Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
File: Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json)
Hash identifier: WQbWOSKVphHwVKNEBvd4lPxNTMDo/upwF77Qk+GEZQw=
Subject key identifier: 4D:84:61:35:C7:1D:F5:3A:54:45:0F:50:0F:35:61:84:FF:57:AE:C4
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial: 01A181BE0DD3D44621FF471812417C7DF38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
Manifest number: 0C46
Signing time: Wed 28 Oct 2026 09:01:18 +0000
Manifest this update: Wed 28 Oct 2026 09:01:18 +0000
Manifest next update: Thu 29 Oct 2026 09:01:18 +0000
Files and hashes: 1: 5hnYO6ztPLa-s4fykT38ED82F1s.roa (hash: oNF1AM5Hv8TzwevSKCEUvWBxoNLM1msTiU4uiTHoB08=)
2: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: 49KTNkjijNGojvpEbypbiCNikg4a8MdXzBfE/p/fqz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:0d:d3:d4:46:21:ff:47:18:12:41:7c:7d:f3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Validity
Not Before: Oct 28 09:01:18 2026 GMT
Not After : Oct 29 09:01:18 2026 GMT
Subject: CN=4d846135c71df53a54450f500f356184ff57aec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7a:58:04:be:06:84:10:e0:c3:54:da:7b:66:
51:e0:4f:29:ea:06:e5:ba:91:ee:6e:be:7e:51:98:
54:40:06:74:fd:73:39:f1:c0:9c:84:e0:b9:cf:92:
57:2c:75:00:b6:93:55:a8:1d:5a:9e:26:18:a1:35:
3d:e1:d8:59:66:6a:4f:3a:7b:6a:f9:fd:2d:b8:dd:
68:cd:f9:fe:5e:a5:2e:56:ef:2b:f5:7c:23:db:a7:
66:9b:c4:8a:6c:c3:d5:1f:be:8d:20:04:64:c5:ef:
3d:a6:bd:3a:0d:3d:64:8c:26:75:76:95:cf:8d:a8:
2c:0d:bc:0c:b4:71:85:18:9e:a9:95:e9:11:d9:b0:
3f:f6:dc:b6:f4:17:1b:98:8c:5c:69:e0:80:e8:ee:
98:64:61:f0:19:4c:89:21:d9:2c:d5:ad:6a:df:3b:
76:29:2c:45:09:8d:09:60:9d:dd:9f:13:59:e4:1c:
f8:bf:4c:16:ee:8b:60:c6:6f:9a:a3:21:f3:e7:8f:
fe:b3:c7:53:51:62:2f:72:81:af:28:0f:5c:db:c8:
11:f2:ee:41:32:b7:58:8e:c5:70:40:8b:df:de:32:
fe:65:0b:0c:e4:11:27:76:fd:df:41:02:b2:bb:ac:
0e:52:80:69:d9:a3:51:3b:12:ae:37:65:b6:35:c2:
23:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:84:61:35:C7:1D:F5:3A:54:45:0F:50:0F:35:61:84:FF:57:AE:C4
X509v3 Authority Key Identifier:
keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ea:d8:73:05:36:ea:6b:c0:18:bc:65:bd:6e:e5:f0:c5:42:
15:91:b0:9f:43:9b:9d:14:2d:57:05:10:be:a5:57:d5:78:57:
13:2a:0a:bb:6d:ec:fc:48:24:e9:2f:01:0c:6e:27:c9:b8:bd:
54:09:cd:ec:33:27:df:b8:2a:f5:04:97:e3:37:71:cc:1d:d6:
b4:a9:43:52:96:49:bb:a6:ae:a6:1f:e5:7c:d5:d6:5d:61:48:
a3:ed:0e:1a:ae:07:4d:75:2b:e4:cc:00:11:fa:50:55:9f:80:
ee:3f:66:61:46:fe:8c:f0:cd:56:d3:ad:e8:ea:0d:77:17:a3:
6d:87:e3:98:77:87:f2:33:4c:26:ff:af:db:ed:e3:aa:2b:21:
76:9a:ec:1d:1e:f4:bc:e0:92:90:e6:72:08:ac:4c:98:f4:de:
52:84:6d:d3:e3:99:52:6e:a8:85:67:e4:9a:05:57:4d:25:e8:
64:b4:03:97:08:02:03:a4:74:3e:04:48:45:d7:1d:9e:d3:c8:
aa:ef:63:63:df:17:99:0e:be:38:c7:d6:ac:d9:ff:22:c7:56:
4d:a8:78:2c:31:f3:f5:e1:c1:8b:fd:04:7f:e8:38:7c:fc:4c:
c2:ea:bd:56:1e:b8:8e:32:6f:f0:b0:ea:7a:32:e2:bf:61:88:
87:f3:73:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 17:23:38 2026 by rpki-client