Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
File: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft (raw, json)
Hash identifier: OU0tkG0V5bzyEML8QL+PbG/4t6ejx9bshELodi3d3hc=
Subject key identifier: 1B:C0:30:A8:82:E3:16:04:B3:69:17:2B:0B:C7:E6:3E:FB:4D:98:37
Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
Certificate issuer: /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Certificate serial: 019E1F7F4473E08C01BADBDF0A15F727A0C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
Manifest number: 03BD
Signing time: Wed 13 May 2026 04:01:34 +0000
Manifest this update: Wed 13 May 2026 04:01:34 +0000
Manifest next update: Thu 14 May 2026 04:01:34 +0000
Files and hashes: 1: t4FfWGGXtTRUFxZwz8cMn71DIVM.roa (hash: 1Te86c70kCA9A6/qMvPRifJboyGJc6UFcW+d55LKuf0=)
2: uDZTkixEz6zAK6MZ-bDfIGsBon0.roa (hash: jjgeGrXtby6czGOqPzKNGOqSk4f42a5b485yG1EOigM=)
3: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl (hash: 15ubGYIYdW4ktCDlqaMFZU8UWG9jgMatpdJObITKWfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:44:73:e0:8c:01:ba:db:df:0a:15:f7:27:a0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Validity
Not Before: May 13 04:01:34 2026 GMT
Not After : May 14 04:01:34 2026 GMT
Subject: CN=1bc030a882e31604b369172b0bc7e63efb4d9837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:ec:87:c6:8e:2b:e8:23:f9:b3:74:4d:85:
fb:5e:8f:cb:88:4c:08:85:9f:d8:42:88:a5:f5:12:
f3:ee:8d:a8:a0:02:2a:ff:91:a0:49:12:98:98:62:
db:0f:44:43:28:86:c6:df:cd:f7:58:8c:ed:e5:af:
76:69:f3:22:89:4c:5b:09:6f:39:4d:3d:36:a2:69:
5a:cb:c2:cc:e7:92:e0:34:ee:74:49:ae:23:cb:58:
f8:3c:69:55:50:59:1b:8d:70:4b:36:dc:c3:54:d2:
27:25:f6:27:df:74:e6:43:7e:fc:7f:b1:6d:d1:b3:
7b:bf:e5:64:14:8a:3f:52:21:0d:84:f4:09:42:3e:
93:c2:30:96:83:c8:a3:07:70:45:dc:d1:96:72:fd:
64:38:fd:5f:29:56:aa:7d:c2:40:36:7f:7a:69:ab:
47:67:73:7b:06:85:66:70:c6:8e:90:7b:b5:a6:b4:
ed:7d:37:c8:a6:c5:df:63:59:3e:74:a6:f1:55:ba:
90:43:83:33:8a:65:fc:00:15:18:c9:29:11:f4:fc:
7e:09:a8:b1:e4:e7:74:7b:d8:86:cc:02:f9:f8:be:
b8:f4:4c:05:94:e7:0d:3f:3a:6d:5d:0a:e0:6b:51:
fb:fc:1a:92:0b:d0:76:81:2a:9b:ca:10:23:5c:2a:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C0:30:A8:82:E3:16:04:B3:69:17:2B:0B:C7:E6:3E:FB:4D:98:37
X509v3 Authority Key Identifier:
keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:46:ba:e0:3a:a4:d5:e5:b6:cb:fa:c1:5c:4a:6c:65:e9:45:
9c:c4:64:95:b1:89:bf:f4:f6:1c:28:fc:d3:15:a4:36:8e:91:
af:ae:63:61:f5:75:a3:29:32:b1:b3:a7:6d:2f:c4:b4:e9:4f:
8f:af:0c:e2:c0:15:2a:3c:65:ba:9c:81:75:8e:05:b6:94:3c:
fc:95:62:f6:ce:06:d4:16:4a:3c:6f:be:e2:4b:1b:b6:9c:3d:
b8:15:c7:02:df:6e:5e:0b:db:80:0d:4d:0c:7e:ec:cd:2c:8f:
0a:06:30:15:cc:e5:5c:55:32:38:5e:f0:39:7b:75:36:60:75:
ab:a0:98:e8:4a:22:8c:de:c0:d7:08:db:07:0e:18:48:f1:9d:
dd:c8:44:57:d3:ac:59:f6:80:c8:68:8f:66:15:24:2b:3a:e1:
7a:f1:95:11:a0:f3:b2:37:31:8b:e6:94:0d:c5:31:95:25:51:
7b:63:2d:5b:23:cb:5f:a9:a7:a4:6d:b6:db:4f:49:f7:fc:54:
ed:29:e1:9d:a6:23:50:b7:39:6c:f0:a5:15:31:9b:d9:fa:b3:
4c:22:a1:69:aa:ec:70:2f:7e:0e:67:af:a3:c4:8e:08:ba:0b:
8e:8e:50:8d:b9:b8:bb:1f:ec:58:27:39:97:68:5e:f8:0d:23:
56:fb:c9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:11 2026 by rpki-client