Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: +N9VrdStMeB4h/EYhr8JdJ+Lp5MckqS7vlsWJhTyjB4=
Subject key identifier: C1:4A:06:01:DF:2F:48:73:4A:1D:08:0D:D1:45:02:7D:0F:79:94:9A
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 019D39780E239AAB46BBCB5900808148B927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 07A0
Signing time: Sun 29 Mar 2026 12:01:02 +0000
Manifest this update: Sun 29 Mar 2026 12:01:02 +0000
Manifest next update: Mon 30 Mar 2026 12:01:02 +0000
Files and hashes: 1: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: XSrXjVWwxpe7mROCO7+2hReYP3UXZ7QClc37B9niUOU=)
2: Qg_NIv-RM7UnjRckECfyRZCTx8A.roa (hash: Z0yhWHf6/7uOzwOZk+22dTKbH7UEa1tOBgn5LYlNNX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:0e:23:9a:ab:46:bb:cb:59:00:80:81:48:b9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: Mar 29 12:01:02 2026 GMT
Not After : Mar 30 12:01:02 2026 GMT
Subject: CN=c14a0601df2f48734a1d080dd145027d0f79949a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:8f:57:20:d1:59:a7:61:74:2a:21:39:f4:
ec:8f:5c:f6:73:a3:53:18:e9:b5:af:4f:97:95:24:
cc:aa:78:0c:65:50:07:4f:66:1a:c4:93:50:87:f9:
f8:bc:c6:4d:5c:6a:e3:35:c6:b0:21:98:c2:bd:80:
8a:40:27:cf:9e:14:f5:e7:fc:c3:1e:05:1c:b7:a2:
41:3f:0d:6b:69:ea:3b:a3:f3:be:59:71:dc:25:b2:
6a:86:ce:38:db:12:5a:93:74:f7:63:45:9a:10:9f:
73:ff:b7:88:a7:66:c2:03:12:4f:87:af:92:b0:53:
26:7e:60:80:2e:20:56:35:5e:07:b0:d9:09:29:a1:
91:8b:bc:e5:2c:df:4b:5e:98:88:ec:66:00:a6:c9:
79:c5:8a:1a:85:69:90:1e:59:76:50:50:97:38:16:
17:e5:af:4e:a7:e7:c9:cd:67:15:76:d3:0b:fc:be:
76:01:07:07:c6:a6:6f:25:f5:e4:2c:0e:1b:9b:ea:
61:eb:d6:b7:6c:f7:60:72:ec:ab:f4:23:24:38:c3:
d0:54:f9:2d:ba:41:0e:67:c5:2f:03:07:c1:0c:65:
77:d3:90:05:f1:85:eb:95:03:64:5e:46:cb:a5:f9:
ce:6c:35:17:9f:4d:8b:4d:c1:38:b7:ad:10:89:b7:
0d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4A:06:01:DF:2F:48:73:4A:1D:08:0D:D1:45:02:7D:0F:79:94:9A
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8c:7d:2a:2f:f2:a6:48:09:da:1f:b8:9e:15:70:68:95:e2:
cc:55:e3:62:f5:0b:22:b4:81:3f:1b:2a:59:f4:0c:1a:be:ea:
f0:0e:1f:bc:6f:bc:ec:40:73:2c:9a:1c:ce:d0:68:11:bb:da:
0d:9e:98:25:cc:ae:ec:5a:68:25:a4:58:01:22:03:0a:24:2d:
59:17:c3:6e:3e:cd:12:29:2e:67:28:a5:b2:53:21:54:7f:3b:
4b:56:be:04:44:4f:c1:35:b1:e8:e0:9c:ba:4d:3a:51:71:97:
70:1d:8b:ce:8b:26:7a:72:71:41:45:a4:36:ab:dd:ad:f8:2d:
5f:7a:26:a3:12:d2:6f:5e:1e:43:f0:e2:5d:06:0d:15:15:a6:
e1:6f:a3:65:46:e6:cc:d4:9a:10:07:09:9d:89:83:61:3e:66:
e9:2b:98:f6:34:b4:23:fb:66:a2:73:81:c9:7c:d7:20:43:94:
14:94:46:ec:6f:0e:8f:96:7c:f9:1d:1f:5b:e5:bc:e1:12:14:
7c:dd:f1:f9:b1:fd:6a:75:2f:c8:7c:4d:8c:d9:ae:0e:a3:40:
81:59:ee:40:3f:05:38:7c:fa:1c:96:d9:7f:cb:84:93:79:ea:
d6:5d:be:89:a6:15:dd:91:12:da:b4:01:74:6f:09:da:2f:31:
69:3e:87:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eA4jmqtGu8tZAICBSLknMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZTE1MTA4M2EyZmYzODBkMTcyNTk0MzRiNjRiNGZjYjA2
YTg1ZWYwHhcNMjYwMzI5MTIwMTAyWhcNMjYwMzMwMTIwMTAyWjAzMTEwLwYDVQQD
EyhjMTRhMDYwMWRmMmY0ODczNGExZDA4MGRkMTQ1MDI3ZDBmNzk5NDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOKPVyDRWadhdCohOfTsj1z2c6NT
GOm1r0+XlSTMqngMZVAHT2YaxJNQh/n4vMZNXGrjNcawIZjCvYCKQCfPnhT15/zD
HgUct6JBPw1raeo7o/O+WXHcJbJqhs442xJak3T3Y0WaEJ9z/7eIp2bCAxJPh6+S
sFMmfmCALiBWNV4HsNkJKaGRi7zlLN9LXpiI7GYApsl5xYoahWmQHll2UFCXOBYX
5a9Op+fJzWcVdtML/L52AQcHxqZvJfXkLA4bm+ph69a3bPdgcuyr9CMkOMPQVPkt
ukEOZ8UvAwfBDGV305AF8YXrlQNkXkbLpfnObDUXn02LTcE4t60QibcNUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFKBgHfL0hzSh0IDdFFAn0PeZSaMB8GA1UdIwQY
MBaAFPDhUQg6L/OA0XJZQ0tktPywaoXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2Qt
YzdlZjg2ODJkNjdkLzEvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2QtYzdlZjg2ODJkNjdk
LzEvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIx9Ki/y
pkgJ2h+4nhVwaJXizFXjYvULIrSBPxsqWfQMGr7q8A4fvG+87EBzLJocztBoEbva
DZ6YJcyu7FpoJaRYASIDCiQtWRfDbj7NEikuZyilslMhVH87S1a+BERPwTWx6OCc
uk06UXGXcB2LzosmenJxQUWkNqvdrfgtX3omoxLSb14eQ/DiXQYNFRWm4W+jZUbm
zNSaEAcJnYmDYT5m6SuY9jS0I/tmonOByXzXIEOUFJRG7G8Oj5Z8+R0fW+W84RIU
fN3x+bH9anUvyHxNjNmuDqNAgVnuQD8FOHz6HJbZf8uEk3nq1l2+iaYV3ZES2rQB
dG8J2i8xaT6Huw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:47 2026 by rpki-client