Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
File: Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json)
Hash identifier: bdUyY4oejLQ0ehLA6LyjxgzbmEYhCuXTwJYyLc3AzeI=
Subject key identifier: 12:66:12:50:F1:60:A5:C6:65:3B:50:1E:2D:9F:BE:6D:98:E1:B4:18
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial: 019CE5C93CCE13B73B3E316B2967C5F4EFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
Manifest number: 09E3
Signing time: Fri 13 Mar 2026 06:01:36 +0000
Manifest this update: Fri 13 Mar 2026 06:01:36 +0000
Manifest next update: Sat 14 Mar 2026 06:01:36 +0000
Files and hashes: 1: 5hnYO6ztPLa-s4fykT38ED82F1s.roa (hash: oNF1AM5Hv8TzwevSKCEUvWBxoNLM1msTiU4uiTHoB08=)
2: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: MWSuWMdJgQast8Kgp2bNsOJhf0rjUEpviiJlkmRRZwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:3c:ce:13:b7:3b:3e:31:6b:29:67:c5:f4:ef:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Validity
Not Before: Mar 13 06:01:36 2026 GMT
Not After : Mar 14 06:01:36 2026 GMT
Subject: CN=12661250f160a5c6653b501e2d9fbe6d98e1b418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d0:7e:80:c5:ed:55:77:ed:7c:61:5d:1e:fc:
f0:57:f2:2d:85:b4:b4:88:d0:13:66:49:6a:15:0c:
39:b6:87:05:14:c1:6e:40:1d:77:54:6a:35:68:e2:
c0:87:f4:86:22:34:b7:c1:4f:a2:28:d4:fc:a1:64:
17:4f:a7:75:12:27:4a:85:83:05:44:98:03:e4:c7:
01:bd:80:8d:c7:d3:53:69:48:e6:af:d5:f6:b4:38:
e0:b0:76:6c:bb:4e:5e:01:f1:ee:77:d7:93:d2:37:
26:fa:89:72:b1:ec:56:df:42:e0:d8:31:dc:c3:4e:
5d:07:cc:ea:89:71:e9:12:a9:d3:a5:f4:f5:72:f1:
b6:97:ef:5d:8f:87:75:41:6d:67:c1:85:45:1e:c9:
17:35:12:f3:84:93:cf:ed:e2:a8:40:c1:03:93:c8:
04:80:69:49:01:3d:f2:c1:51:35:34:07:1a:dc:98:
b8:36:77:34:b7:42:5c:2c:e1:cf:a1:fd:55:5e:dc:
0c:3a:8c:7d:24:89:18:c9:64:a4:ed:ff:35:d9:ef:
11:67:74:1f:e3:bb:88:63:2f:c0:84:57:3b:60:bb:
0a:81:be:5b:8c:f1:a5:ed:4b:81:fd:69:1c:d6:5b:
00:ba:a2:af:dd:50:0a:79:ba:38:2a:77:bc:9a:0e:
fa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:66:12:50:F1:60:A5:C6:65:3B:50:1E:2D:9F:BE:6D:98:E1:B4:18
X509v3 Authority Key Identifier:
keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f8:cd:5f:ad:c4:cd:d3:92:fc:05:c7:6f:45:21:e4:30:f9:
14:f2:bc:df:4e:5a:e4:5a:e0:bb:3a:3f:a3:8c:09:39:85:89:
8d:c2:cf:97:83:da:09:cb:b6:33:05:aa:0c:4d:69:f5:51:d2:
e8:2e:fe:bb:8e:2d:d1:97:22:01:5d:53:28:a9:56:52:35:81:
4a:dd:88:84:1c:ed:2e:a2:b7:af:0a:51:9f:03:57:97:c4:a5:
de:0b:bd:3d:27:0a:4c:36:85:bd:02:7b:d8:d1:b6:b9:38:d3:
78:0a:f6:23:20:7f:c3:df:51:26:04:21:2f:a6:f8:54:43:66:
39:27:fe:95:a9:29:1e:88:d4:02:87:c2:72:07:aa:b6:da:22:
e5:12:d9:41:67:fd:70:e7:a4:e4:3f:f7:45:98:28:be:ba:05:
a3:e5:87:dc:68:3d:75:84:d7:9a:7c:91:fd:dc:d3:93:24:4a:
00:22:f5:cf:40:64:76:69:5b:e1:7b:52:e1:cf:0e:5e:5b:50:
88:98:1b:d8:e9:90:fb:a1:df:d8:e0:86:d0:ba:02:89:d0:4b:
03:b8:5e:e6:14:05:4c:86:80:69:e0:da:29:4b:36:1f:1e:ba:
28:8a:75:13:12:be:c7:26:f7:00:6a:d2:57:f2:74:eb:88:ca:
40:2a:7c:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlyTzOE7c7PjFrKWfF9O/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlODhlY2YwYTE0YWQxODU3MzU5ZDJjZTViZDA0MmI5Zjk2
YzdjZGQwHhcNMjYwMzEzMDYwMTM2WhcNMjYwMzE0MDYwMTM2WjAzMTEwLwYDVQQD
EygxMjY2MTI1MGYxNjBhNWM2NjUzYjUwMWUyZDlmYmU2ZDk4ZTFiNDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NB+gMXtVXftfGFdHvzwV/IthbS0
iNATZklqFQw5tocFFMFuQB13VGo1aOLAh/SGIjS3wU+iKNT8oWQXT6d1EidKhYMF
RJgD5McBvYCNx9NTaUjmr9X2tDjgsHZsu05eAfHud9eT0jcm+olysexW30Lg2DHc
w05dB8zqiXHpEqnTpfT1cvG2l+9dj4d1QW1nwYVFHskXNRLzhJPP7eKoQMEDk8gE
gGlJAT3ywVE1NAca3Ji4Nnc0t0JcLOHPof1VXtwMOox9JIkYyWSk7f812e8RZ3Qf
47uIYy/AhFc7YLsKgb5bjPGl7UuB/Wkc1lsAuqKv3VAKebo4Kne8mg76qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJmElDxYKXGZTtQHi2fvm2Y4bQYMB8GA1UdIwQY
MBaAFF6I7PChStGFc1nSzlvQQrn5bHzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yMTFiMmUtNGUzYy00NDgyLWEyNzkt
OWYwZjMzNTMyZWEzLzEvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yMTFiMmUtNGUzYy00NDgyLWEyNzktOWYwZjMzNTMyZWEz
LzEvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPjNX63E
zdOS/AXHb0Uh5DD5FPK8305a5Frguzo/o4wJOYWJjcLPl4PaCcu2MwWqDE1p9VHS
6C7+u44t0ZciAV1TKKlWUjWBSt2IhBztLqK3rwpRnwNXl8Sl3gu9PScKTDaFvQJ7
2NG2uTjTeAr2IyB/w99RJgQhL6b4VENmOSf+lakpHojUAofCcgeqttoi5RLZQWf9
cOek5D/3RZgovroFo+WH3Gg9dYTXmnyR/dzTkyRKACL1z0Bkdmlb4XtS4c8OXltQ
iJgb2OmQ+6Hf2OCG0LoCidBLA7he5hQFTIaAaeDaKUs2Hx66KIp1ExK+xyb3AGrS
V/J064jKQCp8tg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 08:51:20 2026 by rpki-client