Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
File: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft (raw, json)
Hash identifier: ZL8pik+Pmu5vUBgJJliOHCe5i1rCO9qE0qo1ejVG5iw=
Subject key identifier: 4C:1D:12:4C:C4:63:DC:4F:4C:A8:3C:40:D6:6A:36:E3:70:8E:41:03
Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
Certificate issuer: /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Certificate serial: 019D9A3E8C61B5B39E4C0D9BAF3FC270B0E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
Manifest number: 0378
Signing time: Fri 17 Apr 2026 07:01:23 +0000
Manifest this update: Fri 17 Apr 2026 07:01:23 +0000
Manifest next update: Sat 18 Apr 2026 07:01:23 +0000
Files and hashes: 1: t4FfWGGXtTRUFxZwz8cMn71DIVM.roa (hash: 1Te86c70kCA9A6/qMvPRifJboyGJc6UFcW+d55LKuf0=)
2: uDZTkixEz6zAK6MZ-bDfIGsBon0.roa (hash: jjgeGrXtby6czGOqPzKNGOqSk4f42a5b485yG1EOigM=)
3: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl (hash: ux6w1DuGR4KOT78U9Ptc4bwFyYk4bTQfgz4GtYio0gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:8c:61:b5:b3:9e:4c:0d:9b:af:3f:c2:70:b0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Validity
Not Before: Apr 17 07:01:23 2026 GMT
Not After : Apr 18 07:01:23 2026 GMT
Subject: CN=4c1d124cc463dc4f4ca83c40d66a36e3708e4103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:49:d0:0b:8f:87:e4:4f:be:3e:b8:b8:ab:
e1:63:e9:0a:97:8b:48:80:9e:13:7b:e6:4c:ee:d6:
cd:d2:6a:e5:40:0a:e2:67:69:40:b4:d0:9c:80:a7:
f8:82:71:e7:84:ad:69:2a:6b:27:45:ba:cd:d3:29:
a6:b1:b7:0f:05:f0:29:23:ec:d1:e1:e1:40:cc:4d:
f8:0b:04:6d:c0:1b:10:0e:17:0d:0b:16:b4:79:33:
55:0f:ff:20:aa:d1:2e:a7:19:8a:3f:a8:c7:3f:1b:
22:68:6d:1b:b4:57:d4:16:b8:d5:77:44:f6:41:55:
32:46:e6:5f:b5:0a:4a:c6:f5:27:c1:c8:7a:be:e7:
28:48:6f:ea:c1:a5:6b:a6:da:d5:5a:38:93:97:fb:
36:e3:c2:12:31:af:5c:31:5c:49:ce:5f:90:1d:bf:
66:06:7f:d9:7b:a3:28:aa:01:e1:4d:6c:e0:7d:7c:
12:78:ed:82:e3:92:68:94:3f:19:6e:86:5e:71:11:
0d:84:da:b4:89:df:80:e6:2f:60:d2:44:82:01:fe:
0e:cb:49:41:f5:41:0c:be:7a:2b:93:5f:39:e6:08:
28:12:bc:60:99:77:b6:65:54:cf:96:2a:37:7e:24:
cc:e8:a8:eb:3b:95:e3:5d:60:79:fb:0c:ca:2e:d8:
1b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1D:12:4C:C4:63:DC:4F:4C:A8:3C:40:D6:6A:36:E3:70:8E:41:03
X509v3 Authority Key Identifier:
keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ba:9b:bb:43:25:f5:ce:b9:85:d3:91:cc:18:7e:51:99:58:
29:7b:63:7c:98:b7:05:0b:40:48:bc:40:c8:5b:11:76:de:01:
e7:cc:5d:da:99:73:5a:1b:50:f9:c1:45:eb:79:df:75:34:2a:
0d:fd:30:cb:d7:29:37:c3:8d:ad:96:9d:59:b7:3d:d0:54:9c:
f1:f9:84:bb:e6:22:79:91:ff:09:cf:1d:7d:a3:d8:d9:5f:db:
39:1f:1f:0a:82:45:73:b1:34:9e:26:55:00:3f:54:65:56:35:
bb:9b:c0:fe:e0:b2:d8:38:f3:85:c2:d7:a0:12:5a:dd:73:7c:
21:c5:16:ca:49:75:12:05:d0:3c:5d:d7:f5:c2:b7:8b:11:87:
c7:48:c1:b9:a6:21:0c:c8:9f:85:93:48:69:d1:f9:3b:48:32:
dd:07:d3:ab:d7:71:d8:79:20:5e:8d:9b:87:3a:6e:b0:08:00:
cb:cd:9e:32:21:a1:70:b6:72:a4:c1:b6:f6:06:ad:4c:69:38:
50:df:91:ca:b3:06:b9:2a:28:c2:c6:a4:21:1f:8a:07:c0:ed:
33:d2:c5:fa:d6:a3:b0:79:53:d3:53:49:77:c2:d5:bc:58:27:
b3:b2:58:aa:3f:d5:96:db:77:d9:99:71:36:3b:04:25:40:0d:
3b:b9:90:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPoxhtbOeTA2brz/CcLDmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MzM4ZWZjZTQ0OTRmNWI5MjVmMGU5YWY3MzY1MWMxY2Jm
MWUwNGMwHhcNMjYwNDE3MDcwMTIzWhcNMjYwNDE4MDcwMTIzWjAzMTEwLwYDVQQD
Eyg0YzFkMTI0Y2M0NjNkYzRmNGNhODNjNDBkNjZhMzZlMzcwOGU0MTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrRJ0AuPh+RPvj64uKvhY+kKl4tI
gJ4Te+ZM7tbN0mrlQAriZ2lAtNCcgKf4gnHnhK1pKmsnRbrN0ymmsbcPBfApI+zR
4eFAzE34CwRtwBsQDhcNCxa0eTNVD/8gqtEupxmKP6jHPxsiaG0btFfUFrjVd0T2
QVUyRuZftQpKxvUnwch6vucoSG/qwaVrptrVWjiTl/s248ISMa9cMVxJzl+QHb9m
Bn/Ze6MoqgHhTWzgfXwSeO2C45JolD8ZboZecRENhNq0id+A5i9g0kSCAf4Oy0lB
9UEMvnork1855ggoErxgmXe2ZVTPlio3fiTM6KjrO5XjXWB5+wzKLtgbtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwdEkzEY9xPTKg8QNZqNuNwjkEDMB8GA1UdIwQY
MBaAFMUzjvzkSU9bkl8Omvc2UcHL8eBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS83YzRlMzItNmMyMC00MWMxLWE4NWYt
ZmRkM2E4MTVhYmI4LzEveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS83YzRlMzItNmMyMC00MWMxLWE4NWYtZmRkM2E4MTVhYmI4
LzEveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbqbu0Ml
9c65hdORzBh+UZlYKXtjfJi3BQtASLxAyFsRdt4B58xd2plzWhtQ+cFF63nfdTQq
Df0wy9cpN8ONrZadWbc90FSc8fmEu+YieZH/Cc8dfaPY2V/bOR8fCoJFc7E0niZV
AD9UZVY1u5vA/uCy2DjzhcLXoBJa3XN8IcUWykl1EgXQPF3X9cK3ixGHx0jBuaYh
DMifhZNIadH5O0gy3QfTq9dx2HkgXo2bhzpusAgAy82eMiGhcLZypMG29gatTGk4
UN+RyrMGuSoowsakIR+KB8DtM9LF+tajsHlT01NJd8LVvFgns7JYqj/Vltt32Zlx
NjsEJUANO7mQdQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:05:50 2026 by rpki-client