Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
File: Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json)
Hash identifier: zeYkAhbBenv4OAj3NtuE7DnmaLMdqZYpLiM8YOQ7plI=
Subject key identifier: 55:B3:15:37:65:25:98:7F:A1:B1:7C:6D:3C:9E:92:B9:A6:DC:4F:EB
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial: 019DA4F82CA1C9E02BE1C82ED5AEC6735F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
Manifest number: 0A46
Signing time: Sun 19 Apr 2026 09:00:20 +0000
Manifest this update: Sun 19 Apr 2026 09:00:20 +0000
Manifest next update: Mon 20 Apr 2026 09:00:20 +0000
Files and hashes: 1: 5hnYO6ztPLa-s4fykT38ED82F1s.roa (hash: oNF1AM5Hv8TzwevSKCEUvWBxoNLM1msTiU4uiTHoB08=)
2: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: zMfERvC9wJhQpRj2Z//Vvzv3E4vxB93bpXbDQC/7PBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:2c:a1:c9:e0:2b:e1:c8:2e:d5:ae:c6:73:5f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Validity
Not Before: Apr 19 09:00:20 2026 GMT
Not After : Apr 20 09:00:20 2026 GMT
Subject: CN=55b315376525987fa1b17c6d3c9e92b9a6dc4feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:70:e7:26:ae:30:fa:e2:08:b8:17:84:49:80:
d3:08:22:cc:9a:fb:1c:df:52:ee:48:6d:0b:bb:c8:
4a:d3:41:0a:fb:81:1c:a6:78:9b:73:9b:a5:ee:92:
34:a1:e5:ed:9a:ec:bd:2c:c8:59:86:1a:45:a2:45:
fe:3d:e1:92:e2:f7:ba:34:cb:3c:3d:71:e4:66:59:
f9:70:b7:88:9f:42:e5:f7:3f:29:f3:25:5a:4b:fa:
2b:ab:0d:e1:91:db:86:8d:6d:55:78:bc:1c:9b:17:
00:20:2d:c5:d0:95:c8:b6:df:73:19:b3:9c:c4:34:
6a:f1:28:96:ba:f3:c6:94:a2:ec:86:a7:49:c9:b5:
c9:97:cd:54:a4:2e:3b:e2:ec:30:be:df:86:73:08:
2a:ea:31:21:52:18:b3:df:d0:74:1f:a6:6b:1f:1f:
30:68:80:7a:90:4b:a6:d2:b2:84:3d:89:44:67:b6:
15:5d:9c:7e:d2:c6:57:cc:6b:39:94:37:47:4d:1b:
b4:bd:5b:65:38:15:aa:b1:66:83:5a:f1:c4:34:a5:
de:0a:ba:18:aa:ee:56:e4:d8:77:2d:57:02:f5:e1:
23:5e:d5:76:78:c4:ab:30:97:15:6b:42:9d:59:c6:
76:12:30:1e:10:15:37:ca:5e:23:6c:2c:cc:b3:20:
9f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B3:15:37:65:25:98:7F:A1:B1:7C:6D:3C:9E:92:B9:A6:DC:4F:EB
X509v3 Authority Key Identifier:
keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8c:c1:96:25:45:b3:ff:07:1e:4e:7c:81:1f:88:1a:97:e4:
1b:60:b3:a3:26:53:61:c0:05:98:83:1f:10:95:33:7b:75:0c:
98:b2:ed:79:cc:39:47:40:40:12:13:06:cc:50:cb:52:56:f1:
cb:0d:49:49:6b:f5:f7:c3:d0:98:f7:57:23:96:49:03:81:80:
d9:50:2b:89:fb:61:91:5f:52:bb:03:a1:9f:60:95:f6:99:f2:
b7:97:1b:a2:7e:71:b6:19:24:fc:ec:68:00:5f:60:19:ae:20:
e3:8a:cc:00:b8:e7:7b:28:8c:d3:c1:b0:52:bc:23:1d:e3:a2:
fc:e6:17:b4:c0:61:98:c2:5d:0f:f7:34:c7:51:b6:b6:23:1f:
5e:b5:fd:5f:14:9b:97:74:b0:88:f4:54:54:45:bb:ac:9a:37:
63:25:cd:43:fe:4e:78:f7:84:75:ef:e4:dd:5b:c6:b4:cf:21:
c5:5e:fa:f9:64:4a:7c:14:95:75:27:91:68:7e:14:9a:c1:97:
27:2f:2d:25:4d:46:9b:2a:be:50:e1:d2:ad:63:4b:bd:a8:1a:
c5:aa:07:50:78:71:4b:bb:28:ee:da:59:97:41:e4:b3:c7:53:
49:f3:d2:8b:be:73:da:e1:0b:38:ac:a0:72:1f:01:e9:8e:f1:
6d:66:ea:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:29 2026 by rpki-client