Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: AdsdOLeI9CRkDeJMKfHdIKcMw8WJf1H7QjrrnR0O1N0=
Subject key identifier: 06:56:A3:22:06:68:4A:36:97:66:70:44:50:A4:7C:81:08:1F:1E:48
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 019F1867CFDB0505090C7D783B1785164F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 0898
Signing time: Tue 30 Jun 2026 12:01:24 +0000
Manifest this update: Tue 30 Jun 2026 12:01:24 +0000
Manifest next update: Wed 01 Jul 2026 12:01:24 +0000
Files and hashes: 1: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: XQl7rHXLpYyeaRw7TKUL8Qq7lFYtdixnqWoZLkJzJvo=)
2: Qg_NIv-RM7UnjRckECfyRZCTx8A.roa (hash: Z0yhWHf6/7uOzwOZk+22dTKbH7UEa1tOBgn5LYlNNX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:cf:db:05:05:09:0c:7d:78:3b:17:85:16:4f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: Jun 30 12:01:24 2026 GMT
Not After : Jul 1 12:01:24 2026 GMT
Subject: CN=0656a32206684a369766704450a47c81081f1e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:59:e3:be:dd:f8:20:cb:25:ee:8a:84:8f:95:
8c:1b:8c:c0:61:99:73:8b:6e:9f:4b:01:2a:c1:72:
e6:91:d9:a9:05:dc:cf:72:f7:a1:da:0d:59:1d:27:
72:3c:08:f0:45:93:3e:96:2c:2f:2a:fb:bb:2c:9d:
71:a9:1c:b4:0c:3d:b9:02:91:ed:7c:31:db:6a:84:
bf:a5:85:c9:82:40:a9:89:f8:a3:ff:e1:56:ed:33:
34:eb:72:9f:cf:82:c4:83:d0:e0:2c:1a:da:e8:4c:
c9:f3:78:a8:54:67:d8:4a:a5:76:e4:bc:26:c1:80:
69:98:13:76:60:d8:1f:b3:be:57:53:db:f7:b9:72:
87:51:97:64:ce:2e:49:01:3d:e1:fc:95:5c:e2:b3:
77:34:b1:34:8b:4e:81:c7:95:22:6c:05:6b:51:73:
a4:61:ee:f8:39:ac:a6:d2:c2:b4:21:2c:df:20:fc:
81:82:41:02:54:34:5c:b2:51:6f:1e:1c:13:92:48:
d1:cd:e2:93:41:1d:2e:85:37:65:9a:7e:7b:9a:d8:
24:a3:52:bb:23:99:74:b1:e0:b0:20:4e:a3:0f:20:
be:71:55:6c:12:6f:24:97:0c:81:8f:55:37:43:c0:
88:03:11:a9:d8:56:bf:9a:ac:41:ee:6b:1d:42:15:
18:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:56:A3:22:06:68:4A:36:97:66:70:44:50:A4:7C:81:08:1F:1E:48
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:91:16:ba:ee:a7:5f:d2:0d:c5:06:d5:d0:43:0c:60:f7:75:
e1:11:de:28:79:c9:dc:0d:7e:94:91:c6:ef:a8:f3:1c:9d:23:
3b:57:af:16:d5:bc:4f:e2:8c:7f:74:f8:e4:11:de:b3:ce:c8:
83:a0:ee:ab:cb:44:6f:de:d4:63:93:8d:08:05:55:53:47:99:
92:34:92:ae:67:6d:88:10:d6:c3:ca:d4:ca:c2:77:3e:46:52:
22:eb:fa:f9:9d:fe:3a:8b:c7:0e:88:f9:90:46:92:fb:e4:8f:
78:ae:db:9c:3e:2f:3b:0c:06:e4:50:a4:1b:78:dd:47:5b:82:
99:7d:54:f1:fd:4c:e9:72:6b:37:09:1b:92:ff:c4:23:1c:17:
d5:8e:e7:7d:5b:ad:4a:71:e9:9f:46:f7:96:4a:34:53:ec:84:
09:03:f8:c3:9b:52:e8:dd:2e:65:af:e1:76:76:7e:f2:9c:f2:
19:fc:41:07:fc:12:cd:2d:ad:60:53:a0:4a:6d:ff:76:02:38:
ff:9c:ea:87:d8:82:d9:de:27:ac:1f:0a:6e:28:f1:b9:3a:df:
53:d3:bc:dc:e4:02:d5:8d:ae:17:2b:15:99:36:06:92:e3:fc:
51:90:b7:fc:42:ed:87:e5:9c:ab:be:aa:50:31:fa:1a:95:79:
fd:9a:23:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:11:24 2026 by rpki-client