Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
File: xMO8BapSq5610YT1CInx_wyQzng.mft (raw, json)
Hash identifier: fJKZgBS00uY4CYDL1ZNKiodQFVVgSlDr1/NMfkT6mmw=
Subject key identifier: 29:11:4E:82:2B:E0:81:E3:42:F8:B9:D4:3E:E8:EB:95:28:F1:51:CB
Authority key identifier: C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
Certificate issuer: /CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Certificate serial: 019DCC072C8D39F3C287E724E3DE67B5EC96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
Manifest number: 0F43
Signing time: Sun 26 Apr 2026 23:01:55 +0000
Manifest this update: Sun 26 Apr 2026 23:01:55 +0000
Manifest next update: Mon 27 Apr 2026 23:01:55 +0000
Files and hashes: 1: xMO8BapSq5610YT1CInx_wyQzng.crl (hash: 7r2i2w4mdPlMy7CRvjv7ahsij/k2mPaHwqnVSXIoE/M=)
2: yxsa1Z6d8htC29Yz_UYSQs9RaQE.roa (hash: 1Pk1kRtrAEAz3ywzHSpPnm1BjrrJ1MrQ7aRONAMDNSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:07:2c:8d:39:f3:c2:87:e7:24:e3:de:67:b5:ec:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Validity
Not Before: Apr 26 23:01:55 2026 GMT
Not After : Apr 27 23:01:55 2026 GMT
Subject: CN=29114e822be081e342f8b9d43ee8eb9528f151cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:7b:7f:25:df:36:aa:4d:d6:77:92:c1:d0:
4f:57:ad:6b:8a:f9:53:d1:1b:68:76:8a:8c:5f:78:
a2:15:19:94:30:2d:9b:75:b9:a8:d2:24:df:1b:b8:
48:06:e5:05:85:31:10:fa:f4:be:c0:55:09:a8:3d:
36:cd:5c:38:e8:a7:b1:ae:90:e0:dd:05:98:33:b9:
ab:e4:80:e5:9f:db:3d:91:6f:5f:13:c2:30:47:89:
08:e4:9e:ba:36:ae:20:30:22:68:8c:b1:60:5a:ba:
0a:0d:fc:0e:f1:cb:26:80:27:a1:61:b2:ec:cc:fe:
b2:65:e1:6f:8b:5d:fd:ab:79:1c:15:4e:49:47:9b:
61:8a:21:19:f8:5f:e9:7b:cf:43:ed:9c:e7:7c:b0:
59:bd:f9:b4:45:a9:e3:86:a6:58:6e:de:8f:ce:4d:
7b:a8:f9:9f:f1:53:94:2d:6f:2b:67:d3:22:4e:e8:
fd:c4:a4:e4:5d:99:cb:e7:dd:76:f7:12:5d:b7:8e:
e4:00:a1:d6:17:e2:9f:ca:39:33:1e:39:f9:01:18:
cb:8c:27:d4:e0:67:87:08:7a:76:6e:cf:93:f8:34:
f2:e1:d2:a3:e1:66:33:43:ee:15:0d:77:d6:86:e5:
c3:0a:eb:77:e9:dc:80:a1:91:d3:9c:7e:c6:0e:fc:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:11:4E:82:2B:E0:81:E3:42:F8:B9:D4:3E:E8:EB:95:28:F1:51:CB
X509v3 Authority Key Identifier:
keyid:C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d3:4c:96:a6:4a:0c:87:51:f8:b3:a3:bf:96:44:b9:9a:9a:
80:d0:a6:8c:52:c6:b7:5a:f4:b2:f3:3e:6a:1f:1e:82:e9:ea:
01:39:cc:f7:8e:5c:f2:91:6d:f9:57:11:7b:f3:73:43:46:f6:
6a:5c:78:07:95:fa:09:8b:de:1b:e6:6d:d9:a3:a7:05:3b:5d:
bc:2b:6a:3d:cf:f2:51:ec:8a:d8:ac:e9:b5:02:52:9f:cd:99:
9b:5b:ef:e0:7f:89:bb:9e:a4:97:db:ee:9e:76:f9:bf:ac:06:
b1:52:b3:b0:4a:d9:e3:fc:6c:d2:f1:13:24:84:59:50:db:38:
16:d7:1d:5a:63:72:11:e1:6b:f5:f1:55:bb:72:d4:22:f8:6b:
d0:76:73:77:05:a2:f0:cd:51:11:1f:ad:cf:2d:f1:02:a4:87:
48:c8:e5:47:5e:15:73:f0:22:c7:ef:d6:ea:7e:b5:fe:c6:95:
43:04:1a:ee:fa:92:ed:fd:64:2e:60:a1:14:ce:8f:c1:b3:16:
91:85:6c:2f:5a:30:c0:1c:81:32:c9:e1:3b:19:0c:fa:33:6a:
08:89:3c:b8:1e:69:f7:f6:4d:34:18:71:1b:f0:97:2e:d7:14:
a9:a7:bd:91:ac:52:92:63:68:6a:2e:7f:58:0a:88:f2:9e:8d:
5c:9b:6d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:22 2026 by rpki-client