Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: p6dRhaE8HfSTQ8H7LVEBH2QAsD/nEDhhzLXVS3Pg/Xs=
Subject key identifier: 33:9E:F2:59:6B:AB:A6:01:F8:57:50:36:DB:B1:47:B7:C0:4A:3A:64
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 019F9022E73BC9D5D5B63D7C97ECB027B287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 08D6
Signing time: Thu 23 Jul 2026 18:00:34 +0000
Manifest this update: Thu 23 Jul 2026 18:00:34 +0000
Manifest next update: Fri 24 Jul 2026 18:00:34 +0000
Files and hashes: 1: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: u/rGiemao8RB26lIERCWrVIFjSxF6vpXsFO1dnrRkgY=)
2: Qg_NIv-RM7UnjRckECfyRZCTx8A.roa (hash: Z0yhWHf6/7uOzwOZk+22dTKbH7UEa1tOBgn5LYlNNX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:e7:3b:c9:d5:d5:b6:3d:7c:97:ec:b0:27:b2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: Jul 23 18:00:34 2026 GMT
Not After : Jul 24 18:00:34 2026 GMT
Subject: CN=339ef2596baba601f8575036dbb147b7c04a3a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:25:7f:04:93:2f:86:fe:fd:51:10:a0:28:
da:5d:b8:55:9a:e3:28:3f:37:55:19:fe:7b:56:43:
8d:94:17:03:f8:46:95:7d:69:80:77:e2:e2:11:8e:
9a:3d:97:49:1a:f0:6e:ea:01:52:6f:7a:95:bf:35:
ac:33:1d:ac:f4:8b:9a:cd:fe:e1:31:c3:7c:06:32:
5d:c4:ee:0e:40:1c:bd:99:7c:6d:f6:e9:af:d6:92:
fc:c5:9f:63:e0:cb:01:b6:01:f8:3d:76:ba:22:78:
b4:6b:9e:7e:c1:6a:e0:f2:c5:b9:0f:c3:30:c1:45:
c4:ed:22:87:29:46:5e:69:aa:0a:20:00:27:49:1e:
2a:a3:5c:92:14:03:74:ba:41:c1:d3:6b:6f:58:85:
13:3c:c6:07:41:b0:8c:d5:5a:55:e5:50:75:f5:e6:
ee:d7:4a:37:42:c9:92:07:aa:fc:91:20:63:0c:a5:
90:f4:89:a7:24:ba:ed:fe:9e:c6:24:00:2a:a0:4e:
1f:9a:47:40:62:d9:af:4a:0e:1e:78:96:7b:5e:b5:
aa:ce:ce:b9:b6:0d:4c:14:12:40:64:8e:95:d5:ea:
e7:f8:ca:f8:b4:6c:dc:49:b6:5d:65:1f:47:ca:33:
0b:7e:87:91:a2:4e:13:47:8c:74:b1:42:e2:68:58:
65:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9E:F2:59:6B:AB:A6:01:F8:57:50:36:DB:B1:47:B7:C0:4A:3A:64
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:39:51:eb:f0:16:1e:3e:7e:db:d2:c8:82:68:87:e5:f6:c1:
07:f6:72:aa:cb:4e:46:5a:fa:aa:57:b7:ad:23:3b:7f:50:6a:
13:4a:d8:50:8f:d4:ca:c4:f3:bf:aa:dd:6c:71:6f:ef:a6:66:
b2:11:24:47:c6:2b:04:d3:44:97:28:4d:31:87:db:b2:ea:22:
c5:c4:0d:48:8e:07:d7:d6:02:37:1e:81:cf:30:49:02:17:b0:
a8:26:2f:ba:d9:1a:fd:b4:18:17:7c:3b:24:7b:c5:8f:f8:c1:
8c:7b:d2:46:2d:c0:63:ff:1f:b9:27:81:41:40:75:f6:ee:36:
6e:b1:c3:53:75:23:54:4a:1a:9d:61:82:6b:f2:ae:23:c7:d2:
24:e3:15:29:2b:e8:84:a0:3f:ff:de:b4:e8:c2:3b:2d:90:d4:
31:37:eb:3a:28:b8:dd:70:b8:5f:94:45:d9:30:88:7e:b7:ad:
38:d0:c3:33:1a:0b:0e:b4:fa:e0:52:0a:c8:af:4d:54:fa:96:
28:e8:63:ee:b2:40:2b:37:3a:06:24:6f:fc:8b:a7:7d:51:48:
1e:da:3b:41:7e:45:ac:95:65:23:a4:ff:5c:66:d3:12:91:0f:
a9:b0:e9:0f:32:5d:23:a0:2f:bd:70:3b:ed:36:fa:b9:b6:f8:
02:7b:f8:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIuc7ydXVtj18l+ywJ7KHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZTE1MTA4M2EyZmYzODBkMTcyNTk0MzRiNjRiNGZjYjA2
YTg1ZWYwHhcNMjYwNzIzMTgwMDM0WhcNMjYwNzI0MTgwMDM0WjAzMTEwLwYDVQQD
EygzMzllZjI1OTZiYWJhNjAxZjg1NzUwMzZkYmIxNDdiN2MwNGEzYTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSUlfwSTL4b+/VEQoCjaXbhVmuMo
PzdVGf57VkONlBcD+EaVfWmAd+LiEY6aPZdJGvBu6gFSb3qVvzWsMx2s9Iuazf7h
McN8BjJdxO4OQBy9mXxt9umv1pL8xZ9j4MsBtgH4PXa6Ini0a55+wWrg8sW5D8Mw
wUXE7SKHKUZeaaoKIAAnSR4qo1ySFAN0ukHB02tvWIUTPMYHQbCM1VpV5VB19ebu
10o3QsmSB6r8kSBjDKWQ9ImnJLrt/p7GJAAqoE4fmkdAYtmvSg4eeJZ7XrWqzs65
tg1MFBJAZI6V1ern+Mr4tGzcSbZdZR9HyjMLfoeRok4TR4x0sULiaFhlQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOe8llrq6YB+FdQNtuxR7fASjpkMB8GA1UdIwQY
MBaAFPDhUQg6L/OA0XJZQ0tktPywaoXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2Qt
YzdlZjg2ODJkNjdkLzEvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2QtYzdlZjg2ODJkNjdk
LzEvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDlR6/AW
Hj5+29LIgmiH5fbBB/ZyqstORlr6qle3rSM7f1BqE0rYUI/UysTzv6rdbHFv76Zm
shEkR8YrBNNElyhNMYfbsuoixcQNSI4H19YCNx6BzzBJAhewqCYvutka/bQYF3w7
JHvFj/jBjHvSRi3AY/8fuSeBQUB19u42brHDU3UjVEoanWGCa/KuI8fSJOMVKSvo
hKA//9606MI7LZDUMTfrOii43XC4X5RF2TCIfretONDDMxoLDrT64FIKyK9NVPqW
KOhj7rJAKzc6BiRv/IunfVFIHto7QX5FrJVlI6T/XGbTEpEPqbDpDzJdI6AvvXA7
7Tb6ubb4Anv4AA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:52:09 2026 by rpki-client