Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
File: Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json)
Hash identifier: gT17I1iT1RKhv1kVQfSsW9JZ1Hrepx1BhEusKH2NXWI=
Subject key identifier: 9D:49:5C:D8:A0:14:EE:C1:A4:BC:BE:89:06:66:AA:6E:57:D3:DD:28
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial: 019EB7333CAAE5DA092E5978C4CB31D9EFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
Manifest number: 0AD4
Signing time: Thu 11 Jun 2026 15:00:48 +0000
Manifest this update: Thu 11 Jun 2026 15:00:48 +0000
Manifest next update: Fri 12 Jun 2026 15:00:48 +0000
Files and hashes: 1: 5hnYO6ztPLa-s4fykT38ED82F1s.roa (hash: oNF1AM5Hv8TzwevSKCEUvWBxoNLM1msTiU4uiTHoB08=)
2: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: Rjd629EizpQGnhbNK7yApVMPd581yU7C4wcKzqlBWXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:3c:aa:e5:da:09:2e:59:78:c4:cb:31:d9:ef:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Validity
Not Before: Jun 11 15:00:48 2026 GMT
Not After : Jun 12 15:00:48 2026 GMT
Subject: CN=9d495cd8a014eec1a4bcbe890666aa6e57d3dd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:3e:9a:f3:a9:2d:01:3a:80:70:25:0d:a9:
12:e9:d9:2f:21:54:01:d5:bb:27:84:57:13:5a:a3:
b6:e1:81:91:26:13:41:32:d0:29:b5:83:6f:5f:7f:
66:51:ba:5e:0e:0a:3b:ee:a0:64:4c:9f:23:23:77:
c5:d1:0a:08:93:3e:01:79:31:22:3c:a2:de:98:4e:
eb:83:00:db:f1:f8:2f:20:a5:00:32:a7:03:1d:d4:
bb:74:f4:14:3f:59:07:60:e1:0f:a1:6d:92:cf:4d:
bd:c4:35:eb:92:7e:bb:e6:d8:fc:d0:50:da:fe:f4:
8d:d2:01:4a:5f:93:98:3c:29:89:fa:4c:c8:4a:54:
38:67:52:fa:e1:26:dd:79:4e:62:a6:cb:b2:a1:5f:
a7:56:a3:17:a1:64:77:5f:37:23:fc:9d:0a:0f:7e:
04:0e:f2:eb:69:5e:e1:90:e4:b1:5b:3f:a1:53:88:
93:55:5f:a0:5b:22:f2:8a:a4:38:2a:81:e0:d4:97:
fe:7a:52:84:de:8d:72:e5:39:6e:f8:44:b2:f6:83:
4c:ae:19:5a:a4:21:b5:44:8e:ef:96:ce:40:69:28:
bf:54:70:17:e2:67:c5:96:93:7a:7f:cf:9f:0b:b1:
4f:99:08:1a:e1:ec:7b:c3:58:3f:d7:a9:99:49:ed:
ae:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:49:5C:D8:A0:14:EE:C1:A4:BC:BE:89:06:66:AA:6E:57:D3:DD:28
X509v3 Authority Key Identifier:
keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a5:e8:37:f0:8f:a2:f3:3f:9a:4a:3a:2b:a4:00:6a:f9:92:
1f:f2:7b:bf:5e:ce:0f:64:ca:44:08:18:97:84:ba:5c:56:ed:
29:b0:c9:f1:c4:84:e8:21:65:83:e3:2c:d3:84:2e:76:b1:2f:
06:66:c0:1d:34:4d:45:72:9e:01:3f:45:ff:26:f3:b4:d4:3f:
64:11:8d:bb:82:e0:b4:77:98:40:13:bb:f3:47:42:09:30:b2:
23:e3:02:17:ca:a5:69:cb:8c:3a:be:16:55:e1:26:14:df:26:
77:11:e3:1a:24:c1:d1:35:37:20:54:31:35:80:d9:48:ff:c9:
3f:d8:7f:81:85:8f:05:b4:d0:11:5f:89:bc:0f:95:5c:3e:f6:
89:11:95:ac:06:aa:d0:3c:41:31:0b:d2:d5:12:5c:37:cb:36:
e7:81:b0:4a:02:3f:9f:1e:05:3f:39:6a:d6:07:24:16:4d:a8:
e2:88:41:c6:6c:c3:5d:28:8c:f2:0b:18:81:a4:fd:3f:1f:15:
19:d7:57:06:3d:74:d3:71:fd:1f:1b:d8:25:e6:35:22:a7:85:
c4:21:d7:d7:5a:ca:ef:a4:c4:d0:bf:03:86:01:1d:61:a2:ef:
51:45:96:fa:d6:19:90:83:1b:16:a1:57:d7:9e:09:72:c1:bb:
76:7b:cd:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63Mzyq5doJLll4xMsx2e+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlODhlY2YwYTE0YWQxODU3MzU5ZDJjZTViZDA0MmI5Zjk2
YzdjZGQwHhcNMjYwNjExMTUwMDQ4WhcNMjYwNjEyMTUwMDQ4WjAzMTEwLwYDVQQD
Eyg5ZDQ5NWNkOGEwMTRlZWMxYTRiY2JlODkwNjY2YWE2ZTU3ZDNkZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2s+mvOpLQE6gHAlDakS6dkvIVQB
1bsnhFcTWqO24YGRJhNBMtAptYNvX39mUbpeDgo77qBkTJ8jI3fF0QoIkz4BeTEi
PKLemE7rgwDb8fgvIKUAMqcDHdS7dPQUP1kHYOEPoW2Sz029xDXrkn675tj80FDa
/vSN0gFKX5OYPCmJ+kzISlQ4Z1L64SbdeU5ipsuyoV+nVqMXoWR3Xzcj/J0KD34E
DvLraV7hkOSxWz+hU4iTVV+gWyLyiqQ4KoHg1Jf+elKE3o1y5Tlu+ESy9oNMrhla
pCG1RI7vls5AaSi/VHAX4mfFlpN6f8+fC7FPmQga4ex7w1g/16mZSe2ulQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1JXNigFO7BpLy+iQZmqm5X090oMB8GA1UdIwQY
MBaAFF6I7PChStGFc1nSzlvQQrn5bHzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yMTFiMmUtNGUzYy00NDgyLWEyNzkt
OWYwZjMzNTMyZWEzLzEvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yMTFiMmUtNGUzYy00NDgyLWEyNzktOWYwZjMzNTMyZWEz
LzEvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaXoN/CP
ovM/mko6K6QAavmSH/J7v17OD2TKRAgYl4S6XFbtKbDJ8cSE6CFlg+Ms04QudrEv
BmbAHTRNRXKeAT9F/ybztNQ/ZBGNu4LgtHeYQBO780dCCTCyI+MCF8qlacuMOr4W
VeEmFN8mdxHjGiTB0TU3IFQxNYDZSP/JP9h/gYWPBbTQEV+JvA+VXD72iRGVrAaq
0DxBMQvS1RJcN8s254GwSgI/nx4FPzlq1gckFk2o4ohBxmzDXSiM8gsYgaT9Px8V
GddXBj1003H9HxvYJeY1IqeFxCHX11rK76TE0L8DhgEdYaLvUUWW+tYZkIMbFqFX
154JcsG7dnvNHQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:33:13 2026 by rpki-client