Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: /FiPLxSy1L78EXtrlYSS33Ay/ZZE1m2rGDlcfEUhfuk=
Subject key identifier: E5:4A:3B:07:DA:FA:56:AF:A3:0B:A8:1B:F2:45:E5:D6:81:A6:04:EE
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 01A13ECBAAD7953F0F8D1401F07376FB458B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 09B5
Signing time: Thu 15 Oct 2026 09:01:37 +0000
Manifest this update: Thu 15 Oct 2026 09:01:37 +0000
Manifest next update: Fri 16 Oct 2026 09:01:37 +0000
Files and hashes: 1: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: vCXyhphWuYiKr6nZvvF1AXHf2fbuq8OUzzSw/Lik15o=)
2: Qg_NIv-RM7UnjRckECfyRZCTx8A.roa (hash: Z0yhWHf6/7uOzwOZk+22dTKbH7UEa1tOBgn5LYlNNX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:aa:d7:95:3f:0f:8d:14:01:f0:73:76:fb:45:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: Oct 15 09:01:37 2026 GMT
Not After : Oct 16 09:01:37 2026 GMT
Subject: CN=e54a3b07dafa56afa30ba81bf245e5d681a604ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:77:c3:c4:f5:84:c1:10:76:08:a4:ed:cf:bd:
4a:b5:57:42:88:4b:30:8c:af:91:dc:9a:e9:53:b8:
56:b3:cf:8f:1f:ab:63:17:42:90:42:bc:bd:84:62:
4c:6c:09:f2:af:71:c7:dd:4c:ac:69:e8:b4:75:f2:
90:4e:ef:4b:af:ba:4c:d2:62:a8:c5:52:9b:c3:74:
26:4b:8d:97:40:0f:26:88:5d:fc:e8:c4:6f:c2:89:
db:b6:67:a5:48:4a:2e:af:7c:d9:83:7e:e7:51:d4:
29:f3:6b:36:00:36:40:ce:db:2f:fa:bd:17:6e:3f:
6c:31:c7:a2:14:b1:e9:12:4b:32:7d:4b:88:bc:0b:
1e:88:e4:9b:ac:20:bb:06:44:fb:e4:d8:21:ad:24:
33:2b:f8:bf:86:02:6d:e5:92:2e:39:92:98:37:6e:
17:ed:3d:06:81:9c:00:d2:b3:6b:1c:9c:b4:02:81:
bc:7c:50:d5:7e:f2:51:3b:b8:2c:c9:76:72:e5:28:
49:93:e5:c9:f3:53:76:26:31:fc:b6:20:f6:6f:a9:
a7:bf:23:6b:92:21:84:9f:ff:5e:69:cc:8e:e4:92:
91:d0:ab:1f:90:89:ee:08:de:c9:f5:39:41:36:1f:
a0:a6:2f:12:4f:d0:eb:26:e9:b3:e1:7c:8b:3b:7f:
7d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4A:3B:07:DA:FA:56:AF:A3:0B:A8:1B:F2:45:E5:D6:81:A6:04:EE
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0e:6b:38:a8:60:08:2c:32:43:f1:ca:50:7c:0f:1c:9a:7d:
67:b7:96:a0:ce:cf:72:9e:a6:ee:3b:2d:f5:0c:d9:2c:a3:31:
36:ea:0d:ba:9e:a5:3e:03:09:03:8e:ef:4d:50:d9:f7:85:8c:
66:90:1d:71:47:b7:58:6b:80:28:a5:af:79:a0:87:fd:b4:16:
02:50:ff:f1:ad:03:51:2e:3e:be:a0:a4:25:e2:c2:cc:32:07:
ec:1b:08:e9:28:51:9d:b7:b4:b6:50:84:74:5e:7b:c2:99:5e:
3b:aa:fb:98:d1:50:f7:f9:20:39:75:56:61:3b:08:e1:1a:b0:
75:d8:c7:46:ba:47:ab:66:ed:b0:07:f7:68:ee:eb:6b:0d:cf:
87:57:60:c4:1e:4e:5a:ec:50:d2:b3:85:8c:08:93:fb:4b:8f:
3c:74:c1:ac:82:e7:45:65:3c:fe:10:fa:8d:d6:b6:bc:64:9e:
50:b3:74:95:08:a3:ff:4f:0a:e8:eb:de:06:9b:b7:30:af:4b:
2f:67:82:2e:29:40:10:45:52:10:09:6f:43:45:c8:c6:27:50:
39:3d:c1:e9:c2:98:4d:23:df:c7:65:76:ee:d0:59:af:b5:d9:
39:48:16:43:51:23:69:d9:2c:af:24:87:44:14:d5:71:86:1e:
be:0b:f8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:18:23 2026 by rpki-client