Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
File: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft (raw, json)
Hash identifier: JZPWOYIIgAMSJ4zLy11QdIAJ3/TUg5lwyP+uS4L5cvQ=
Subject key identifier: CA:71:03:E4:AC:8E:A8:ED:DB:26:D7:4F:A3:78:2A:BE:D6:C2:E7:C4
Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
Certificate issuer: /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Certificate serial: 019CAEA3411493F8D1D5593634E9E8C81F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
Manifest number: 02FE
Signing time: Mon 02 Mar 2026 13:01:00 +0000
Manifest this update: Mon 02 Mar 2026 13:01:00 +0000
Manifest next update: Tue 03 Mar 2026 13:01:00 +0000
Files and hashes: 1: t4FfWGGXtTRUFxZwz8cMn71DIVM.roa (hash: 1Te86c70kCA9A6/qMvPRifJboyGJc6UFcW+d55LKuf0=)
2: uDZTkixEz6zAK6MZ-bDfIGsBon0.roa (hash: jjgeGrXtby6czGOqPzKNGOqSk4f42a5b485yG1EOigM=)
3: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl (hash: Z5I4WNTiq1r4V1cHyx26yutLLuZbkf3/ymeeLNnrZrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:41:14:93:f8:d1:d5:59:36:34:e9:e8:c8:1f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Validity
Not Before: Mar 2 13:01:00 2026 GMT
Not After : Mar 3 13:01:00 2026 GMT
Subject: CN=ca7103e4ac8ea8eddb26d74fa3782abed6c2e7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:f8:5d:ca:02:57:70:c6:a4:83:3d:51:96:
bf:4e:41:40:5c:3b:cc:60:b8:2f:c9:09:c4:bc:83:
7b:ac:3b:f8:6c:47:ec:19:0e:7b:5a:44:75:fe:3b:
a3:07:d8:e6:14:e8:0e:99:7c:ef:45:93:a8:24:e1:
fa:e6:8e:7f:e6:3e:37:65:6e:76:32:d3:95:98:4f:
fb:e1:5e:60:6e:1d:88:eb:d3:ff:b7:e4:22:f9:e7:
f5:85:8d:97:bd:46:b3:df:d9:19:20:df:9c:b9:06:
e6:f6:86:95:dd:b7:44:a1:c7:1e:88:d4:aa:c5:15:
92:78:c3:3e:42:27:82:b6:d1:b6:b0:10:23:bc:34:
c5:65:f5:d9:c0:af:36:f5:c2:45:fa:1d:99:5f:0d:
5a:bc:59:dc:cf:8b:98:28:12:c6:20:a1:3a:5d:ff:
e4:32:c8:31:3c:4a:f8:19:69:8a:9b:76:ca:d4:40:
3b:ab:75:3f:dc:68:48:ee:3b:80:bf:b6:4d:0d:d9:
52:91:48:aa:34:c9:22:bd:f0:cf:33:5b:97:63:f4:
88:b9:b6:ad:4d:c8:06:c2:19:87:d7:36:d0:3c:91:
0d:4d:2e:0a:16:d5:0b:67:ea:89:3b:6c:14:67:dd:
fc:0d:a4:57:77:0e:14:ca:94:90:d8:b0:a1:a1:b2:
e6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:71:03:E4:AC:8E:A8:ED:DB:26:D7:4F:A3:78:2A:BE:D6:C2:E7:C4
X509v3 Authority Key Identifier:
keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9e:a6:3f:2d:ae:7a:d7:e5:09:08:bc:ba:a8:f7:f7:be:1c:
11:04:45:17:2f:f3:88:48:8d:9a:cf:71:b2:33:95:43:6a:e6:
f5:48:3b:93:5f:a3:48:7e:b7:fc:40:62:56:ab:fe:07:40:51:
80:70:84:c8:19:ca:3f:47:76:fe:22:cf:e3:06:6b:e7:b3:56:
cd:f7:12:5b:ff:41:0f:49:58:78:2c:bc:0d:76:30:99:ad:f8:
a3:68:5a:1e:2a:67:33:fe:57:cd:bf:81:4e:fc:9b:a4:79:52:
ba:ea:b3:fc:73:ff:48:b4:42:9b:10:ac:6e:cb:81:6f:a7:ea:
ba:22:3f:b9:1e:91:93:bc:11:5d:ef:1f:72:2d:76:93:23:94:
c2:9f:9e:f4:7f:6f:6f:97:ef:32:63:45:9c:8c:18:db:ec:96:
86:d2:23:cb:9e:b0:8d:7a:ba:54:73:7f:c7:91:a3:a3:d8:15:
39:fe:42:24:58:e8:22:48:b8:14:6c:de:9d:b8:31:6b:09:7a:
cc:84:59:48:04:3f:fd:f1:5e:a5:c7:c2:7b:9e:ec:56:0b:74:
b4:3a:dd:55:40:c7:c6:60:b7:f6:97:00:9b:92:12:3e:55:fe:
ad:18:bc:5f:41:36:6f:25:d3:e8:45:ad:fb:ea:4d:c8:d3:41:
b7:1e:aa:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:18:30 2026 by rpki-client