Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
File: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft (raw, json)
Hash identifier: p6of8WY/26VRlPP+pwuDPjaFwbHerd9qOd9WQ5Dld6A=
Subject key identifier: FC:67:7A:BA:78:99:FF:27:A4:26:71:4D:34:CA:D6:02:7F:40:81:64
Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
Certificate issuer: /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Certificate serial: 019EB80F7905A41E4024D251CE6F90784C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
Manifest number: 040C
Signing time: Thu 11 Jun 2026 19:01:22 +0000
Manifest this update: Thu 11 Jun 2026 19:01:22 +0000
Manifest next update: Fri 12 Jun 2026 19:01:22 +0000
Files and hashes: 1: t4FfWGGXtTRUFxZwz8cMn71DIVM.roa (hash: 1Te86c70kCA9A6/qMvPRifJboyGJc6UFcW+d55LKuf0=)
2: uDZTkixEz6zAK6MZ-bDfIGsBon0.roa (hash: jjgeGrXtby6czGOqPzKNGOqSk4f42a5b485yG1EOigM=)
3: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl (hash: dZnc6k8/X3ruRQgMPY150vAKmvyGjkawhb+Sp6On50c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:79:05:a4:1e:40:24:d2:51:ce:6f:90:78:4c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Validity
Not Before: Jun 11 19:01:22 2026 GMT
Not After : Jun 12 19:01:22 2026 GMT
Subject: CN=fc677aba7899ff27a426714d34cad6027f408164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:51:c4:ca:dd:40:e5:16:61:be:9d:20:e6:
a2:cb:19:38:cd:72:f3:d8:cf:91:2c:a3:16:fd:4d:
6a:60:4a:98:5b:c6:70:11:41:e8:89:41:c9:5a:d3:
d1:fb:ca:1e:de:62:35:15:65:e6:fc:0b:7b:57:de:
81:e5:34:5a:7f:28:df:db:7e:4a:df:86:25:1c:ba:
7e:3d:0f:4b:79:44:15:13:0d:03:cf:8a:4a:f8:ff:
80:42:d8:69:1d:bc:a9:c1:68:ca:58:76:94:15:3e:
6c:a3:96:90:58:29:8a:f3:df:a9:63:1d:dd:57:11:
1c:bf:9c:74:f0:46:4b:d8:8f:de:90:fb:21:36:5b:
79:72:e1:e8:69:d6:aa:e2:d4:03:db:ea:6a:e7:7a:
02:2e:50:94:e3:c1:63:fd:56:55:4f:81:71:01:5b:
d9:64:ab:3a:af:0b:44:51:4d:e8:9f:7e:0b:34:ee:
94:c0:3c:b7:f0:3c:d2:ab:bc:9c:6b:52:1d:df:45:
db:69:30:fa:2a:3f:b7:f6:8f:97:f6:de:4a:57:86:
57:c0:8e:61:00:dd:7e:ac:f1:71:0b:8c:2e:61:e0:
71:4d:04:3e:7c:f1:45:5d:08:23:de:ae:61:6a:b1:
cd:33:7a:61:06:a4:2a:17:a2:12:2f:38:28:62:c9:
80:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:67:7A:BA:78:99:FF:27:A4:26:71:4D:34:CA:D6:02:7F:40:81:64
X509v3 Authority Key Identifier:
keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:db:a3:b7:8f:9d:71:46:54:8c:a7:ca:90:fb:bd:a1:68:88:
7f:36:69:6b:b8:c0:a9:2d:28:d9:0b:c3:c5:61:ac:e5:71:64:
d1:ef:7d:b2:fc:69:5d:fc:db:ad:98:9c:bf:70:60:3b:64:28:
3b:c9:68:8d:1a:bf:10:c5:39:ea:5b:5a:dc:26:58:73:f0:f5:
52:cc:a7:a8:fa:8f:95:61:9d:c9:c2:36:b2:77:f8:b8:96:30:
fd:51:b0:7e:80:a8:b2:1d:c1:1f:ef:80:b3:8d:d4:d6:a8:96:
22:e7:89:28:0f:3d:e3:4d:6f:da:f0:1c:07:cd:45:35:8d:e9:
f5:fc:f9:a9:8c:d7:89:22:a8:55:bc:2e:54:ad:6b:81:c9:b5:
84:81:90:cd:10:21:60:3b:a4:a0:ea:e8:b6:41:5e:bc:ee:b6:
c9:fc:fa:36:75:5a:ae:4f:08:84:62:25:4e:40:5e:0b:1e:fb:
b1:b8:2d:b2:1c:24:de:08:39:70:0b:ab:ff:b5:05:c5:c7:36:
3d:f9:5b:c8:b2:a9:35:80:b5:b8:9c:87:3b:86:f1:52:52:99:
03:2e:85:35:bb:42:e5:10:62:29:cd:65:71:2a:54:47:4a:11:
87:24:58:dc:30:b3:2f:73:15:f8:10:16:97:d5:73:11:87:e7:
18:28:ce:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:45:47 2026 by rpki-client