Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
File: xMO8BapSq5610YT1CInx_wyQzng.mft (raw, json)
Hash identifier: VNGQ2cmpqZ8Y6tdhTKJEqH9IAg60uS75ZRgCbONoIAY=
Subject key identifier: E4:35:CF:36:0D:B6:93:71:79:02:04:CB:EF:8F:03:5D:31:ED:04:7A
Authority key identifier: C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
Certificate issuer: /CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Certificate serial: 01A08AF9FF00CC6EC77499D398A76881B4A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
Manifest number: 10AF
Signing time: Thu 10 Sep 2026 11:00:34 +0000
Manifest this update: Thu 10 Sep 2026 11:00:34 +0000
Manifest next update: Fri 11 Sep 2026 11:00:34 +0000
Files and hashes: 1: xMO8BapSq5610YT1CInx_wyQzng.crl (hash: NXNf+uGAfeHiBQrcE6kfBcx9fYjAodtH1TqC6qdSRrs=)
2: yxsa1Z6d8htC29Yz_UYSQs9RaQE.roa (hash: 1Pk1kRtrAEAz3ywzHSpPnm1BjrrJ1MrQ7aRONAMDNSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:f9:ff:00:cc:6e:c7:74:99:d3:98:a7:68:81:b4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Validity
Not Before: Sep 10 11:00:34 2026 GMT
Not After : Sep 11 11:00:34 2026 GMT
Subject: CN=e435cf360db69371790204cbef8f035d31ed047a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:cf:02:97:e6:92:59:91:6b:00:1f:00:2a:
68:bd:34:3b:04:83:f8:b0:e1:8f:cb:cd:d8:e8:ea:
30:2e:2d:17:82:02:6c:58:dd:35:cd:1d:6a:21:ec:
0e:63:e6:6e:52:9d:25:d0:5a:99:ed:d4:8d:dd:a1:
8e:dd:53:ec:26:02:f8:06:fd:2d:cf:9a:9d:72:85:
bc:5f:20:e7:ae:05:a2:4c:95:72:39:6d:87:20:15:
f6:0c:e6:43:ac:5f:5a:cc:d7:ee:25:7e:bc:19:c3:
6e:b3:0b:55:c0:b6:76:f5:ba:24:bd:37:43:00:d3:
bd:df:d7:03:88:78:1b:ae:db:85:1d:2a:dc:7f:34:
7f:bb:34:27:ee:03:c3:6a:96:60:a6:2c:73:ad:d5:
2e:52:6a:e1:27:61:61:ef:aa:c0:b3:f4:f4:48:c2:
12:60:f7:fc:a7:5b:8f:b2:c5:69:92:02:05:dc:cf:
ad:2a:f7:8b:1d:59:68:dc:c4:f0:d4:7e:7c:82:20:
a8:06:32:bf:a8:00:fb:e5:bc:9e:65:3c:0f:50:4d:
98:c8:4d:59:cc:dc:f1:82:56:21:68:1c:75:61:6e:
9e:c2:8f:31:6a:17:63:db:05:e4:b2:4a:dd:ac:b9:
67:b5:19:14:73:b1:ec:1c:7d:be:6c:ce:56:f6:3b:
b7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:35:CF:36:0D:B6:93:71:79:02:04:CB:EF:8F:03:5D:31:ED:04:7A
X509v3 Authority Key Identifier:
keyid:C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fe:22:12:ec:27:da:e1:5f:62:c4:ad:9f:13:d5:7c:ab:07:
be:bb:d2:b2:76:24:2f:b2:a0:8e:e1:eb:e3:f5:69:02:37:3d:
ef:29:d6:06:96:94:03:a1:52:9c:9d:aa:a2:f7:20:4d:cb:80:
b3:fb:73:04:d7:f6:fa:72:ab:fb:cc:5a:b6:45:e2:0f:57:c1:
37:30:56:a7:ad:e8:2b:e6:d3:d5:b5:3c:7a:c8:4e:6f:d5:93:
ff:e0:0a:83:1f:14:9a:12:57:15:ae:a8:1a:b1:05:f4:7f:f4:
0e:c6:4c:7a:a3:1f:d1:d8:0b:82:03:4f:45:dc:67:6d:59:88:
46:39:a3:15:8e:fd:02:04:7e:25:34:95:02:da:86:0c:be:60:
7d:84:63:1d:3b:ee:4c:84:7f:01:dd:32:4b:d0:d8:4c:68:0a:
21:01:30:0f:30:b3:19:e3:4a:4d:64:20:9c:e7:bf:e6:91:68:
07:41:e3:0a:90:5e:7d:7b:73:44:3a:e2:25:39:37:44:ed:4c:
c3:52:49:44:96:a9:85:a9:11:50:f9:6c:74:17:22:4f:97:84:
6d:af:11:c4:f3:47:84:29:31:0c:9e:1b:35:e0:92:97:c3:08:
1a:df:2f:02:7b:14:2b:7b:21:91:fd:17:27:15:45:7a:d5:51:
1b:47:6b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:36:17 2026 by rpki-client