Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
File: Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json)
Hash identifier: rhSIuQNpfkBwhw76S17L1s5o37h+pZHm2ccHPw7WKIA=
Subject key identifier: B3:31:82:D4:8E:C7:36:73:9C:57:08:99:5B:D7:94:5F:51:6D:5A:1D
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial: 01A0D5DE3BBCF29C04F790A480BE5467EBAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
Manifest number: 0BED
Signing time: Fri 25 Sep 2026 00:01:46 +0000
Manifest this update: Fri 25 Sep 2026 00:01:46 +0000
Manifest next update: Sat 26 Sep 2026 00:01:46 +0000
Files and hashes: 1: 5hnYO6ztPLa-s4fykT38ED82F1s.roa (hash: oNF1AM5Hv8TzwevSKCEUvWBxoNLM1msTiU4uiTHoB08=)
2: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: OGwTCY1l7qte8xcNHFdVL+udomWHp7dmOEclprCjpG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:3b:bc:f2:9c:04:f7:90:a4:80:be:54:67:eb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Validity
Not Before: Sep 25 00:01:46 2026 GMT
Not After : Sep 26 00:01:46 2026 GMT
Subject: CN=b33182d48ec736739c5708995bd7945f516d5a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:95:3a:ca:d3:f0:fb:09:94:9d:27:3b:c4:66:
03:b9:ea:18:a8:d8:3d:ca:6b:7b:a1:73:64:14:9f:
ca:55:13:58:3f:3f:4d:f3:b2:f5:0d:1e:f8:d2:d2:
92:d1:9d:7b:8f:ee:7d:55:9e:e8:1d:c5:5b:41:12:
82:29:f8:ff:55:81:8c:f0:a6:8c:80:e4:2a:46:9b:
2d:6a:23:c6:20:69:a2:e0:2b:81:82:48:ab:02:50:
6f:95:d3:d0:8b:3e:b6:4f:f1:31:e7:2a:a3:33:96:
20:ed:6c:cf:c4:d4:dd:8a:59:28:df:c6:fa:f6:bb:
a0:c9:35:9b:57:88:b3:fa:ca:e0:42:65:45:9e:62:
f5:fd:6e:41:c6:58:da:d5:c7:38:72:33:35:e3:2d:
fe:35:dd:ce:45:50:44:60:ac:b0:c4:29:d0:3c:5f:
ee:b0:aa:c4:49:b1:14:3e:77:44:70:d8:62:f5:ea:
78:7a:50:b3:93:a9:b4:8c:8b:b4:38:83:44:df:d4:
55:aa:8c:33:bc:2c:66:1c:93:85:84:81:03:5f:e3:
29:37:e2:35:3c:5d:17:7c:89:6c:7d:ef:cf:e0:68:
96:52:ca:10:c6:4c:65:3f:82:94:10:cf:4a:57:f9:
4f:20:1f:bd:58:a1:8c:6d:d3:a7:19:b0:81:54:99:
ab:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:31:82:D4:8E:C7:36:73:9C:57:08:99:5B:D7:94:5F:51:6D:5A:1D
X509v3 Authority Key Identifier:
keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f0:9a:bd:e4:12:ca:a0:d4:7d:96:bd:85:1e:0a:8d:1a:d3:
be:6c:8c:14:c0:7c:18:d7:3a:62:59:6b:73:6e:1f:07:6e:91:
64:c5:c4:8a:7b:8e:21:22:43:65:60:6e:bd:63:49:53:85:bd:
56:85:36:fe:f9:10:2e:c0:e5:06:d6:80:41:30:58:f6:4f:57:
ab:11:4f:68:f2:b7:be:3f:03:30:d7:2c:c6:4b:e3:29:84:cb:
ab:dc:29:8c:e0:d9:d6:b4:19:df:80:67:b3:86:c9:f9:62:36:
05:c9:f5:22:05:f0:a6:31:11:eb:56:09:f4:63:e5:05:d5:44:
54:fa:31:b5:1c:d4:6e:35:eb:2b:77:a5:06:41:de:26:7f:79:
4c:03:30:c6:2f:8e:21:ea:d4:cb:0e:10:a0:c4:ce:05:12:28:
cf:84:13:ab:a2:92:45:49:73:32:5d:ec:85:ce:a1:cd:19:9f:
21:db:65:b3:e9:a1:b9:d7:57:4a:06:d5:19:93:c1:63:78:ea:
9e:89:d7:6b:67:5c:9e:4e:31:88:8f:f4:fc:de:68:5a:68:fa:
83:28:a6:4f:dc:e9:b1:e8:3b:ec:7c:3b:76:07:ee:29:ab:4b:
96:90:4a:3c:8c:60:13:b1:5f:f7:5b:83:e0:bb:8f:43:95:7c:
9a:0e:f2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:40:19 2026 by rpki-client