Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
File: Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json)
Hash identifier: ZXVwBAOt6oVmed7xHkBfOpm9ovMZ+Ym7dIwYG2jy6iw=
Subject key identifier: 6E:77:ED:74:D5:37:02:BC:91:0A:D1:72:15:3C:5A:61:55:75:F1:A8
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial: 019FAA876698AB47076A6A1D3D787A0E9C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
Manifest number: 0B52
Signing time: Tue 28 Jul 2026 21:00:28 +0000
Manifest this update: Tue 28 Jul 2026 21:00:28 +0000
Manifest next update: Wed 29 Jul 2026 21:00:28 +0000
Files and hashes: 1: 5hnYO6ztPLa-s4fykT38ED82F1s.roa (hash: oNF1AM5Hv8TzwevSKCEUvWBxoNLM1msTiU4uiTHoB08=)
2: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: onlKJ3K07INxASXOb4dn9WcB+sc6mlnPk3yqXzDX0GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:66:98:ab:47:07:6a:6a:1d:3d:78:7a:0e:9c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Validity
Not Before: Jul 28 21:00:28 2026 GMT
Not After : Jul 29 21:00:28 2026 GMT
Subject: CN=6e77ed74d53702bc910ad172153c5a615575f1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:52:bf:22:a9:1a:fb:8c:e5:12:ff:33:bb:
be:52:f5:3c:69:c3:f4:12:01:39:17:2c:fd:63:17:
f4:5d:82:ab:6c:2d:a6:22:e0:40:1d:c9:0e:9e:73:
4b:d3:ae:30:49:48:73:ad:ee:d1:a4:c4:49:6c:4e:
dd:9f:c3:01:e2:9b:5d:38:c1:40:9e:98:3e:6b:32:
64:9a:c2:20:52:c5:8e:72:78:52:fe:35:47:b7:2f:
b1:06:ee:59:36:d7:95:2a:d6:6b:4f:61:b9:ac:9e:
ec:60:e0:7e:c6:d0:7b:6f:78:dc:97:08:43:65:9b:
da:05:04:ba:d6:14:9c:99:99:fd:e5:40:ae:96:4d:
5f:16:1a:88:02:f2:b6:65:35:23:61:08:48:79:48:
4d:9e:7b:7f:d5:62:b1:aa:5f:c9:96:8c:bd:c8:bf:
ee:b9:c5:a3:2e:b0:2c:cf:34:ee:25:5a:38:27:1b:
2e:83:c2:bd:8f:0d:89:81:a7:ac:e7:dc:4d:6b:cd:
03:a1:6a:66:4e:ed:54:72:30:d8:4b:32:85:bf:05:
55:fb:f1:d7:1f:37:29:f8:9a:59:94:80:b5:fa:5e:
2d:cd:ee:d6:1a:f0:1c:d9:5a:fc:ed:32:7b:26:87:
13:8f:47:31:40:3a:7e:45:8b:96:35:80:41:ae:58:
0b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:77:ED:74:D5:37:02:BC:91:0A:D1:72:15:3C:5A:61:55:75:F1:A8
X509v3 Authority Key Identifier:
keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e9:7c:83:e7:22:9d:0f:04:61:49:36:44:9e:39:f0:6a:fa:
7c:77:36:ae:a8:92:c2:f1:0a:bd:dc:8a:03:bd:92:6c:5b:d1:
ed:a6:24:29:57:5b:05:4b:ee:05:32:50:d6:35:b3:f7:8e:22:
46:7a:2e:07:33:be:50:08:a2:c1:e1:3b:ed:bb:a2:8a:2e:a7:
cd:9b:b7:c3:99:0e:27:f3:86:06:78:dd:d5:45:4e:16:21:60:
ce:f8:01:41:9b:8b:d6:22:2f:ce:52:e6:8a:db:df:8f:b9:e5:
da:82:4a:ef:4c:3d:41:17:60:bf:cd:11:ed:91:12:67:60:0a:
1c:26:c5:87:08:65:1b:65:7d:e9:62:20:b3:53:5a:ea:e6:a5:
f7:1b:7d:ee:ac:fa:54:eb:80:07:17:0a:e1:e3:f2:96:7e:dd:
10:55:c2:8c:53:63:95:03:0b:b0:2a:b7:76:c6:4b:3e:94:5c:
0d:a3:a3:54:a4:2a:01:04:75:76:95:a9:5f:8f:a6:34:b4:0e:
f4:0d:68:65:8a:f6:d3:02:c5:2a:2c:94:69:2a:8c:12:81:bd:
09:2f:6e:76:ba:e1:12:ff:11:72:7e:f9:5f:09:3c:6f:44:ed:
81:32:13:13:c2:6b:2d:c4:6e:a1:3d:8d:64:51:0b:50:a2:5e:
0d:47:a7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:28:26 2026 by rpki-client