Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: bmrL6lPS1pRN3KQyN07kcMT8n13Mwrso+6FGhXQzlNY=
Subject key identifier: 53:40:E4:35:0C:52:E3:55:6C:96:D3:54:FD:66:F0:12:1D:1C:20:7B
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 01A0CCD9F4F17FC252DB7195C09029A2F7D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 097A
Signing time: Wed 23 Sep 2026 06:00:31 +0000
Manifest this update: Wed 23 Sep 2026 06:00:31 +0000
Manifest next update: Thu 24 Sep 2026 06:00:31 +0000
Files and hashes: 1: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: mrRiWzqu9G5x4cJopQw7No0VsSXArfAEcIEdEs51c7g=)
2: Qg_NIv-RM7UnjRckECfyRZCTx8A.roa (hash: Z0yhWHf6/7uOzwOZk+22dTKbH7UEa1tOBgn5LYlNNX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:f4:f1:7f:c2:52:db:71:95:c0:90:29:a2:f7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: Sep 23 06:00:31 2026 GMT
Not After : Sep 24 06:00:31 2026 GMT
Subject: CN=5340e4350c52e3556c96d354fd66f0121d1c207b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c7:fd:ee:98:3b:ac:b4:39:c3:ae:85:30:1f:
a7:57:6e:7f:4d:99:fd:c7:ae:51:34:23:09:54:47:
5a:76:97:3f:fb:15:47:16:f1:64:22:ab:ee:ed:db:
ce:f0:fa:b2:a0:0d:69:5c:ec:80:a3:57:1d:c7:9f:
e7:14:a9:f3:4b:7f:d0:1a:9a:88:22:e3:9a:33:3f:
88:be:67:85:43:d9:b6:27:de:5d:90:5d:d7:da:b5:
d1:ce:05:e8:f4:0a:a8:70:03:2b:38:a1:3e:76:21:
b2:57:ac:ff:75:e7:28:f7:93:8c:fc:00:0c:25:09:
af:6b:9a:e4:77:47:7a:ef:60:23:ef:72:43:8a:bc:
95:61:80:ea:4f:c5:05:3e:d3:f8:73:67:0b:e6:5e:
9b:94:4f:41:77:67:0b:6f:65:47:11:b0:39:f6:c5:
5a:5c:2f:6f:49:36:c7:34:ee:72:16:d0:60:4e:bf:
d5:9e:3d:1e:d9:81:7d:c0:30:d3:0b:b8:3b:9b:ff:
de:d6:d0:a8:e4:70:7f:bd:ef:b2:a5:d0:f9:84:1f:
2c:44:76:88:0f:2e:5b:17:b4:84:78:b1:f9:f8:89:
fe:bf:99:0a:37:b7:f2:07:58:50:a9:0c:82:41:e8:
46:a7:b9:67:fd:5f:b1:0c:05:3c:9e:9c:e4:51:20:
2c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:40:E4:35:0C:52:E3:55:6C:96:D3:54:FD:66:F0:12:1D:1C:20:7B
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9d:4c:43:30:c1:9f:21:e4:4f:c0:83:f6:b4:f7:4b:b8:03:
5b:af:b6:21:47:2e:dc:0e:a8:ae:38:28:07:f3:3f:b4:27:b2:
46:be:a2:b0:9f:58:a4:e8:98:13:e1:7e:8c:ad:4c:64:61:19:
04:f4:1f:27:aa:83:58:51:1f:0f:d0:9c:50:b2:22:88:22:ab:
24:f6:8b:25:5d:e2:90:80:63:7a:5d:92:c9:2f:e4:c5:23:d6:
ae:d0:61:dd:45:b6:fa:9c:48:45:d4:13:8f:ea:a4:49:0c:15:
29:31:84:e0:81:fe:cb:21:08:bb:75:6e:92:2f:60:93:57:07:
0d:1b:21:cf:ce:0c:bb:8d:f2:45:34:fc:01:8c:d6:a3:93:1a:
85:16:1b:92:6b:c6:b4:9a:de:ab:b0:0a:e0:80:3f:2e:7f:fc:
21:34:e0:d0:23:5f:86:73:62:88:81:29:3c:3f:3c:16:05:af:
57:b9:b4:23:4b:0c:55:d3:84:28:fb:7f:33:a8:e7:e3:25:97:
ee:0a:85:94:8e:b8:d2:7c:af:ba:df:2d:c3:23:12:2b:a9:c8:
17:d9:4d:bf:e6:e6:92:5e:4d:ac:0c:81:89:02:90:65:9d:ba:
20:3c:9e:b0:2a:29:a1:05:d5:10:4f:8b:56:1f:8e:35:f5:c1:
14:00:3a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:12:11 2026 by rpki-client