Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
File: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft (raw, json)
Hash identifier: xsffmC41j1OgH2Ig0mBus8+Z/DB7+BoFeF6uL7wnDws=
Subject key identifier: 1B:C9:B3:C4:54:87:E3:E5:E7:37:C1:5B:22:B8:21:A7:E0:F0:C5:58
Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
Certificate issuer: /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Certificate serial: 019DCE63722AAA2C3E87176D4CBA6F7A6C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
Manifest number: 0393
Signing time: Mon 27 Apr 2026 10:01:56 +0000
Manifest this update: Mon 27 Apr 2026 10:01:56 +0000
Manifest next update: Tue 28 Apr 2026 10:01:56 +0000
Files and hashes: 1: t4FfWGGXtTRUFxZwz8cMn71DIVM.roa (hash: 1Te86c70kCA9A6/qMvPRifJboyGJc6UFcW+d55LKuf0=)
2: uDZTkixEz6zAK6MZ-bDfIGsBon0.roa (hash: jjgeGrXtby6czGOqPzKNGOqSk4f42a5b485yG1EOigM=)
3: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl (hash: Np/11YTdQAzHIgXH6Al2CeDy29okMH/lkS8a1ZBqhlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:72:2a:aa:2c:3e:87:17:6d:4c:ba:6f:7a:6c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Validity
Not Before: Apr 27 10:01:56 2026 GMT
Not After : Apr 28 10:01:56 2026 GMT
Subject: CN=1bc9b3c45487e3e5e737c15b22b821a7e0f0c558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:d9:bb:0b:5a:c5:67:e7:19:ee:28:c3:cc:
9a:87:53:f3:4b:30:60:7a:ac:5b:85:65:9b:ce:78:
d8:11:9f:67:fc:4a:30:54:e1:93:dd:a8:bf:de:88:
08:22:ef:dd:54:ea:c0:dc:a2:0e:c8:77:fc:36:cf:
38:32:9c:e7:7b:27:8f:82:d8:8a:02:b5:ce:72:52:
16:40:7c:b6:e8:95:f4:99:68:0e:a0:3c:a9:ab:74:
33:c2:09:c8:bb:c8:f8:53:a7:e6:29:1f:3b:ca:ed:
38:21:15:d4:c4:1c:c4:f1:70:c4:37:60:ee:3a:60:
19:f0:70:5a:32:73:84:51:2d:23:e0:e8:fd:9d:6c:
ea:61:40:3c:cf:ff:8c:9e:64:bb:6b:58:d8:e3:bf:
ca:26:00:78:2d:de:9a:bc:85:ac:02:93:af:b7:dc:
bf:50:61:44:3b:b9:3c:1a:ce:3e:3f:c4:ae:2c:ef:
34:d1:7a:43:98:58:ac:2a:e8:ec:d5:50:f5:e0:7c:
e3:60:69:ff:09:c4:f6:e5:d1:0c:70:d6:40:45:39:
5a:e7:76:0d:ca:ed:b2:c7:15:e7:da:61:e7:41:b4:
0c:d2:2b:2f:98:45:f7:29:9b:b8:d8:f6:42:ab:21:
7e:05:70:44:a5:27:23:11:0b:66:41:84:c5:d2:75:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C9:B3:C4:54:87:E3:E5:E7:37:C1:5B:22:B8:21:A7:E0:F0:C5:58
X509v3 Authority Key Identifier:
keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f0:9f:e7:37:42:86:f6:de:5f:7f:5d:2e:cf:3e:cc:b4:63:
8b:a2:a0:43:11:5c:d8:9f:6b:08:db:3e:87:7f:31:41:d7:b9:
b6:68:38:37:e4:be:d0:74:8e:55:d0:2f:c9:88:ae:25:74:ed:
d4:24:a4:cf:df:02:9d:09:ff:8c:7f:6d:8e:f1:b1:14:11:40:
7b:c8:e4:41:08:f5:25:75:a9:40:b7:5b:d5:0a:a3:e1:de:f5:
47:83:a9:97:ae:08:4d:43:c2:e9:e0:f4:d4:b5:36:33:8b:41:
04:01:f8:45:ca:0f:74:9c:5d:c1:77:80:45:68:ff:55:54:d5:
33:e2:b4:63:8d:ae:2d:42:73:23:e1:bb:0a:e7:3f:9c:ba:0a:
95:d4:1f:5e:b8:3a:17:fb:46:68:7b:af:a8:5f:c4:9b:69:f6:
8c:e9:84:37:6b:49:ca:41:c6:03:46:6b:f9:31:86:e9:e8:bd:
34:60:8d:d1:57:83:5c:94:8c:5b:f9:b3:0e:93:27:32:c5:db:
a3:55:8b:b3:39:eb:5e:c6:f0:09:c5:1f:cb:11:8d:b2:0e:5b:
c7:da:c9:08:0a:25:1e:74:a6:cc:84:1e:cf:c0:e2:6f:04:2b:
16:78:d1:61:da:45:a2:d0:1b:db:af:2e:5a:05:00:85:72:74:
29:c6:d1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:12:53 2026 by rpki-client