Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: XB2PpNOM1gY03VedDpjeTn6krLeFzxQqaIHfZPFRKDc=
Subject key identifier: 97:37:80:5E:AE:E3:07:1E:45:EC:6F:18:9C:3B:36:0A:7E:98:E0:2C
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 01A1C21CD5093E7B0D31CD026555057A7530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 09F9
Signing time: Mon 09 Nov 2026 21:00:31 +0000
Manifest this update: Mon 09 Nov 2026 21:00:31 +0000
Manifest next update: Tue 10 Nov 2026 21:00:31 +0000
Files and hashes: 1: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: lCQl+QtqlXl4O3kazEhLJjMOZVlBAtISwCffJyfn/w8=)
2: Qg_NIv-RM7UnjRckECfyRZCTx8A.roa (hash: Z0yhWHf6/7uOzwOZk+22dTKbH7UEa1tOBgn5LYlNNX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:1c:d5:09:3e:7b:0d:31:cd:02:65:55:05:7a:75:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: Nov 9 21:00:31 2026 GMT
Not After : Nov 10 21:00:31 2026 GMT
Subject: CN=9737805eaee3071e45ec6f189c3b360a7e98e02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:3f:62:73:b3:95:93:c0:b7:3a:48:33:3f:
b4:c6:eb:bf:ca:55:22:36:a2:81:64:41:43:2f:28:
20:5e:6b:3d:e1:53:af:71:5b:8a:27:8f:bc:d5:e0:
58:24:10:80:82:bc:28:4e:1e:6b:2f:ce:27:e6:60:
c8:eb:5c:e7:58:ba:32:26:2b:20:b7:29:1b:88:ce:
ef:2e:f8:9b:66:b6:ee:bf:17:13:5f:ea:de:5a:54:
9a:01:14:d1:bf:0d:a9:5b:aa:e1:5e:8b:64:c1:25:
7d:09:4e:5a:f4:0a:80:c4:b7:b3:ee:ae:57:2d:00:
64:1c:cd:56:b5:3e:06:d0:d8:63:5d:db:b2:83:50:
2d:d1:c9:1e:88:96:34:55:75:0f:3c:38:49:23:90:
3a:25:c8:bb:8a:5e:ff:56:b9:14:ce:fd:55:9f:79:
e6:d7:c7:e7:10:33:33:fc:22:fb:1f:38:58:3d:bf:
f4:41:43:44:59:e0:9a:50:02:98:fa:5b:a3:e4:a6:
0c:81:71:68:ab:cb:fc:0e:8b:64:83:4b:85:36:43:
92:34:2b:96:36:ac:d8:8e:be:d0:2e:5a:7c:3e:c0:
06:59:31:1c:09:b4:b0:32:28:36:20:48:24:aa:af:
c3:83:8f:dd:43:2c:85:06:ea:f2:95:29:50:7e:1e:
f5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:37:80:5E:AE:E3:07:1E:45:EC:6F:18:9C:3B:36:0A:7E:98:E0:2C
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:24:18:d6:33:c7:0d:bb:72:8e:ec:51:b3:9e:9d:92:8e:4b:
f0:8a:31:11:e6:45:c4:a2:2f:a9:69:10:40:1d:d6:2f:cc:81:
72:41:1f:93:a0:54:ae:0a:78:fe:b9:19:82:cc:c2:7a:db:19:
65:6e:71:44:fe:dc:a1:39:9b:da:ae:69:63:18:1e:5e:99:92:
cd:4c:e0:69:63:ae:a6:58:d3:f7:30:e9:3a:de:cc:27:88:64:
27:51:b0:d1:f6:40:60:5a:b5:cb:9f:ab:03:2a:8d:15:55:53:
c2:eb:88:d8:7c:bb:85:d6:94:d4:29:3d:81:79:4e:bb:c9:db:
5a:e7:71:99:ab:95:21:f2:a0:c6:a8:96:71:4e:dc:98:0a:fe:
23:06:7d:f9:4f:b1:da:43:be:ad:9e:52:46:cd:f9:bb:7c:10:
ea:5d:23:61:cd:29:96:00:3a:b8:de:d5:2e:a7:fe:77:e6:59:
49:99:90:30:5a:3b:92:4b:5c:2f:c1:47:bb:15:d3:83:63:6e:
71:fc:f8:b7:d7:ad:d3:a0:d1:bb:5e:05:18:2e:5c:79:b5:ec:
c0:77:c0:26:3f:e5:05:5d:2b:e0:2d:76:52:70:98:df:d3:79:
20:ed:8e:3a:45:e5:cf:1f:e0:12:8b:79:6f:ff:e7:30:dc:d5:
e5:d2:46:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 01:54:19 2026 by rpki-client