Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft
File: 50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft (raw, json)
Hash identifier: zEDsm/z8n32++KR3pRybUU993wtt4kUzpxZj0THcT+c=
Subject key identifier: 13:F6:49:CB:94:C6:AE:68:6B:22:3C:01:8F:7B:7A:8B:C8:F2:F9:3E
Authority key identifier: E7:43:67:87:46:E7:9E:91:A4:76:8C:83:17:38:DF:82:3E:13:E8:C2
Certificate issuer: /CN=e743678746e79e91a4768c831738df823e13e8c2
Certificate serial: 019D9D75D34D1D4D5FB3D11DDBA1E512D3A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50Nnh0bnnpGkdoyDFzjfgj4T6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft
Manifest number: 53
Signing time: Fri 17 Apr 2026 22:00:37 +0000
Manifest this update: Fri 17 Apr 2026 22:00:37 +0000
Manifest next update: Sat 18 Apr 2026 22:00:37 +0000
Files and hashes: 1: 50Nnh0bnnpGkdoyDFzjfgj4T6MI.crl (hash: HHJEwrabX1XeQBwcgKIu45MM7Yc24HHn6qCXevhq1hs=)
2: 6JazZr7SPXh8slqXB7HbHUov70k.roa (hash: 7XDa+VuKmI+wLywvS5/AlPdQmoE7eWHSvxOhyrEmunI=)
3: aIKtZGQTlVVpSIQ2xB365ii0-Kw.roa (hash: m8BHvkfBcBguPzQ9nNGWSBwFbV1HakSsU6GmXM8bvfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/50Nnh0bnnpGkdoyDFzjfgj4T6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:d3:4d:1d:4d:5f:b3:d1:1d:db:a1:e5:12:d3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e743678746e79e91a4768c831738df823e13e8c2
Validity
Not Before: Apr 17 22:00:37 2026 GMT
Not After : Apr 18 22:00:37 2026 GMT
Subject: CN=13f649cb94c6ae686b223c018f7b7a8bc8f2f93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:2e:60:8d:cc:e7:14:56:40:58:37:f5:55:
03:83:b3:48:aa:c9:33:fd:7b:43:8e:ef:ee:ba:4d:
f8:d4:34:f1:1b:19:23:7d:28:f8:30:b6:8c:59:70:
85:73:22:2b:84:26:91:48:32:70:0d:87:a0:35:b3:
90:68:0b:cd:54:38:6a:51:20:1b:41:9b:58:8d:1e:
2e:79:4e:ac:41:d5:01:8d:ab:87:c6:34:f0:38:03:
9d:fd:7a:77:92:d9:ca:9b:79:5a:a0:01:0f:fb:94:
59:88:72:cb:6b:4f:f1:fb:b4:a3:93:e3:be:30:9a:
dd:a0:02:d2:c0:4b:c3:2f:30:f3:c4:a3:f1:12:91:
18:7c:3c:5f:36:c2:4e:c5:d0:eb:15:b6:a8:81:50:
51:72:c3:65:1b:87:31:2f:d2:33:fa:ad:92:90:e6:
19:8b:57:05:5e:05:ef:c6:63:4a:a7:a4:70:16:78:
8d:2b:32:20:27:25:07:a4:4e:88:d5:fa:6c:c7:fd:
7f:01:61:e5:59:0f:65:ba:86:fa:23:56:64:bc:a7:
ba:ba:7f:e6:e7:d6:4c:69:ed:8b:0c:ae:ac:22:bd:
1f:8c:b0:00:39:cb:a8:15:15:8a:97:c7:12:dc:5f:
ca:4d:02:ab:7c:64:79:9d:c2:aa:68:1b:37:41:05:
f4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F6:49:CB:94:C6:AE:68:6B:22:3C:01:8F:7B:7A:8B:C8:F2:F9:3E
X509v3 Authority Key Identifier:
keyid:E7:43:67:87:46:E7:9E:91:A4:76:8C:83:17:38:DF:82:3E:13:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50Nnh0bnnpGkdoyDFzjfgj4T6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f0:ab:80:4f:a4:f0:d0:39:16:6a:00:06:1d:08:c6:e9:2b:
99:92:a2:e5:c9:58:57:bd:13:09:a9:e9:0e:d9:85:64:39:e8:
1a:c7:aa:36:da:66:6d:67:ab:f5:12:82:df:97:c2:ae:4d:90:
64:7b:a2:14:03:2d:25:4b:70:ac:1d:a1:85:01:05:72:41:0f:
e0:03:94:dc:ad:2e:2a:0a:0d:65:f9:60:15:94:b7:3b:48:2d:
4c:d9:77:88:41:3f:45:de:01:eb:5f:4e:c8:37:3a:cf:7d:86:
b4:71:e7:77:44:04:72:0a:6a:cc:39:38:a2:26:16:17:f4:15:
d8:8c:f8:e9:66:8e:22:be:8a:19:23:c4:d6:b1:c0:5f:52:6f:
9c:1e:a6:d7:41:08:98:51:08:c0:b9:95:ac:dc:85:62:ec:dc:
f1:d0:e2:45:a9:90:7b:5d:c4:10:b3:99:30:ba:5a:15:01:9f:
e5:06:e5:6f:6d:59:5c:f6:10:5d:b0:68:6a:e4:4f:82:7e:57:
a1:77:e7:17:d6:f7:f5:2b:2f:df:02:02:48:ea:6a:70:70:09:
68:46:d4:ef:7a:ba:1f:3e:76:03:87:9a:d7:c7:d8:f7:af:27:
f2:fd:b6:58:da:0b:4c:34:f6:c7:1a:85:c9:eb:70:82:bc:83:
3c:60:a0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:23 2026 by rpki-client