Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: eDROy7H3KD5w7Z1F4U86hoh3ZOLieIlxU2Dmj4zSx5U=
Subject key identifier: D3:44:68:C3:A8:39:14:2C:DB:87:93:CC:23:08:CC:A2:0C:D0:02:4F
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 01A00213E14AB4F5EDAF532AF2D92004964F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 0911
Signing time: Fri 14 Aug 2026 21:00:52 +0000
Manifest this update: Fri 14 Aug 2026 21:00:52 +0000
Manifest next update: Sat 15 Aug 2026 21:00:52 +0000
Files and hashes: 1: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: gxZfkf+EvBUIjxeZ7QPbyebdo97KFAVf77p+q7TPtL0=)
2: Qg_NIv-RM7UnjRckECfyRZCTx8A.roa (hash: Z0yhWHf6/7uOzwOZk+22dTKbH7UEa1tOBgn5LYlNNX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:e1:4a:b4:f5:ed:af:53:2a:f2:d9:20:04:96:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: Aug 14 21:00:52 2026 GMT
Not After : Aug 15 21:00:52 2026 GMT
Subject: CN=d34468c3a839142cdb8793cc2308cca20cd0024f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:46:44:d3:81:bb:95:7c:f1:56:33:4e:c2:a2:
1a:c9:d8:b2:9d:5b:50:28:a0:d1:3e:f6:51:3b:80:
8b:35:17:b8:09:5e:86:b6:f3:58:19:16:ba:4e:7e:
eb:b9:1b:b8:7d:a1:cd:1b:58:2e:e9:96:53:66:64:
23:54:6e:61:b1:94:ad:32:6d:29:70:9a:40:92:4d:
0d:04:72:52:8b:a8:24:5c:1d:a0:69:60:34:36:03:
82:8f:2e:03:a7:ae:c5:cf:9e:49:33:b4:18:8f:5c:
24:99:59:69:c6:64:16:3f:fc:2b:81:1f:ee:03:8e:
cb:b6:73:86:20:26:9a:ac:bb:2d:f8:57:d6:9f:7e:
34:05:48:f4:61:28:06:b8:a6:87:fa:f7:93:19:b4:
4e:67:0a:ce:fe:6e:c7:6c:19:80:00:cc:38:e7:b7:
4a:73:94:46:f9:19:7a:2b:a0:0c:a2:92:6c:5f:81:
be:9b:ad:e6:25:9d:0a:62:dd:4b:bb:ed:b3:0e:6d:
fe:68:73:77:71:b3:f1:84:a5:29:81:28:00:59:ef:
e5:5c:b4:6e:1c:c5:36:38:a4:3e:11:e4:b4:44:75:
1b:d4:11:d4:b5:71:a1:4e:53:46:72:a2:70:a9:be:
c3:16:30:45:9b:e5:1a:5d:c9:a4:87:c2:96:93:24:
c7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:44:68:C3:A8:39:14:2C:DB:87:93:CC:23:08:CC:A2:0C:D0:02:4F
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:01:1f:df:fb:43:d8:e7:b1:98:c2:8e:71:c7:8b:23:bf:10:
a4:94:61:da:05:5a:b6:42:c0:ad:5d:cf:b4:40:c8:fa:b2:3a:
1e:ed:58:d6:27:70:10:03:7a:b0:1e:1e:a3:ab:12:19:49:b6:
7b:c7:4d:d4:4d:55:fb:77:ef:cd:f3:5f:15:4d:3d:dd:6c:f1:
2d:6f:45:3d:82:31:96:e8:18:33:81:6f:7e:7b:98:04:93:c3:
aa:20:31:f1:16:fd:52:d0:cf:c6:34:e9:2f:56:b1:1e:d4:63:
57:f3:ee:2e:40:9f:3a:c5:f0:5d:83:13:7b:43:10:2e:ae:6b:
0c:28:ea:49:4f:89:19:79:87:df:2f:cc:76:d9:03:ab:ca:68:
64:86:aa:29:0d:63:0c:c5:99:4f:b7:d1:cd:7d:36:53:cf:03:
44:cf:76:2e:2c:ec:9d:12:12:3f:ae:28:89:b9:e7:0c:45:99:
d1:d6:51:64:64:d2:2e:6f:ba:51:fb:48:8e:6a:47:ad:ad:a1:
6c:09:72:e5:93:10:f3:da:a7:5b:6b:0b:ec:41:82:44:f6:58:
5c:71:1e:e9:95:f5:fb:99:91:88:38:b7:b1:40:44:54:33:77:
f4:c5:96:e5:33:d6:f3:61:a2:e6:de:53:47:ba:8a:a6:a7:92:
0d:9f:ac:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACE+FKtPXtr1Mq8tkgBJZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZTE1MTA4M2EyZmYzODBkMTcyNTk0MzRiNjRiNGZjYjA2
YTg1ZWYwHhcNMjYwODE0MjEwMDUyWhcNMjYwODE1MjEwMDUyWjAzMTEwLwYDVQQD
EyhkMzQ0NjhjM2E4MzkxNDJjZGI4NzkzY2MyMzA4Y2NhMjBjZDAwMjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEZE04G7lXzxVjNOwqIaydiynVtQ
KKDRPvZRO4CLNRe4CV6GtvNYGRa6Tn7ruRu4faHNG1gu6ZZTZmQjVG5hsZStMm0p
cJpAkk0NBHJSi6gkXB2gaWA0NgOCjy4Dp67Fz55JM7QYj1wkmVlpxmQWP/wrgR/u
A47LtnOGICaarLst+FfWn340BUj0YSgGuKaH+veTGbROZwrO/m7HbBmAAMw457dK
c5RG+Rl6K6AMopJsX4G+m63mJZ0KYt1Lu+2zDm3+aHN3cbPxhKUpgSgAWe/lXLRu
HMU2OKQ+EeS0RHUb1BHUtXGhTlNGcqJwqb7DFjBFm+UaXcmkh8KWkyTHAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNEaMOoORQs24eTzCMIzKIM0AJPMB8GA1UdIwQY
MBaAFPDhUQg6L/OA0XJZQ0tktPywaoXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2Qt
YzdlZjg2ODJkNjdkLzEvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2QtYzdlZjg2ODJkNjdk
LzEvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgEf3/tD
2OexmMKOcceLI78QpJRh2gVatkLArV3PtEDI+rI6Hu1Y1idwEAN6sB4eo6sSGUm2
e8dN1E1V+3fvzfNfFU093WzxLW9FPYIxlugYM4FvfnuYBJPDqiAx8Rb9UtDPxjTp
L1axHtRjV/PuLkCfOsXwXYMTe0MQLq5rDCjqSU+JGXmH3y/MdtkDq8poZIaqKQ1j
DMWZT7fRzX02U88DRM92LizsnRISP64oibnnDEWZ0dZRZGTSLm+6UftIjmpHra2h
bAly5ZMQ89qnW2sL7EGCRPZYXHEe6ZX1+5mRiDi3sUBEVDN39MWW5TPW82Gi5t5T
R7qKpqeSDZ+sHg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:11:34 2026 by rpki-client