Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: HhXM/q9DZagjJlNdtktJZIfpQDBfTd1BqF89ZTzH76c=
Subject key identifier: F4:74:B8:77:79:58:D9:42:FC:C2:0B:D9:BE:47:4A:93:4A:54:4F:10
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 019D9818DB15E6E9C9FC27C6722D524B987F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 07D1
Signing time: Thu 16 Apr 2026 21:00:58 +0000
Manifest this update: Thu 16 Apr 2026 21:00:58 +0000
Manifest next update: Fri 17 Apr 2026 21:00:58 +0000
Files and hashes: 1: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: c8A3DV3Z6Mrajukj8DqM/RGY5vbc6RUWLhFEnhJb8Ik=)
2: Qg_NIv-RM7UnjRckECfyRZCTx8A.roa (hash: Z0yhWHf6/7uOzwOZk+22dTKbH7UEa1tOBgn5LYlNNX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:db:15:e6:e9:c9:fc:27:c6:72:2d:52:4b:98:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: Apr 16 21:00:58 2026 GMT
Not After : Apr 17 21:00:58 2026 GMT
Subject: CN=f474b8777958d942fcc20bd9be474a934a544f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:7b:6c:db:d1:0f:05:ac:97:8e:8c:c8:9d:
cb:33:fa:09:d9:e8:e9:c3:67:dd:4e:68:41:ec:3f:
ca:7e:f5:0d:0a:8c:57:00:38:c5:1f:27:15:30:1c:
e2:4e:db:54:8b:8e:24:06:6d:4d:1a:e9:89:31:f3:
9d:69:e1:49:fe:8f:35:64:54:53:19:47:42:0a:7d:
06:55:b0:17:f9:b0:46:15:aa:61:95:2e:2c:dc:9a:
f7:57:3d:68:e6:28:c1:91:36:2d:ea:07:bc:16:61:
36:20:b6:9c:3c:ba:3f:b7:31:68:cd:98:b8:56:c8:
29:1c:2d:97:a2:4a:9d:17:1a:85:de:b9:9c:cb:6d:
25:7c:e8:2d:d3:68:2d:a0:18:7b:97:d8:e5:5b:5f:
d4:2d:3c:9f:10:aa:a6:2b:6c:6a:c7:67:33:76:a9:
b5:7e:78:99:8f:ae:a3:20:ba:bc:e7:54:61:6a:7a:
03:e5:05:0e:fb:e5:d6:e7:ca:69:72:a9:7a:e8:68:
1c:c9:be:ee:3b:1d:2c:51:11:f1:f5:92:36:3c:32:
70:4c:a2:08:aa:50:fe:35:3e:19:6c:fc:8f:d5:31:
34:e2:78:7d:20:07:78:de:61:83:e4:5e:d8:5e:2e:
7e:55:0b:02:e1:c4:8e:5d:18:ec:e5:47:50:24:fb:
6f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:74:B8:77:79:58:D9:42:FC:C2:0B:D9:BE:47:4A:93:4A:54:4F:10
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:32:f6:1d:57:cd:43:32:00:8f:94:86:89:83:d7:10:30:46:
99:63:31:72:ec:2d:80:38:b1:5b:ba:af:23:34:b5:8e:12:0d:
7b:b2:ee:c9:33:12:84:93:7d:c8:23:48:65:4f:68:bf:6f:3c:
b6:48:e8:a2:9a:cb:80:e8:8f:1f:32:7a:27:b9:f9:4f:51:7b:
ba:f9:4c:54:23:28:a9:c5:d4:7c:68:43:8e:b0:7f:5a:a7:52:
7e:80:04:0f:3a:05:3b:26:37:48:18:e7:5a:f2:a9:c4:3b:38:
ca:2d:55:c3:12:b3:5c:43:6a:98:cb:10:65:12:bc:57:32:af:
3d:25:0c:93:a9:6d:a3:57:43:bc:98:63:ac:42:da:52:93:5a:
3e:e4:2f:16:20:18:65:8c:cd:b8:51:16:1e:ed:7b:f1:77:6e:
ee:14:d5:44:2b:48:dc:b1:64:93:bc:b6:0a:8f:18:a5:77:b6:
b6:73:65:4d:a9:a6:1e:fd:76:e3:68:a2:5a:b4:f2:d1:b0:19:
35:bd:b4:64:11:b4:f5:11:a3:76:65:e4:2b:46:89:03:83:d7:
91:b8:ca:e4:b3:70:77:4a:03:c3:21:9e:25:90:f4:a8:e2:d9:
62:c8:1c:4d:8d:1e:bf:7f:08:50:51:6d:96:3d:03:2e:41:3a:
1b:2a:97:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGNsV5unJ/CfGci1SS5h/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZTE1MTA4M2EyZmYzODBkMTcyNTk0MzRiNjRiNGZjYjA2
YTg1ZWYwHhcNMjYwNDE2MjEwMDU4WhcNMjYwNDE3MjEwMDU4WjAzMTEwLwYDVQQD
EyhmNDc0Yjg3Nzc5NThkOTQyZmNjMjBiZDliZTQ3NGE5MzRhNTQ0ZjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5N7bNvRDwWsl46MyJ3LM/oJ2ejp
w2fdTmhB7D/KfvUNCoxXADjFHycVMBziTttUi44kBm1NGumJMfOdaeFJ/o81ZFRT
GUdCCn0GVbAX+bBGFaphlS4s3Jr3Vz1o5ijBkTYt6ge8FmE2ILacPLo/tzFozZi4
VsgpHC2XokqdFxqF3rmcy20lfOgt02gtoBh7l9jlW1/ULTyfEKqmK2xqx2czdqm1
fniZj66jILq851RhanoD5QUO++XW58ppcql66Ggcyb7uOx0sURHx9ZI2PDJwTKII
qlD+NT4ZbPyP1TE04nh9IAd43mGD5F7YXi5+VQsC4cSOXRjs5UdQJPtv0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPR0uHd5WNlC/MIL2b5HSpNKVE8QMB8GA1UdIwQY
MBaAFPDhUQg6L/OA0XJZQ0tktPywaoXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2Qt
YzdlZjg2ODJkNjdkLzEvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2QtYzdlZjg2ODJkNjdk
LzEvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDL2HVfN
QzIAj5SGiYPXEDBGmWMxcuwtgDixW7qvIzS1jhINe7LuyTMShJN9yCNIZU9ov288
tkjooprLgOiPHzJ6J7n5T1F7uvlMVCMoqcXUfGhDjrB/WqdSfoAEDzoFOyY3SBjn
WvKpxDs4yi1VwxKzXENqmMsQZRK8VzKvPSUMk6lto1dDvJhjrELaUpNaPuQvFiAY
ZYzNuFEWHu178Xdu7hTVRCtI3LFkk7y2Co8YpXe2tnNlTammHv1242iiWrTy0bAZ
Nb20ZBG09RGjdmXkK0aJA4PXkbjK5LNwd0oDwyGeJZD0qOLZYsgcTY0ev38IUFFt
lj0DLkE6GyqXmA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:20 2026 by rpki-client