Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
File: Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json)
Hash identifier: VwbiFO3dFwPbk1C2JmKvcEtjUEiV1rE2NnDVzXSNV7M=
Subject key identifier: 8A:B8:F0:9E:6F:F7:5D:3E:E4:03:5C:06:04:FE:98:D9:01:24:0F:06
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial: 01A0889F261FD613ACE690EC0C5E70681D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
Manifest number: 0BC5
Signing time: Thu 10 Sep 2026 00:02:06 +0000
Manifest this update: Thu 10 Sep 2026 00:02:06 +0000
Manifest next update: Fri 11 Sep 2026 00:02:06 +0000
Files and hashes: 1: 5hnYO6ztPLa-s4fykT38ED82F1s.roa (hash: oNF1AM5Hv8TzwevSKCEUvWBxoNLM1msTiU4uiTHoB08=)
2: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: R3iyFDsFUq4knva3jyqOdETtmTTraRlmbn2dP6qeXds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9f:26:1f:d6:13:ac:e6:90:ec:0c:5e:70:68:1d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Validity
Not Before: Sep 10 00:02:06 2026 GMT
Not After : Sep 11 00:02:06 2026 GMT
Subject: CN=8ab8f09e6ff75d3ee4035c0604fe98d901240f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:bc:c8:e2:4a:2a:82:b7:e3:87:76:38:d5:
78:29:23:2d:66:6b:fa:2e:7a:bf:46:49:d5:9c:e8:
83:18:bb:db:03:8d:df:b9:01:91:83:2b:cc:35:f4:
bb:5f:2a:64:c6:f3:1c:ce:b9:9d:14:75:f3:ed:ed:
fb:e0:cf:0f:3b:7a:df:ef:de:95:36:fc:b8:2c:8f:
e5:cf:6b:54:bd:e5:de:90:eb:76:1e:70:e3:4b:a9:
c5:f5:3b:26:d9:85:da:c6:0d:5c:bf:e5:c7:65:52:
5e:d6:b5:6f:40:d5:b6:d9:fa:c9:51:8f:6f:7d:d3:
4c:77:2b:a3:b8:ff:31:95:2c:a9:93:9b:5e:9d:e3:
9b:0c:04:59:b8:71:9a:cd:5b:da:c6:71:dc:71:88:
a6:b8:9c:26:fb:8b:59:62:26:3a:0e:29:91:9a:39:
5e:f4:c1:fe:7d:5a:dc:03:92:c3:48:0e:21:77:cb:
cc:1e:21:95:0e:ed:41:e0:70:8b:6c:3b:a1:96:ec:
39:5b:5e:7f:21:37:6d:69:9c:49:4d:a9:34:eb:5b:
86:84:a7:c3:96:51:1f:38:ec:85:d8:98:7b:bf:6c:
a0:4b:e2:64:91:67:75:69:19:42:32:60:53:a5:3f:
7d:f3:bb:52:7e:4d:cf:97:3e:b8:4e:84:1d:b0:7f:
05:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B8:F0:9E:6F:F7:5D:3E:E4:03:5C:06:04:FE:98:D9:01:24:0F:06
X509v3 Authority Key Identifier:
keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:52:d4:64:3e:57:49:3a:e0:0c:bc:8c:bb:3c:ac:1b:c3:18:
12:d9:77:1b:34:1f:96:c7:10:d6:b1:11:d6:79:7a:e1:06:22:
62:76:d3:1b:84:03:2f:2d:cb:24:4a:67:84:d2:f8:3d:1e:65:
cc:65:cc:59:e1:0e:24:fa:46:1b:7d:52:b3:35:63:a2:cb:d9:
63:21:fb:e1:de:67:14:33:3d:0f:7e:3c:d0:77:5e:9a:36:ef:
4d:1e:d7:90:c4:fb:1f:3a:0d:14:cd:47:b3:a2:22:5e:70:f2:
51:33:33:1f:a8:7f:75:7a:c5:eb:6d:eb:ea:73:26:be:ae:62:
1b:d5:63:65:8a:9b:1d:2d:63:85:ad:ae:7f:db:fb:53:7f:b6:
30:15:40:ec:8d:a4:11:86:58:28:3c:86:75:e0:a0:93:1f:47:
a0:23:83:88:57:c6:22:69:56:15:fb:0b:6b:09:0d:2e:7d:a5:
83:44:30:81:05:65:a6:ff:d4:c3:95:5f:c1:e4:b5:47:00:59:
a8:82:72:a6:fb:7e:2f:44:bc:c7:40:b2:c7:ba:44:53:b2:69:
6f:a6:f4:14:af:99:dc:54:b7:38:57:aa:ee:9a:12:1d:49:29:
ab:58:51:76:36:00:67:de:0b:7e:7c:3f:9a:68:57:19:23:6f:
6b:c1:9a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:28:41 2026 by rpki-client