Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
File: _X0csRSU6ziY8Q09Y1vnXxay3FE.mft (raw, json)
Hash identifier: iMZDuwucudT1k9ayrLFG+xU4Y2jeWW8uN6lSNFdQJkU=
Subject key identifier: 96:1A:BE:AA:0D:5F:07:93:89:3E:30:6A:38:BC:2E:11:C2:8D:D2:3B
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Certificate issuer: /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial: 01A08BD646B6AE3C772894543A33E2C6FE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
Manifest number: 108C
Signing time: Thu 10 Sep 2026 15:01:10 +0000
Manifest this update: Thu 10 Sep 2026 15:01:10 +0000
Manifest next update: Fri 11 Sep 2026 15:01:10 +0000
Files and hashes: 1: E82B-w4jJKhyGgYx3Ej9sCBHvb4.roa (hash: A+TYWIOmRpCeA175k18MhvZXgytX5Jk9nQ0FQ6VBaqA=)
2: Q4zQF0crGItA_1w0I9xQ7hGAgWQ.roa (hash: JfuU3qW2LSn3VZ4RrrVe6pLBVqp+kUuKYjX2iO0ocCI=)
3: _X0csRSU6ziY8Q09Y1vnXxay3FE.crl (hash: UG58wtd5H/ineALHjyC4sI2n1A/SThICerVr1yNSSPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:46:b6:ae:3c:77:28:94:54:3a:33:e2:c6:fe:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Validity
Not Before: Sep 10 15:01:10 2026 GMT
Not After : Sep 11 15:01:10 2026 GMT
Subject: CN=961abeaa0d5f0793893e306a38bc2e11c28dd23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:db:52:69:0c:7d:11:ee:d5:49:91:99:25:
35:20:6b:56:03:86:af:33:c6:56:c0:03:5d:2a:b9:
be:6c:bb:1f:66:4c:5d:de:b0:10:02:a2:d2:71:10:
8c:a3:67:74:9e:23:f7:28:30:63:c9:af:cd:73:1f:
c9:5a:77:b0:ea:4a:f4:e4:e3:a7:f9:2d:9a:36:77:
16:d2:01:e8:0f:90:57:f7:26:2f:2e:62:56:d6:76:
38:56:52:33:8f:23:40:ef:1a:d7:02:c3:7c:9d:0a:
cd:2c:e5:db:7d:18:17:c8:65:dd:b3:80:9e:e7:d5:
74:58:bb:4e:04:91:d7:f2:71:c6:a4:40:67:90:c3:
02:03:97:7b:1b:62:ba:b3:93:52:10:e7:fa:ed:70:
df:35:bb:52:ce:f8:77:fb:10:af:4b:56:7a:b0:c4:
af:1a:48:51:3a:86:69:8f:27:e3:2c:89:96:55:78:
52:8e:c1:30:9c:21:14:3d:da:51:65:d2:85:3f:a5:
f4:4d:8b:cf:c2:a0:54:e2:bd:65:9b:2f:75:07:4b:
48:60:b6:ba:fa:ff:e5:5a:b3:5c:18:b3:4c:2a:52:
cf:0a:4a:f8:d4:bd:c6:ee:4d:fc:bc:ba:70:c5:d1:
18:91:b2:19:fa:0c:66:68:fc:24:99:45:53:04:ff:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1A:BE:AA:0D:5F:07:93:89:3E:30:6A:38:BC:2E:11:C2:8D:D2:3B
X509v3 Authority Key Identifier:
keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e7:ff:b1:8a:4b:59:d4:e9:52:87:44:12:7e:56:28:c1:e8:
1a:00:1c:ff:a0:83:ad:54:55:1a:d6:a8:0c:80:db:ae:45:f6:
70:96:f6:e4:56:77:8b:b7:98:cb:6e:ca:78:74:d0:25:69:35:
e6:de:f8:a1:3e:9b:d2:3a:99:68:79:88:9d:2e:be:3f:b2:f5:
24:5d:4d:17:51:3e:3c:42:8a:05:80:ed:f3:7e:ee:71:5e:52:
f5:14:17:a6:4e:5e:89:e2:e5:a5:43:5a:01:2f:cb:b7:b8:03:
ce:4a:18:b1:30:64:de:78:b6:52:ad:8a:06:36:e9:29:fd:df:
2f:93:a0:87:48:da:5c:26:25:9d:df:bf:fa:1e:fa:56:05:b0:
35:90:16:d6:29:67:4a:41:4b:8e:4c:fc:4c:2b:8b:1c:09:40:
a8:23:2e:9a:ba:bb:27:5d:be:bd:42:d2:9b:64:b9:11:a4:a3:
cc:2b:4d:50:98:38:6c:b7:df:e8:e4:f7:68:3a:f6:4c:3b:4c:
5a:d2:28:c3:9c:7c:d1:64:7b:b5:12:9c:fd:8a:27:2a:01:ce:
7d:c7:53:d4:8b:cc:84:4c:d6:28:c3:a3:bf:88:2f:68:a3:fa:
d1:cf:71:3b:db:7b:1a:cc:9a:be:53:c9:34:fb:5d:81:25:3c:
9e:f9:64:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:32:16 2026 by rpki-client