Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: fzXsC3goJ96yvk1k0IbHlA6qUJKm5JuHORXCbmzjNk0=
Subject key identifier: F2:F9:73:93:AA:80:68:99:51:D1:75:0A:88:31:D0:AB:F3:84:A4:A1
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 019D2816DDF379FC6213362C33F7D632CACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 0797
Signing time: Thu 26 Mar 2026 03:01:20 +0000
Manifest this update: Thu 26 Mar 2026 03:01:20 +0000
Manifest next update: Fri 27 Mar 2026 03:01:20 +0000
Files and hashes: 1: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: Ou/Te2iPEoCzgeAOcPJuQdqO3ZDRwJ+ZSXIHi2KSZ94=)
2: Qg_NIv-RM7UnjRckECfyRZCTx8A.roa (hash: Z0yhWHf6/7uOzwOZk+22dTKbH7UEa1tOBgn5LYlNNX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:dd:f3:79:fc:62:13:36:2c:33:f7:d6:32:ca:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: Mar 26 03:01:20 2026 GMT
Not After : Mar 27 03:01:20 2026 GMT
Subject: CN=f2f97393aa80689951d1750a8831d0abf384a4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1e:e2:3a:a6:36:6c:35:d3:6d:ae:e6:8c:82:
ef:bb:17:81:aa:e1:98:a9:1b:33:55:f1:5f:b5:7f:
a2:41:40:c7:3b:73:4e:9f:ef:45:fa:07:e4:8f:de:
dd:3b:43:6f:28:61:61:f7:01:88:cd:6a:f6:a2:cf:
97:11:bb:af:86:f4:51:f4:70:04:c6:c0:e4:1c:1c:
f7:5c:14:69:7d:96:fb:bd:28:ea:9c:87:d4:38:f6:
a1:da:c1:53:0b:12:ff:a1:bd:9a:cb:ad:c5:dd:41:
4a:ff:c9:10:38:36:52:7e:71:f8:2e:0e:fd:c9:a2:
0b:24:c6:c2:f1:d8:b7:63:4b:1c:fd:e0:d2:47:56:
80:59:ad:51:0e:ac:52:b6:7c:32:fb:b6:75:66:87:
fb:d2:5f:35:7c:a9:1a:02:8c:dc:63:0f:72:90:ad:
0b:72:a5:39:87:c4:63:0c:20:38:ff:6d:0d:17:b8:
8a:c2:6c:12:15:4d:b5:91:c9:7a:be:9d:59:f3:61:
47:4b:98:6f:6c:57:dc:66:bb:f1:18:93:f0:00:5a:
e0:59:44:6e:d2:9a:17:ed:ad:48:c3:9a:60:9a:40:
c8:77:9e:65:6e:04:2f:11:f1:a9:05:7a:ad:e5:8e:
28:5f:5d:c9:5d:f3:0a:3f:14:f7:3f:4d:92:14:d7:
fe:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F9:73:93:AA:80:68:99:51:D1:75:0A:88:31:D0:AB:F3:84:A4:A1
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9c:dd:ab:32:47:81:a8:fd:7f:dc:be:fd:70:01:cc:55:25:
54:ee:b9:a8:24:b2:35:fd:aa:95:ee:f9:d9:9a:5c:06:67:79:
29:10:1d:f2:61:77:a0:66:1f:6c:f6:a2:ef:f3:56:aa:d9:00:
28:ee:32:ba:98:df:80:6e:06:1b:1c:57:17:97:ef:b7:d9:5e:
b8:0e:73:96:5c:73:75:f5:b1:7f:8b:30:ba:9b:98:f3:be:e3:
77:e8:4d:79:d2:1b:c2:32:87:95:40:73:24:f6:54:3a:63:aa:
59:0d:f7:01:0c:bd:c0:20:3f:0a:23:ec:b5:72:e2:e7:2a:29:
63:7e:bc:7c:89:97:58:39:a6:7d:6e:49:b2:a8:48:7d:9c:14:
16:ab:df:b1:ca:df:12:85:6f:88:6e:9a:a5:52:fe:05:83:32:
f2:df:22:01:d2:ec:5b:fc:13:ee:22:35:ad:61:b3:d0:b2:66:
9f:d7:c8:be:ca:56:f3:c7:2a:c4:32:f1:07:1b:73:17:46:d9:
ba:1f:c0:17:5b:29:73:3e:d1:29:f1:0d:47:70:9e:17:58:a1:
37:97:31:a2:fe:3f:09:53:1c:18:ea:08:e4:94:bd:61:37:68:
1a:42:39:3a:9b:da:d3:90:79:f8:74:0b:f7:b4:c5:cf:b9:65:
7b:af:71:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:37:48 2026 by rpki-client