPywaoXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2Qt
YzdlZjg2ODJkNjdkLzEvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2QtYzdlZjg2ODJkNjdk
LzEvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxnqmP28
o9fTUMnXHE80w3B9hgzwhs5PCOPJZdApN1rFsi3Zvp0ckY5PjeXD/8g6ko36aByW
SddbKCpWMRhyFo9OVuRHhAjTw7hI93NueQ2kswX42je9ykJzKjrxkHrwnIy/diI+
fPR5du1q7iwnHfk5LrES6nCggcHexIZ+vojDH1XymxiATf16XjiAY5EeSDQgPLXu
lHVVlnzvEm88EW7hb5kV7Dr9mRqnbCyT83B/9W8BfsAhJYbb/BJjubpvYZuLo5lx
AEWRO3UWwK7MqOwX9KbLsD6BxisGkVV3PEPdf4r0BEpMOrgkPkKOknyXkPIfkIip
iW4gBc+zDtiCiQ==
-----END CERTIFICATE-----
Generated at Sat May 16 15:37:07 2026 by rpki-client