Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
File: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft (raw, json)
Hash identifier: uSHKDg7V57ReraqdLemvsRnWpt0wGtr2l/Ffb4IHISQ=
Subject key identifier: 11:99:FE:7A:3A:1A:19:01:B9:6A:C6:C4:E3:D2:8B:2E:EC:51:71:C5
Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
Certificate issuer: /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Certificate serial: 01A0EDE6DC74ED58FF02501EFADFFA3CDED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
Manifest number: 0531
Signing time: Tue 29 Sep 2026 16:02:04 +0000
Manifest this update: Tue 29 Sep 2026 16:02:04 +0000
Manifest next update: Wed 30 Sep 2026 16:02:04 +0000
Files and hashes: 1: t4FfWGGXtTRUFxZwz8cMn71DIVM.roa (hash: 1Te86c70kCA9A6/qMvPRifJboyGJc6UFcW+d55LKuf0=)
2: uDZTkixEz6zAK6MZ-bDfIGsBon0.roa (hash: jjgeGrXtby6czGOqPzKNGOqSk4f42a5b485yG1EOigM=)
3: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl (hash: WPsnXdgKXHuxZnrchh6d6nXTkMLGpqc3/r9Vm/WGbCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 16:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:e6:dc:74:ed:58:ff:02:50:1e:fa:df:fa:3c:de:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Validity
Not Before: Sep 29 16:02:04 2026 GMT
Not After : Sep 30 16:02:04 2026 GMT
Subject: CN=1199fe7a3a1a1901b96ac6c4e3d28b2eec5171c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:49:f0:53:83:51:2e:17:b4:d0:f8:a9:4a:
13:85:69:a9:2b:35:11:d3:df:6f:e3:a9:2e:d1:4d:
bf:58:d3:5f:ac:72:5a:e1:0f:03:a6:5f:a8:cd:bc:
d1:6f:0a:48:e5:ed:66:df:8f:a1:42:96:6b:e4:a0:
cb:15:54:98:7f:cb:0e:1e:f9:42:7a:af:38:0a:af:
83:c1:b6:eb:8b:47:12:46:2d:a3:ec:36:62:5c:71:
99:43:49:f6:04:b5:f4:b5:71:01:fe:d2:23:7f:a1:
f5:b0:e3:82:3b:21:fb:d0:33:a5:86:1a:0b:6e:3e:
df:d4:bb:a0:e8:19:8b:ae:fb:e5:37:42:80:a6:cd:
3b:5e:04:7d:81:59:42:6b:77:bc:70:17:d5:ec:66:
58:f7:f0:be:75:66:62:9a:9e:8d:ee:a1:e2:95:95:
47:8f:0e:32:25:14:41:2e:96:5c:8c:c1:f4:a2:f1:
13:c6:c3:16:bc:4e:a1:d5:17:75:3b:47:8a:25:4d:
de:e7:11:4c:ec:78:8f:24:2f:f0:ae:c7:94:64:04:
a1:1d:6b:4c:a1:80:fd:49:12:12:ef:85:99:85:87:
a6:9e:7e:7b:dc:d6:67:69:16:41:82:a9:b1:ec:ee:
44:b0:51:23:9e:89:fc:2c:8d:7e:d0:06:85:12:33:
4e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:99:FE:7A:3A:1A:19:01:B9:6A:C6:C4:E3:D2:8B:2E:EC:51:71:C5
X509v3 Authority Key Identifier:
keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2b:3b:1d:b9:cb:cb:ef:05:ad:4f:73:77:b7:1b:af:01:1b:
54:ea:d0:e0:7c:f7:a0:2f:b7:68:c1:c6:be:d4:7d:cd:36:32:
b1:ad:2e:3d:d3:24:ac:f3:95:ec:81:42:c5:5a:d2:d0:5c:53:
99:e4:d1:06:02:80:3f:21:22:eb:10:82:df:a3:58:92:c9:78:
84:2e:a0:a8:e4:46:b4:d9:a3:44:ff:c1:45:09:79:f0:26:56:
85:b8:34:e9:b3:37:cd:79:19:e1:c2:4d:2b:85:5c:46:ab:92:
52:2d:16:8c:bd:11:81:9b:1b:78:99:37:bf:95:88:f9:4e:36:
b7:2f:ed:27:a0:d8:eb:8f:71:4b:22:4e:0a:57:51:a2:94:d4:
e3:e8:d4:d1:9f:b1:07:74:b1:90:2c:dd:8d:01:a7:db:a8:1c:
87:54:12:dc:e4:04:01:a9:a2:e7:4f:57:88:f7:ce:2e:c7:ca:
3d:30:0a:84:db:34:b6:f2:8a:8a:ce:97:5f:dc:ae:9d:e8:59:
95:d0:52:26:c2:cd:8b:f1:d7:38:80:91:9f:81:be:be:a2:04:
ad:90:83:22:72:08:a2:12:7e:e1:4c:3e:2d:a6:fe:8e:10:81:
9f:1a:d5:eb:06:3d:37:28:14:dd:20:9a:e3:1c:cf:98:b0:dd:
7a:68:c3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:56:53 2026 by rpki-client