Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: dOwHQjFbawKh2jOegoHNTROXTt2vbP6mWaTEyT0lFeg=
Subject key identifier: 70:49:DA:19:CA:EC:B4:95:72:A2:8F:42:15:93:C0:95:1E:6B:50:62
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 019ED2E15ECB0942A80FB6ACF77789C18187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 0874
Signing time: Wed 17 Jun 2026 00:00:45 +0000
Manifest this update: Wed 17 Jun 2026 00:00:45 +0000
Manifest next update: Thu 18 Jun 2026 00:00:45 +0000
Files and hashes: 1: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: 34HAMgOaSQuExOsTV405vxtu5e8C4h5AQcdvFT0/x7M=)
2: Qg_NIv-RM7UnjRckECfyRZCTx8A.roa (hash: Z0yhWHf6/7uOzwOZk+22dTKbH7UEa1tOBgn5LYlNNX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d2:e1:5e:cb:09:42:a8:0f:b6:ac:f7:77:89:c1:81:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: Jun 17 00:00:45 2026 GMT
Not After : Jun 18 00:00:45 2026 GMT
Subject: CN=7049da19caecb49572a28f421593c0951e6b5062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:37:fe:d2:49:98:f8:bd:93:1e:90:1e:e7:5b:
8d:39:e5:4d:da:b1:9b:17:b7:9c:03:8b:06:4a:6f:
5b:6f:73:52:55:30:85:fe:35:84:2b:7a:6a:3a:7d:
fd:0e:3b:52:53:7f:fb:c9:b8:81:26:31:21:c0:7d:
29:80:40:26:93:83:93:e1:67:06:90:a6:fc:58:b2:
46:0e:2e:9b:56:65:dd:d8:fc:78:b9:c6:86:65:7c:
2d:3c:60:a4:54:09:e9:2c:a3:ec:d7:2d:48:93:81:
50:32:5c:f8:1b:88:e6:8b:1b:fe:d0:09:ac:cf:f3:
d5:3d:d0:e8:8d:75:08:99:5b:83:ac:2c:26:14:74:
6d:07:9b:8b:6b:0a:3b:b4:10:29:10:df:7d:06:29:
61:fe:1b:43:29:ca:57:92:54:f6:ea:27:67:1b:b2:
a0:32:a0:ba:d4:26:f8:c2:3a:fb:30:bd:b4:8e:34:
8d:bf:94:8c:d1:4a:a9:3b:13:12:a9:7f:7e:b3:d8:
6f:9b:47:68:36:2d:6f:c2:e0:81:11:a9:17:40:ed:
63:ca:a1:63:22:25:c1:3a:09:d3:28:fa:86:0a:69:
4f:2c:b9:67:c3:48:0a:d1:47:03:31:22:5e:97:1a:
5a:7c:58:07:be:87:8a:a2:98:83:bd:73:d9:c3:ff:
54:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:49:DA:19:CA:EC:B4:95:72:A2:8F:42:15:93:C0:95:1E:6B:50:62
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:08:c2:97:d5:29:be:09:42:bf:d1:7f:00:56:db:3c:50:6f:
9d:0e:ce:a0:db:75:6b:31:b3:99:03:25:cb:e5:0c:59:1e:6d:
8f:3a:71:2f:67:e2:e5:35:b5:6f:9f:1c:43:ae:46:6b:61:2a:
89:fe:ee:d0:57:a6:44:ab:34:4c:50:95:c9:73:00:2a:c6:9c:
2b:ef:3c:6c:4f:e1:1d:c9:ec:89:4b:78:e2:76:c7:b6:56:87:
e2:fe:c6:cd:ac:5d:f3:2a:36:ea:77:98:10:11:46:30:60:ff:
43:6f:31:81:e5:de:79:ad:0d:87:04:e4:e1:2e:4c:41:1f:3f:
c0:a7:ab:e5:10:e7:99:b5:d0:e3:0d:5d:61:1d:64:2d:0f:ce:
9f:bd:75:e2:1b:66:e2:23:26:d0:6e:89:08:4b:49:dd:1d:4e:
e3:50:ef:4a:a4:bd:82:79:35:c2:11:c6:73:70:fb:f6:dd:ad:
64:5c:60:52:6e:5f:6e:4c:65:c9:db:87:b9:ed:42:17:d9:1b:
ab:ce:a9:f3:e4:19:8c:2e:88:69:70:9d:f0:ca:e1:63:a2:79:
e4:f4:8d:16:c1:b2:45:db:28:4c:f6:73:2c:e7:a8:d3:26:80:
c9:d1:bb:ae:b5:30:0a:b9:ff:fc:06:fe:01:04:e7:9a:ab:d8:
6f:d4:a1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:00:57 2026 by rpki-client