Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
File: Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json)
Hash identifier: NvJnTBRZFUrvdo7WD100APIYTp3R2GpRynRi6CR+TGE=
Subject key identifier: D6:71:38:45:F6:B6:13:9B:84:8F:13:C9:91:F8:BE:4D:7B:53:68:E2
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial: 01A0CC360ACBE24C05461C0959A60EA89C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
Manifest number: 0BE8
Signing time: Wed 23 Sep 2026 03:01:28 +0000
Manifest this update: Wed 23 Sep 2026 03:01:28 +0000
Manifest next update: Thu 24 Sep 2026 03:01:28 +0000
Files and hashes: 1: 5hnYO6ztPLa-s4fykT38ED82F1s.roa (hash: oNF1AM5Hv8TzwevSKCEUvWBxoNLM1msTiU4uiTHoB08=)
2: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: lwkg3PW1Q06IGcwgrXI1FGyeyebBDcGGdbEhDmhaRMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:36:0a:cb:e2:4c:05:46:1c:09:59:a6:0e:a8:9c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Validity
Not Before: Sep 23 03:01:28 2026 GMT
Not After : Sep 24 03:01:28 2026 GMT
Subject: CN=d6713845f6b6139b848f13c991f8be4d7b5368e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:57:7d:86:ea:10:8f:68:32:07:5e:c2:c2:ba:
7f:49:89:46:f5:f3:e8:43:5d:ad:02:ce:0a:3b:66:
ca:a5:2f:a5:92:35:b6:6d:11:94:15:04:f5:72:72:
f2:d7:fa:09:ba:e5:b9:30:7f:6d:16:ac:9f:e3:06:
5a:f6:d9:84:25:1e:26:7d:ce:80:76:dd:be:44:77:
6d:03:76:8d:d1:19:43:17:6e:a4:2e:2b:de:6e:5a:
6a:32:fa:ea:f4:43:c7:cc:2c:27:0c:de:54:f4:ed:
fa:be:7f:d9:64:9a:ff:0f:96:8d:7c:1d:0e:c6:0a:
cd:f5:dc:81:68:be:26:d4:d3:68:12:56:85:75:dd:
ac:e8:b6:bf:ad:bc:23:45:6c:38:71:5f:04:a5:ec:
a4:bc:a6:0b:aa:42:41:bf:e9:1d:d9:64:bd:32:3c:
63:14:17:ab:27:b3:09:8f:b7:72:00:68:35:b9:68:
a7:22:6d:19:31:d9:7f:3e:3c:dc:f9:c9:98:d5:30:
e5:8b:e8:64:24:63:2f:c5:df:d3:ad:4c:38:c4:55:
38:61:93:87:01:f0:f7:53:1c:ea:9e:46:4e:f4:13:
c7:a7:d2:ab:af:ba:0d:0d:e8:1a:f1:ea:59:97:a1:
07:60:33:d8:dd:2f:53:fe:4e:f8:5b:e1:c4:f3:13:
b9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:71:38:45:F6:B6:13:9B:84:8F:13:C9:91:F8:BE:4D:7B:53:68:E2
X509v3 Authority Key Identifier:
keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ff:c0:57:13:b8:d2:8b:ae:dd:ba:32:99:aa:e6:8c:3f:25:
7a:2e:df:c0:f5:37:23:ac:e0:78:fe:49:5d:bd:d1:35:ee:d4:
2f:ab:ee:40:28:a6:19:66:b3:03:a1:fe:66:53:b5:45:a6:ae:
98:ec:cf:5e:dd:cf:ed:b1:69:ed:88:5f:6a:00:f3:43:a8:6d:
8c:eb:59:14:18:46:8b:d5:fb:e7:ec:be:85:b9:34:93:e5:c7:
73:ce:6d:e6:e0:e7:9b:c7:48:71:8e:11:8b:da:0c:ba:e0:22:
fd:81:0e:6c:ec:e4:3b:be:bb:44:81:5d:36:d6:e9:19:7b:99:
b6:3c:36:73:34:dd:8e:d9:e4:60:f6:17:e0:a9:b9:bf:f2:5b:
23:11:56:0e:66:26:93:59:a9:04:b9:1b:84:15:6d:f6:bc:5b:
f9:9e:32:a0:63:44:8f:59:fa:66:bb:4e:a3:ce:84:22:b6:a5:
ce:62:c0:eb:f4:cd:1b:16:fb:9d:62:75:7c:57:7f:c3:7a:de:
7a:bc:f1:55:75:cb:f0:3b:89:c6:5a:22:35:2d:3f:0b:35:a0:
ed:f0:40:a1:9b:61:10:4d:8f:f1:ff:47:02:3b:03:73:04:df:
49:1d:16:41:87:0f:c9:bd:65:e8:53:b5:ca:f8:f3:fc:90:3c:
44:5d:7b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:57:33 2026 by rpki-client