Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
File: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft (raw, json)
Hash identifier: LAkHWKfmoAMOMxmtLSl9VMfoleJi0duOgxXYI3CEpAw=
Subject key identifier: DA:37:38:F4:2B:3B:CC:15:B6:84:A8:34:A8:35:BB:A7:94:0E:76:35
Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
Certificate issuer: /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Certificate serial: 019F9248CA7CC0389706A9A80AD1A278E88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
Manifest number: 047D
Signing time: Fri 24 Jul 2026 04:01:11 +0000
Manifest this update: Fri 24 Jul 2026 04:01:11 +0000
Manifest next update: Sat 25 Jul 2026 04:01:11 +0000
Files and hashes: 1: t4FfWGGXtTRUFxZwz8cMn71DIVM.roa (hash: 1Te86c70kCA9A6/qMvPRifJboyGJc6UFcW+d55LKuf0=)
2: uDZTkixEz6zAK6MZ-bDfIGsBon0.roa (hash: jjgeGrXtby6czGOqPzKNGOqSk4f42a5b485yG1EOigM=)
3: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl (hash: 2ImY4hKmIadYunmwaPTWq6hzkGOsm0GSLbcVZRERTG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:ca:7c:c0:38:97:06:a9:a8:0a:d1:a2:78:e8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Validity
Not Before: Jul 24 04:01:11 2026 GMT
Not After : Jul 25 04:01:11 2026 GMT
Subject: CN=da3738f42b3bcc15b684a834a835bba7940e7635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1e:4d:9b:e7:88:cf:bf:92:ea:4b:5f:6d:13:
3c:db:56:3a:8a:7d:e3:0e:5d:56:af:81:09:a3:ea:
09:42:d7:f1:1c:b3:6e:59:95:29:c7:c7:9f:42:65:
5d:cb:11:03:0f:80:79:7c:02:a1:10:b6:24:62:3d:
e4:ae:00:36:39:2f:66:ce:d8:31:dd:4a:a1:c6:62:
8f:a0:20:bf:37:bc:20:32:f0:cd:f2:b3:5d:13:1a:
bb:95:2a:41:52:05:34:ee:98:ac:9d:03:90:ee:8a:
f1:45:38:43:04:43:a2:a3:e1:1b:aa:e1:21:4b:d8:
16:ed:2b:5e:4d:40:31:8b:a1:67:d3:9a:a0:f3:b0:
0d:6a:60:1f:33:45:fd:02:98:58:11:ff:16:38:56:
a5:62:c7:e3:3f:af:31:22:6e:ce:c1:58:f7:d6:25:
44:07:98:71:e6:23:22:18:84:d7:ea:3e:1d:b0:6e:
f6:26:f9:62:fe:45:f4:b7:22:c1:1e:25:f3:a9:1e:
27:b2:ba:c1:c6:e8:e9:8a:8c:a1:d5:a2:cd:73:a3:
57:5b:62:0c:94:fa:42:b4:2d:87:a2:95:96:d6:03:
7b:74:5b:f2:21:21:74:76:c7:a6:68:ac:6f:5a:0a:
ec:f0:62:5a:b4:bf:16:bb:3c:37:81:ba:d9:bb:df:
b0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:37:38:F4:2B:3B:CC:15:B6:84:A8:34:A8:35:BB:A7:94:0E:76:35
X509v3 Authority Key Identifier:
keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1a:04:8f:47:22:aa:61:d8:4c:0c:c0:3a:66:15:2e:5a:db:
8f:1b:40:0c:7a:b2:1c:1d:6f:2a:3b:3f:c9:7c:45:6f:ba:15:
c5:ac:f7:1f:66:e9:b4:e2:6e:61:0e:a6:22:33:80:ea:05:31:
16:69:4b:31:24:a7:90:da:9b:7b:d6:5f:7c:58:e9:da:ee:b3:
90:04:4e:c5:bd:fc:08:f4:bd:3c:95:2d:47:0c:6b:a9:9a:84:
fb:7e:1c:02:7d:ba:ae:f5:18:f7:4f:2a:52:46:3a:aa:00:5e:
57:b3:c1:b1:07:b4:78:f1:78:7d:46:e3:74:4f:c4:f4:02:4b:
7c:2b:43:62:e8:ae:ca:06:52:55:ed:2c:d7:8f:3e:2e:b6:27:
ee:10:3a:58:01:91:f5:9e:9f:be:b5:58:b8:85:ef:1a:cf:d0:
c9:15:c5:cd:d6:dd:c5:d8:ea:27:00:86:ec:9f:64:be:e2:87:
3f:22:5a:48:a5:3f:3a:0d:fd:b1:a4:ec:b3:47:f9:55:04:e5:
0a:ef:b5:dd:e7:4f:86:d5:ec:b0:41:21:2c:ef:93:59:23:22:
d0:ce:c7:dd:d6:d8:c5:17:1d:da:c4:ea:29:16:b9:43:3b:24:
a6:c5:d2:d7:fa:52:c5:11:23:9d:6b:c7:a6:8c:de:8e:35:82:
a5:84:3f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:22:40 2026 by rpki-client