Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
File: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft (raw, json)
Hash identifier: jhQO1d7rKNGPXNza6F4xYHz0EcGKQiicAml9vUiAHNA=
Subject key identifier: 6B:2B:27:D6:8E:CC:84:D1:83:9F:DF:CE:FC:1E:06:D5:DE:AA:AB:83
Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
Certificate issuer: /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Certificate serial: 01A1920CCC725144CB6A06BC278BD401CAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
Manifest number: 0586
Signing time: Sat 31 Oct 2026 13:01:14 +0000
Manifest this update: Sat 31 Oct 2026 13:01:14 +0000
Manifest next update: Sun 01 Nov 2026 13:01:14 +0000
Files and hashes: 1: t4FfWGGXtTRUFxZwz8cMn71DIVM.roa (hash: 1Te86c70kCA9A6/qMvPRifJboyGJc6UFcW+d55LKuf0=)
2: uDZTkixEz6zAK6MZ-bDfIGsBon0.roa (hash: jjgeGrXtby6czGOqPzKNGOqSk4f42a5b485yG1EOigM=)
3: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl (hash: XKz3UKJqTWRmP91eo634C0H8sHSRxHlThM70HGjSrBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:0c:cc:72:51:44:cb:6a:06:bc:27:8b:d4:01:ca:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Validity
Not Before: Oct 31 13:01:14 2026 GMT
Not After : Nov 1 13:01:14 2026 GMT
Subject: CN=6b2b27d68ecc84d1839fdfcefc1e06d5deaaab83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:11:89:a9:67:e5:9f:20:66:f2:b0:39:bf:
4d:35:40:60:02:f9:d0:6c:61:6d:f0:ca:c9:35:9c:
0d:08:cb:3b:67:62:39:fa:18:ff:12:60:c8:2c:dd:
a1:70:c3:1f:82:2b:e7:7b:1c:2f:a9:e7:92:a3:be:
ca:a2:be:8b:0e:4d:69:b2:ba:11:63:a3:dd:8a:7c:
d2:f1:5e:30:11:ee:4a:51:a5:4e:3d:a1:84:91:63:
b2:18:90:a4:f7:91:f7:60:83:f4:34:0a:10:e3:99:
f4:8d:93:0c:a0:52:9b:73:f3:1a:84:1e:2f:fd:49:
b0:9e:fb:08:b6:06:74:05:b2:50:db:62:04:2f:62:
1d:3d:96:c8:2c:f0:9a:59:47:cc:53:01:ac:c4:cb:
4a:5e:c7:04:6b:1c:5c:f4:c6:3b:05:32:e9:23:6e:
3e:6d:53:86:cd:68:d1:3f:f2:30:71:ae:22:1d:07:
3c:0e:17:b2:a3:aa:34:c6:b7:28:f9:dd:01:41:b3:
0e:9a:97:b3:12:d1:a6:e6:36:a9:18:e1:92:14:bc:
d8:08:76:a7:0f:8a:43:17:77:16:a6:bd:38:01:f6:
45:c4:60:da:5e:eb:59:68:63:ce:da:d4:90:ea:56:
df:01:9e:d5:8b:f5:f8:27:b8:25:d3:14:ed:3b:75:
d3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2B:27:D6:8E:CC:84:D1:83:9F:DF:CE:FC:1E:06:D5:DE:AA:AB:83
X509v3 Authority Key Identifier:
keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f6:b7:02:e4:d7:93:d4:ac:c9:93:fe:26:10:03:81:a2:83:
f7:dc:2d:e2:89:2d:87:f4:44:28:79:0f:f2:7e:e1:be:b1:84:
e7:9a:9c:ea:ab:8b:b9:09:e8:a6:13:d8:cf:b8:ef:e1:e9:e7:
94:ef:83:d2:a2:ae:52:3f:e6:9a:d0:60:a4:42:8d:9c:73:00:
bc:14:d7:f3:92:16:fe:96:1b:b0:df:3f:c9:a3:b5:be:fc:da:
af:48:94:d9:ec:ba:da:fc:87:cf:17:51:d1:87:96:8f:36:80:
55:02:25:29:b2:f4:e5:8b:59:76:43:c9:75:eb:8c:fb:db:5a:
b5:93:3f:f2:c8:17:f9:b8:46:cc:04:a1:1f:1c:0a:f1:3b:f6:
02:ad:49:aa:87:8c:f4:94:a1:6d:25:13:16:0a:99:85:93:3a:
7e:35:da:40:bf:85:44:2e:90:28:cf:6d:8a:a7:65:23:22:32:
4c:08:c6:e6:11:a2:e7:45:25:b8:82:00:58:29:9a:0d:8c:3e:
52:4a:47:ec:f1:e5:d4:5b:7f:1d:bb:0f:a6:17:fc:e9:46:cc:
91:96:d7:94:ca:4e:66:c1:a2:15:15:fe:d4:c8:9d:a1:cc:1a:
14:79:43:df:ed:46:eb:2e:8e:5c:b1:99:38:f8:2c:c1:74:d3:
be:ad:ea:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:50:20 2026 by rpki-client