Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
File: Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json)
Hash identifier: 99Pa8EzzkK5qOnhLohrQIdlv5Q4Ahk6U4sEKu5eJBQ8=
Subject key identifier: D9:2D:2D:46:47:46:F4:42:BB:A4:B9:56:9C:E6:C5:A1:3C:88:43:B7
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial: 019EC0DB7C691DE8F1A7389C0C99922639D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
Manifest number: 0AD9
Signing time: Sat 13 Jun 2026 12:01:10 +0000
Manifest this update: Sat 13 Jun 2026 12:01:10 +0000
Manifest next update: Sun 14 Jun 2026 12:01:10 +0000
Files and hashes: 1: 5hnYO6ztPLa-s4fykT38ED82F1s.roa (hash: oNF1AM5Hv8TzwevSKCEUvWBxoNLM1msTiU4uiTHoB08=)
2: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: CTxT92aNSg/T2Wp86S2I77p5j6v1LEVdjoFTYdo1C7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:7c:69:1d:e8:f1:a7:38:9c:0c:99:92:26:39:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Validity
Not Before: Jun 13 12:01:10 2026 GMT
Not After : Jun 14 12:01:10 2026 GMT
Subject: CN=d92d2d464746f442bba4b9569ce6c5a13c8843b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ae:01:92:48:5c:94:88:6e:7d:36:f1:b6:06:
e8:dc:02:3e:14:59:5b:aa:dd:e9:bf:9b:80:cf:bb:
c2:e9:10:ff:2a:ad:3f:99:c8:bf:a7:09:34:42:72:
8f:2b:52:a7:f7:b9:c0:74:41:83:e6:e8:bd:28:00:
7c:09:e0:9b:e6:0e:12:9d:10:ba:a2:45:ec:9e:14:
41:0b:6b:c7:56:15:f4:4c:93:cf:52:51:56:e4:69:
b9:bf:2d:08:1c:e5:da:c6:b3:a1:27:bd:69:d0:66:
69:46:06:35:1a:c2:e6:23:bd:e2:71:bd:68:cc:07:
0c:de:df:ac:ea:ee:43:71:85:46:ef:34:4f:a5:eb:
fa:7e:a9:20:f7:29:38:f0:23:fe:6c:4c:93:fd:d0:
c1:bb:db:53:b2:39:c8:35:c9:03:26:db:6d:a9:2a:
d4:04:92:48:e0:8e:27:6f:f2:94:e9:03:d7:c8:fd:
89:ec:fd:f7:15:bc:c5:63:c7:79:04:75:92:9d:a6:
0b:1c:3f:7b:4b:89:66:fd:6f:20:cd:35:37:25:79:
d6:3a:26:3c:d4:cf:25:59:97:b1:e6:ec:94:26:47:
2d:c2:61:b0:ec:65:34:e6:93:0c:b7:11:2b:3f:b4:
bb:ef:1a:ba:0c:2d:76:9e:93:6a:11:70:c6:00:25:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2D:2D:46:47:46:F4:42:BB:A4:B9:56:9C:E6:C5:A1:3C:88:43:B7
X509v3 Authority Key Identifier:
keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c8:5e:19:e7:4a:a0:9d:9e:3a:5d:61:30:68:7a:d1:70:29:
2c:41:16:ee:43:91:ea:eb:e1:91:77:ab:fe:c8:eb:86:0b:6a:
82:68:f1:81:67:39:29:37:21:8c:87:e9:ca:62:e5:dd:cd:d9:
af:e5:09:a7:27:0e:27:09:e9:2e:e7:12:cf:21:94:ea:79:68:
bf:a2:c6:03:37:ec:79:e2:61:45:50:4b:24:e0:63:b2:6c:6a:
45:1b:2a:9c:d1:73:f7:9f:6c:ea:22:a5:85:47:0b:90:a1:88:
50:ee:57:67:e7:05:62:39:bd:ec:7f:d0:22:ae:63:f7:08:78:
e4:8f:c2:1b:9a:b8:57:7b:08:06:93:5a:27:50:b9:3f:c7:f7:
27:27:61:2e:0e:ed:35:6e:e2:aa:a0:39:f9:df:8a:21:86:d4:
aa:08:96:42:d5:e0:2b:e5:56:42:e5:cd:d1:db:09:b2:a5:23:
a4:61:69:55:0b:60:33:ed:6d:b4:26:41:b5:05:e8:30:27:e1:
e3:3d:a7:7d:7b:1d:c5:26:9f:9a:9f:9d:8f:69:1c:47:4e:0e:
3a:82:e8:a7:8c:26:47:d1:e4:3f:b7:fa:39:7d:e5:fc:10:40:
c7:fa:bc:35:b9:5d:47:e2:7d:da:f1:40:46:af:e4:d4:1f:86:
d1:91:8b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:59:08 2026 by rpki-client