Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
File: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft (raw, json)
Hash identifier: dK+jxbeGU6uWmHQDUeGXhGA4s0ScKWf+gxLN65+iuyI=
Subject key identifier: 79:42:78:4D:3A:8A:96:01:76:B0:FF:21:3D:C8:92:9F:19:83:80:D6
Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
Certificate issuer: /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Certificate serial: 019FA1BB07BCB0C7A0157BF93B3D41E3C890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
Manifest number: 0485
Signing time: Mon 27 Jul 2026 04:00:16 +0000
Manifest this update: Mon 27 Jul 2026 04:00:16 +0000
Manifest next update: Tue 28 Jul 2026 04:00:16 +0000
Files and hashes: 1: t4FfWGGXtTRUFxZwz8cMn71DIVM.roa (hash: 1Te86c70kCA9A6/qMvPRifJboyGJc6UFcW+d55LKuf0=)
2: uDZTkixEz6zAK6MZ-bDfIGsBon0.roa (hash: jjgeGrXtby6czGOqPzKNGOqSk4f42a5b485yG1EOigM=)
3: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl (hash: QO6MYIBZDyLhvPxj5nnsiAWXRg+QXoDo33Nn/jiNJvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:07:bc:b0:c7:a0:15:7b:f9:3b:3d:41:e3:c8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Validity
Not Before: Jul 27 04:00:16 2026 GMT
Not After : Jul 28 04:00:16 2026 GMT
Subject: CN=7942784d3a8a960176b0ff213dc8929f198380d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d7:33:e4:65:13:c5:ac:09:4a:e8:a8:28:c8:
f8:5b:1c:99:5d:f5:10:21:1f:ca:db:23:cb:c1:00:
e0:e9:6d:2c:96:5a:cc:2f:8b:53:96:f2:58:1a:84:
30:45:56:ad:2e:ad:b3:43:93:c4:4e:54:ff:48:41:
31:60:4b:8a:81:cb:1f:bc:dc:8c:bc:0d:b9:f5:7f:
ce:94:0f:74:96:7c:21:6d:c1:3f:31:e9:6b:be:98:
5f:86:8c:b2:2b:02:a6:aa:5d:88:79:cc:64:1d:0f:
52:de:d1:a4:c7:6d:bd:d6:47:ad:23:11:c3:ff:8b:
47:6b:4f:84:ed:7e:a6:cb:7c:06:69:60:be:a9:03:
8f:f8:8b:08:e8:44:42:4c:ff:22:80:24:ef:2a:9f:
35:b3:da:c2:29:bc:6d:fa:4b:57:e8:27:36:80:8c:
34:7c:64:7f:28:96:4a:fd:cb:64:bd:ac:85:23:cc:
c3:11:29:11:77:81:04:ba:9b:62:d1:7f:dd:88:91:
b7:71:9b:2e:5b:85:ab:e5:b3:b2:ee:da:b8:84:26:
1f:4b:fb:05:98:00:30:06:64:ae:45:37:d1:4f:6b:
31:3c:75:a0:c9:66:f7:d0:5a:50:2a:98:38:bd:ce:
91:e8:5d:05:34:ed:8e:5d:62:7a:cb:6c:55:2b:76:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:42:78:4D:3A:8A:96:01:76:B0:FF:21:3D:C8:92:9F:19:83:80:D6
X509v3 Authority Key Identifier:
keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:af:96:69:d6:a4:27:d8:52:cc:1b:d4:a3:10:28:37:7d:0d:
31:0d:6f:e5:70:17:f3:c6:16:20:27:89:27:79:b2:bc:03:46:
a3:90:16:fc:fa:92:ca:b6:54:23:66:1c:df:25:f4:9f:29:95:
62:8a:9b:e2:7a:26:2d:63:ae:91:c8:64:b1:79:5f:4c:65:61:
7a:3f:d5:94:80:ab:7c:5b:88:00:21:40:0b:98:d1:89:42:4a:
98:6e:1c:fb:65:43:36:41:09:c0:d6:3f:c6:aa:4a:f0:88:b1:
8f:ad:53:3a:28:51:94:b1:58:db:ef:15:fb:fe:79:42:23:25:
47:b1:81:38:cb:c4:98:a4:6e:25:03:0a:f0:19:08:6f:97:88:
4b:b2:4c:cf:cc:20:10:f4:e7:4f:29:38:62:56:92:cb:67:67:
75:83:57:20:99:b9:1c:18:0d:24:59:13:9b:8e:e3:b3:cd:b5:
0b:15:67:85:59:7d:d4:78:b7:2b:66:1e:b6:e9:68:10:dd:52:
7a:8a:85:81:64:11:57:49:a7:04:87:5e:57:7a:7c:37:0d:af:
60:6e:1b:4b:56:f1:01:b5:0a:a1:b1:28:bc:0b:6c:4e:64:25:
81:08:d0:f0:ed:95:2e:99:f0:28:25:b4:70:68:55:25:6c:80:
58:ba:96:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:25:52 2026 by rpki-client