Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
File: xMO8BapSq5610YT1CInx_wyQzng.mft (raw, json)
Hash identifier: SmvDi5ZeQxdYn2Y5otoQflj349OOwEDEGctOiqvNSNU=
Subject key identifier: C9:7F:F2:0F:1F:B0:F8:DD:D3:D7:BA:8C:2D:20:1A:22:D1:86:0D:3E
Authority key identifier: C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
Certificate issuer: /CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Certificate serial: 01A0E3D0BED656BB5C46C555F190FC3E54BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
Manifest number: 10DD
Signing time: Sun 27 Sep 2026 17:01:43 +0000
Manifest this update: Sun 27 Sep 2026 17:01:43 +0000
Manifest next update: Mon 28 Sep 2026 17:01:43 +0000
Files and hashes: 1: xMO8BapSq5610YT1CInx_wyQzng.crl (hash: bCQzgcr/QHKhhSgiikLXAmHUEJDt9f0lQPihXTwUNI0=)
2: yxsa1Z6d8htC29Yz_UYSQs9RaQE.roa (hash: 1Pk1kRtrAEAz3ywzHSpPnm1BjrrJ1MrQ7aRONAMDNSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 17:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:be:d6:56:bb:5c:46:c5:55:f1:90:fc:3e:54:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Validity
Not Before: Sep 27 17:01:43 2026 GMT
Not After : Sep 28 17:01:43 2026 GMT
Subject: CN=c97ff20f1fb0f8ddd3d7ba8c2d201a22d1860d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:f7:d4:22:f7:56:d3:59:96:44:6f:4e:bb:
f7:bc:a7:ce:8c:f0:68:5a:45:38:6f:89:8e:b8:b3:
93:29:e6:07:a2:e1:c1:d1:57:ba:a1:71:fe:64:2c:
e0:f7:53:a2:31:9b:5d:1b:e4:a3:ec:96:c6:6e:83:
0c:4b:15:90:17:c7:c6:f7:4c:e2:bf:a1:92:fc:b8:
a7:1b:25:42:54:50:c8:3a:c0:5a:ac:91:18:fe:2a:
5e:f2:3e:f2:bb:d7:0b:46:f1:27:be:27:2c:56:8d:
89:c3:c9:6e:0d:cf:b2:c1:31:20:18:d5:92:7c:80:
f8:42:1d:a5:0a:cb:d4:af:08:a6:43:bf:15:7e:3b:
70:28:7e:eb:47:01:a7:6a:69:be:f2:8c:2e:f0:05:
3e:6a:8a:83:94:3d:6e:ab:48:59:09:4c:9f:90:8d:
12:ec:85:d1:17:ac:74:8d:5c:20:f9:36:eb:eb:4e:
70:c4:3f:22:ed:28:50:24:5e:68:62:b0:e8:5f:6a:
c8:3f:f4:25:33:a9:26:0a:9e:7c:36:a4:47:0f:a5:
a7:3f:94:81:28:52:91:33:cd:69:ca:ee:bc:40:b0:
bf:48:d4:81:a3:2e:81:bf:e5:47:67:a3:c6:9f:df:
53:b8:5c:40:b0:71:ac:0a:02:92:26:41:2f:77:68:
82:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7F:F2:0F:1F:B0:F8:DD:D3:D7:BA:8C:2D:20:1A:22:D1:86:0D:3E
X509v3 Authority Key Identifier:
keyid:C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:24:0e:47:8d:bf:75:37:af:fb:9a:ac:06:2a:af:a2:f9:c5:
7f:d1:ac:e5:c0:37:6e:73:37:43:f1:86:c4:ef:df:7c:ef:b1:
82:4b:69:39:76:e7:7d:f6:f3:64:3b:b4:e8:2f:f9:0e:0d:ab:
59:20:78:e8:3b:0e:d6:de:40:f3:dc:ea:ec:b3:40:13:5a:38:
b3:8e:80:b9:3e:0f:e5:cc:c6:a8:4e:35:2b:b7:91:b2:4c:55:
d1:3c:f1:0e:c8:9d:89:02:7a:0e:5f:39:35:c7:47:67:e2:95:
30:1b:ea:e2:1d:b0:5b:41:ae:36:ec:bb:4d:c7:47:8a:f1:4b:
6b:91:5f:8d:03:17:d5:4c:42:f8:0e:af:4d:49:68:4c:20:a3:
37:46:ee:dc:0f:97:4c:ae:77:19:8d:ac:28:13:f6:db:79:1f:
d0:97:1d:11:14:f2:48:33:c1:b2:3a:70:36:e3:5f:4f:2f:12:
97:e8:48:f5:44:18:46:f6:37:e3:e6:fa:be:5c:ad:9e:60:1e:
5a:10:b6:a0:62:61:e8:20:b2:0a:ae:a0:f8:6a:e3:ef:4d:b2:
0e:57:f3:a5:55:50:3e:49:9b:b1:4f:a7:75:ad:39:10:16:f6:
fe:7b:a3:03:81:32:67:04:40:a5:91:f7:08:7f:7d:5f:c9:dd:
9b:88:0c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 02:20:17 2026 by rpki-client