Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
File: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft (raw, json)
Hash identifier: 0ODb5rIn4u6Sco0MMyPVSH3dcAZARb+0emGz0JnwTj0=
Subject key identifier: DC:47:42:9F:D9:92:29:61:62:76:D1:2C:FD:D8:56:6C:CE:00:70:62
Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
Certificate issuer: /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Certificate serial: 019CE6A3FC9297BC67EAA7795373EA140449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
Manifest number: 031B
Signing time: Fri 13 Mar 2026 10:00:32 +0000
Manifest this update: Fri 13 Mar 2026 10:00:32 +0000
Manifest next update: Sat 14 Mar 2026 10:00:32 +0000
Files and hashes: 1: t4FfWGGXtTRUFxZwz8cMn71DIVM.roa (hash: 1Te86c70kCA9A6/qMvPRifJboyGJc6UFcW+d55LKuf0=)
2: uDZTkixEz6zAK6MZ-bDfIGsBon0.roa (hash: jjgeGrXtby6czGOqPzKNGOqSk4f42a5b485yG1EOigM=)
3: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl (hash: zARCj40Xqrc3m5p2VicULTMRcUlHsg9GJd2XBuUUpTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a3:fc:92:97:bc:67:ea:a7:79:53:73:ea:14:04:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Validity
Not Before: Mar 13 10:00:32 2026 GMT
Not After : Mar 14 10:00:32 2026 GMT
Subject: CN=dc47429fd99229616276d12cfdd8566cce007062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2d:49:09:15:47:34:46:91:31:0d:cf:a4:16:
e1:d3:56:9a:b1:9f:47:77:53:6e:38:b3:78:2e:aa:
11:a7:02:60:b0:e3:9a:55:bd:61:9b:24:2e:ae:82:
25:a6:02:b1:3f:f2:2b:2d:ba:9a:6e:9e:45:14:cd:
6f:7a:0b:e1:2c:96:b4:de:90:5f:ab:db:a0:27:f8:
5e:78:66:04:4c:b8:0b:db:fe:0d:43:4c:18:d5:42:
d3:27:49:7e:22:3d:8e:d3:12:d5:8e:5b:95:2f:72:
5f:93:b5:85:0f:6f:ba:53:ce:d7:1e:d3:b4:48:99:
62:7c:fc:96:4a:3a:2d:46:5a:ac:23:13:a4:dd:3a:
f6:7b:c1:96:78:ee:65:fd:5d:89:71:b0:0c:af:b5:
8c:7e:c5:f7:87:4a:c7:cb:cc:c0:6b:96:55:49:95:
50:db:08:f5:a4:57:ba:24:bf:af:ea:26:16:84:9b:
83:29:21:1b:0d:f8:5d:ac:c5:40:a6:20:67:d4:e4:
31:5f:3d:ec:06:f3:20:5e:63:a4:15:22:83:35:1c:
6c:90:29:ab:8d:eb:fa:4c:32:52:73:4e:a8:b5:21:
22:33:a1:ed:33:2e:18:ea:c0:e8:fb:e9:62:34:cf:
c1:da:9e:e6:5c:c3:ef:9c:78:54:80:df:0a:ff:7d:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:47:42:9F:D9:92:29:61:62:76:D1:2C:FD:D8:56:6C:CE:00:70:62
X509v3 Authority Key Identifier:
keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0b:b1:20:e1:62:54:4c:11:e8:f0:80:31:35:ad:14:53:e0:
f2:58:7c:46:ac:ae:49:91:85:5d:87:9d:bf:bd:38:4b:63:14:
3e:44:12:e7:b1:22:71:1e:fa:b7:e2:60:56:99:78:06:65:a8:
b6:b3:d8:b8:72:3e:c8:2e:ed:d9:7a:8f:58:73:f4:2f:59:7e:
f3:7e:66:14:66:0b:77:b9:ad:bb:18:db:8a:79:93:37:56:50:
80:14:88:4a:9f:04:24:08:21:a6:53:08:6f:e0:d2:a5:d0:93:
64:05:e7:bc:67:e6:a3:9b:99:7f:88:7c:b2:52:39:4d:ab:14:
af:95:23:88:41:de:1f:ad:52:e3:fb:2a:e0:38:d4:73:81:69:
d0:63:e3:42:2f:d8:0e:5d:9a:7d:88:f7:5d:5a:ae:59:95:33:
67:4e:68:3d:35:83:85:12:ff:4c:e9:af:65:6a:34:7a:68:37:
2a:52:aa:23:65:87:84:6b:b0:62:14:37:6e:24:13:6c:c5:68:
07:0f:1d:7b:0c:08:12:e0:00:70:9b:e9:8f:47:13:f5:6a:f1:
ef:30:2d:75:a1:ee:ea:05:9b:78:04:f8:6d:d7:e5:2b:a8:a2:
37:b9:fb:5a:07:98:4b:6d:76:1d:2c:3f:7c:6f:5b:99:e7:80:
b3:2c:9f:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmo/ySl7xn6qd5U3PqFARJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MzM4ZWZjZTQ0OTRmNWI5MjVmMGU5YWY3MzY1MWMxY2Jm
MWUwNGMwHhcNMjYwMzEzMTAwMDMyWhcNMjYwMzE0MTAwMDMyWjAzMTEwLwYDVQQD
EyhkYzQ3NDI5ZmQ5OTIyOTYxNjI3NmQxMmNmZGQ4NTY2Y2NlMDA3MDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i1JCRVHNEaRMQ3PpBbh01aasZ9H
d1NuOLN4LqoRpwJgsOOaVb1hmyQuroIlpgKxP/IrLbqabp5FFM1vegvhLJa03pBf
q9ugJ/heeGYETLgL2/4NQ0wY1ULTJ0l+Ij2O0xLVjluVL3Jfk7WFD2+6U87XHtO0
SJlifPyWSjotRlqsIxOk3Tr2e8GWeO5l/V2JcbAMr7WMfsX3h0rHy8zAa5ZVSZVQ
2wj1pFe6JL+v6iYWhJuDKSEbDfhdrMVApiBn1OQxXz3sBvMgXmOkFSKDNRxskCmr
jev6TDJSc06otSEiM6HtMy4Y6sDo++liNM/B2p7mXMPvnHhUgN8K/32EewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxHQp/ZkilhYnbRLP3YVmzOAHBiMB8GA1UdIwQY
MBaAFMUzjvzkSU9bkl8Omvc2UcHL8eBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS83YzRlMzItNmMyMC00MWMxLWE4NWYt
ZmRkM2E4MTVhYmI4LzEveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS83YzRlMzItNmMyMC00MWMxLWE4NWYtZmRkM2E4MTVhYmI4
LzEveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwuxIOFi
VEwR6PCAMTWtFFPg8lh8RqyuSZGFXYedv704S2MUPkQS57EicR76t+JgVpl4BmWo
trPYuHI+yC7t2XqPWHP0L1l+835mFGYLd7mtuxjbinmTN1ZQgBSISp8EJAghplMI
b+DSpdCTZAXnvGfmo5uZf4h8slI5TasUr5UjiEHeH61S4/sq4DjUc4Fp0GPjQi/Y
Dl2afYj3XVquWZUzZ05oPTWDhRL/TOmvZWo0emg3KlKqI2WHhGuwYhQ3biQTbMVo
Bw8dewwIEuAAcJvpj0cT9Wrx7zAtdaHu6gWbeAT4bdflK6iiN7n7WgeYS212HSw/
fG9bmeeAsyyfoA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:57:15 2026 by rpki-client