Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
File: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft (raw, json)
Hash identifier: f4mwRdR6VYAOnBhYakriTgyi6siJJT7X0kgvHYJSnyM=
Subject key identifier: C2:44:3A:04:69:63:D2:5E:07:A8:86:5D:51:5C:44:1F:1F:71:CE:E9
Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
Certificate issuer: /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Certificate serial: 019FAD52631FF613059A2917F8D922F10278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
Manifest number: 048B
Signing time: Wed 29 Jul 2026 10:01:25 +0000
Manifest this update: Wed 29 Jul 2026 10:01:25 +0000
Manifest next update: Thu 30 Jul 2026 10:01:25 +0000
Files and hashes: 1: t4FfWGGXtTRUFxZwz8cMn71DIVM.roa (hash: 1Te86c70kCA9A6/qMvPRifJboyGJc6UFcW+d55LKuf0=)
2: uDZTkixEz6zAK6MZ-bDfIGsBon0.roa (hash: jjgeGrXtby6czGOqPzKNGOqSk4f42a5b485yG1EOigM=)
3: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl (hash: Bhc/95pvrKbFsidPd2LbNcwjV+aYHkYAfRCikF9+ouc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:52:63:1f:f6:13:05:9a:29:17:f8:d9:22:f1:02:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Validity
Not Before: Jul 29 10:01:25 2026 GMT
Not After : Jul 30 10:01:25 2026 GMT
Subject: CN=c2443a046963d25e07a8865d515c441f1f71cee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:79:d0:cc:a6:59:00:ad:c7:28:e3:93:14:
9f:bf:28:9d:5f:91:d0:99:f0:b6:07:60:58:5f:03:
6d:e9:14:2f:43:15:88:60:73:8e:2e:7e:4a:da:41:
0f:76:16:ed:53:04:d0:ef:1b:5c:b0:c6:d4:a9:e2:
93:d8:88:88:bc:5f:e6:46:bc:68:8a:ab:b3:d8:ba:
72:c6:db:da:5c:76:5b:93:a4:8d:8e:3f:c0:b9:f0:
8a:01:e9:c8:26:e3:ff:20:33:03:6b:a5:ae:ca:80:
fd:37:e4:95:9a:49:89:c2:48:78:4c:5e:16:a9:e6:
e5:ea:b7:6f:f7:39:c7:21:9b:a3:8c:ba:67:0c:e5:
b9:16:6a:35:e1:67:ce:5b:7d:dc:10:6f:38:85:45:
6d:ea:71:ff:f8:b4:4d:7c:89:76:57:2c:b5:cd:d0:
7f:60:30:31:38:f2:fb:f9:c2:24:59:e8:4d:f3:00:
73:ce:31:f7:11:2f:e6:26:4a:76:30:5a:5d:c6:84:
94:d1:e9:63:f1:b7:dc:9f:bc:5e:4b:4e:02:0c:79:
89:d5:b7:be:93:c8:94:06:5b:7c:25:b4:a4:5a:67:
83:b6:a8:1a:88:a3:ed:b1:db:95:2c:44:ff:3e:c1:
c1:bb:09:83:98:2d:00:b4:f8:c7:fe:ed:a7:78:5d:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:44:3A:04:69:63:D2:5E:07:A8:86:5D:51:5C:44:1F:1F:71:CE:E9
X509v3 Authority Key Identifier:
keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:36:95:e8:69:19:e7:96:98:48:0e:06:ad:61:45:4f:ac:f2:
c3:a1:a7:02:8f:f7:a1:bb:d8:e2:fb:20:be:96:e2:44:19:3e:
b1:db:f8:e2:94:00:33:dd:14:2d:f8:2b:65:f4:78:42:5a:10:
01:7b:53:8c:ee:20:b3:15:0b:a1:38:ec:a3:f4:20:a4:71:c6:
01:35:b8:b4:97:fe:6f:7f:60:f9:f8:45:fe:24:38:44:07:71:
68:80:9c:24:28:81:d1:f6:0e:02:a6:f2:85:81:9a:82:ca:94:
29:72:d5:25:71:f5:e3:09:50:29:92:89:92:8f:4b:38:94:46:
9f:23:0e:66:de:cd:0c:67:86:29:91:2e:df:ed:98:f4:f0:f1:
5a:8b:3b:26:87:1d:0c:a9:be:7f:9f:18:11:ad:51:99:b5:3e:
7c:94:23:b1:fc:45:9e:ee:57:ea:0b:7e:11:66:99:4d:ac:63:
f1:51:ff:7a:b3:e5:79:93:ab:5b:83:05:7b:93:40:f3:28:bb:
ec:87:a2:d5:dc:f1:b1:c6:d1:fd:c3:0e:99:5d:1b:02:bc:53:
01:e7:ee:c6:cf:89:ab:40:36:d2:35:65:1c:3b:a8:5a:8f:db:
48:a6:50:e3:b6:98:3b:cc:26:fa:9a:db:5f:06:0b:2b:f2:b3:
32:c0:ae:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:33:59 2026 by rpki-client