Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
File: Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json)
Hash identifier: 3KUELeW3eZjds43kyA8ookc5GxnNxEluQ7N8BjhnpaA=
Subject key identifier: 9C:6A:E2:80:A5:DA:E8:2B:65:29:BA:56:80:A4:FE:6A:43:18:05:76
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial: 019FA0DFA60FE66170E6D8D158F0C57A880D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
Manifest number: 0B4D
Signing time: Mon 27 Jul 2026 00:00:39 +0000
Manifest this update: Mon 27 Jul 2026 00:00:39 +0000
Manifest next update: Tue 28 Jul 2026 00:00:39 +0000
Files and hashes: 1: 5hnYO6ztPLa-s4fykT38ED82F1s.roa (hash: oNF1AM5Hv8TzwevSKCEUvWBxoNLM1msTiU4uiTHoB08=)
2: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: 7//oMCdM/aEpO0UGc4/qkVqgKb2poMl45eCTZjL5pBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:a6:0f:e6:61:70:e6:d8:d1:58:f0:c5:7a:88:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Validity
Not Before: Jul 27 00:00:39 2026 GMT
Not After : Jul 28 00:00:39 2026 GMT
Subject: CN=9c6ae280a5dae82b6529ba5680a4fe6a43180576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:7b:d0:07:92:a6:31:21:61:77:e7:b3:af:
86:24:16:41:51:37:e8:62:88:1e:8b:02:bd:7c:4a:
99:05:9e:64:5a:57:c5:ac:92:dc:a8:d5:2d:5a:16:
2f:7d:df:82:7c:87:fd:fa:4b:d9:9e:55:12:26:35:
64:d4:ab:b0:35:58:27:1c:0b:c3:ab:63:4d:fe:cd:
3b:d3:19:6c:59:9e:0c:ac:09:3a:e4:96:c6:a1:9f:
6c:6c:81:bf:99:5b:c4:59:5f:99:90:41:b9:54:5d:
4c:00:41:42:10:16:54:14:f8:36:80:23:82:13:d1:
a6:f7:b4:8d:4f:96:83:51:88:55:b1:2b:14:cd:f0:
80:c4:b4:bd:2d:b6:d5:5c:93:2f:d5:ca:75:9e:6b:
ab:80:a7:56:ac:b9:41:55:9d:69:e6:be:c2:0f:d2:
96:df:98:98:89:2d:58:10:a0:b1:3d:9f:dc:d8:a6:
c2:90:0c:63:c0:87:b5:3c:f4:5e:1a:89:68:e9:5f:
07:7a:55:95:f0:d6:d5:44:42:08:09:87:01:72:82:
0f:ff:ed:54:e7:db:16:f9:d8:af:9d:61:55:63:1b:
34:24:79:70:ab:6e:ad:03:18:be:c5:4e:29:b5:8e:
86:99:08:f5:0b:4f:8a:11:3f:5c:ad:e1:85:c6:9b:
03:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6A:E2:80:A5:DA:E8:2B:65:29:BA:56:80:A4:FE:6A:43:18:05:76
X509v3 Authority Key Identifier:
keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:30:e6:bc:12:0d:d3:68:68:e8:e7:a3:cb:8a:91:2f:8b:f1:
2e:d7:02:71:01:18:88:da:03:52:ca:11:bc:ec:ed:20:24:05:
19:92:63:3e:38:b0:23:25:dd:8a:12:12:1a:79:3c:8d:7c:e4:
33:2a:a6:51:4d:00:8f:cd:40:e1:eb:12:ec:85:3f:a2:a5:a2:
fa:f4:bd:19:4f:d2:72:c5:98:40:11:9a:51:ba:3b:cd:63:38:
72:ec:66:b2:12:a9:aa:b6:79:bb:80:b1:57:3d:a2:cd:68:1d:
d9:ba:90:22:01:0f:6a:0f:06:5e:34:55:3a:df:2c:f0:51:44:
b8:b7:59:9e:6e:7b:b6:49:62:26:92:62:48:a7:a9:eb:ae:69:
e1:17:a6:cc:b7:f5:31:a5:1a:2a:bf:81:01:a1:f1:db:6c:43:
00:77:cb:be:84:4d:5c:4e:9a:0f:b0:e2:e7:b4:8c:8c:6d:cd:
4f:fb:e7:36:6a:39:ac:ab:66:31:0f:1c:a6:e7:ca:c7:48:8c:
c4:b3:55:ef:d5:e5:1b:8f:fe:71:c4:32:d2:d9:58:53:07:ed:
8e:d6:9e:9b:3b:5f:be:27:57:9f:80:c9:bc:9d:1d:76:21:08:
cb:21:4f:c6:7c:44:d7:99:1c:76:3e:8a:92:e3:75:29:57:1b:
9f:4c:50:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g36YP5mFw5tjRWPDFeogNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlODhlY2YwYTE0YWQxODU3MzU5ZDJjZTViZDA0MmI5Zjk2
YzdjZGQwHhcNMjYwNzI3MDAwMDM5WhcNMjYwNzI4MDAwMDM5WjAzMTEwLwYDVQQD
Eyg5YzZhZTI4MGE1ZGFlODJiNjUyOWJhNTY4MGE0ZmU2YTQzMTgwNTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMV70AeSpjEhYXfns6+GJBZBUTfo
YogeiwK9fEqZBZ5kWlfFrJLcqNUtWhYvfd+CfIf9+kvZnlUSJjVk1KuwNVgnHAvD
q2NN/s070xlsWZ4MrAk65JbGoZ9sbIG/mVvEWV+ZkEG5VF1MAEFCEBZUFPg2gCOC
E9Gm97SNT5aDUYhVsSsUzfCAxLS9LbbVXJMv1cp1nmurgKdWrLlBVZ1p5r7CD9KW
35iYiS1YEKCxPZ/c2KbCkAxjwIe1PPReGolo6V8HelWV8NbVREIICYcBcoIP/+1U
59sW+divnWFVYxs0JHlwq26tAxi+xU4ptY6GmQj1C0+KET9creGFxpsD9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxq4oCl2ugrZSm6VoCk/mpDGAV2MB8GA1UdIwQY
MBaAFF6I7PChStGFc1nSzlvQQrn5bHzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yMTFiMmUtNGUzYy00NDgyLWEyNzkt
OWYwZjMzNTMyZWEzLzEvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yMTFiMmUtNGUzYy00NDgyLWEyNzktOWYwZjMzNTMyZWEz
LzEvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITDmvBIN
02ho6Oejy4qRL4vxLtcCcQEYiNoDUsoRvOztICQFGZJjPjiwIyXdihISGnk8jXzk
MyqmUU0Aj81A4esS7IU/oqWi+vS9GU/ScsWYQBGaUbo7zWM4cuxmshKpqrZ5u4Cx
Vz2izWgd2bqQIgEPag8GXjRVOt8s8FFEuLdZnm57tkliJpJiSKep665p4RemzLf1
MaUaKr+BAaHx22xDAHfLvoRNXE6aD7Di57SMjG3NT/vnNmo5rKtmMQ8cpufKx0iM
xLNV79XlG4/+ccQy0tlYUwftjtaemztfvidXn4DJvJ0ddiEIyyFPxnxE15kcdj6K
kuN1KVcbn0xQIw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:56:23 2026 by rpki-client