Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
File: x50TZko3nYtdrfdj3QT1EV4CMYQ.mft (raw, json)
Hash identifier: z6BQCTtKzv9Ek8I4/NlH9VK0mw8+LdnAzpmBk40cAKw=
Subject key identifier: 91:11:D4:CE:BB:6D:F8:CB:9D:C2:EA:35:79:26:01:0A:FD:42:F0:FF
Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184
Certificate serial: 019D9AAC0488DC8D0EFE70FB592849C39D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
Manifest number: 02E5
Signing time: Fri 17 Apr 2026 09:00:57 +0000
Manifest this update: Fri 17 Apr 2026 09:00:57 +0000
Manifest next update: Sat 18 Apr 2026 09:00:57 +0000
Files and hashes: 1: KC60HOn4qZ_nt5IDt9mXDVYCZxE.roa (hash: Ha9h1XmaEV/kiNbn1BUvIxQ7eeMbw2HvCm3HWf0lUxA=)
2: x50TZko3nYtdrfdj3QT1EV4CMYQ.crl (hash: Cg3g+SpGMBa7zdojhBchqilKzX+wrcSYAKv07KjEuqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:04:88:dc:8d:0e:fe:70:fb:59:28:49:c3:9d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184
Validity
Not Before: Apr 17 09:00:57 2026 GMT
Not After : Apr 18 09:00:57 2026 GMT
Subject: CN=9111d4cebb6df8cb9dc2ea357926010afd42f0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:ac:cd:d5:33:e8:3c:05:e5:f9:c4:c2:46:
1d:aa:cd:f1:d3:10:82:ad:53:5f:eb:89:06:aa:d7:
c9:b0:ba:39:a5:1e:0e:25:9d:4a:9e:bf:36:96:d5:
50:a9:6c:12:17:13:61:b3:c6:f9:3d:4b:13:db:88:
e2:c4:25:9f:12:bc:34:06:02:c2:0b:2d:7d:ce:01:
9e:05:12:8c:77:1d:5c:ca:74:c0:fa:d5:c9:aa:fe:
08:0b:2a:f8:bb:67:36:fe:99:06:0d:d4:32:20:8b:
f1:fa:07:e4:6d:a0:43:62:ae:88:d6:59:c0:97:aa:
3c:48:4c:e7:0a:25:68:72:e2:cc:f6:1e:d6:37:7b:
03:ff:72:54:a6:09:43:d7:74:72:69:0a:69:2f:67:
a0:bf:f4:5c:4e:46:d9:42:31:01:ea:6b:9c:e7:e6:
5d:11:a0:ec:4e:26:a3:ca:9f:4b:31:3e:8d:4e:ab:
6b:f8:91:fe:ee:1f:7e:b8:c5:88:8c:0b:63:58:f5:
c2:30:29:3e:f6:7c:71:57:2b:07:24:7e:4d:f4:d0:
e9:e8:88:5f:64:be:0c:10:e6:f7:4c:f6:94:a6:64:
e4:51:29:57:db:87:97:82:d9:55:68:c2:4d:10:d0:
a0:65:4b:67:47:6b:28:b7:86:04:94:c7:23:18:23:
09:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:11:D4:CE:BB:6D:F8:CB:9D:C2:EA:35:79:26:01:0A:FD:42:F0:FF
X509v3 Authority Key Identifier:
keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:1d:68:bd:ab:2d:82:95:a9:05:c3:2b:43:b0:37:24:8f:d0:
da:f4:dd:0e:09:17:e7:f6:77:4f:bc:2d:84:79:38:e7:1b:5a:
7e:35:ba:9c:32:c7:31:64:6c:7c:d0:35:63:46:ef:ef:91:a6:
d6:65:b3:3f:02:7a:d8:ec:c9:84:cc:9d:49:47:6e:8f:88:83:
67:58:56:ae:f3:74:80:79:36:11:fc:9c:d2:d0:76:04:54:20:
bb:a0:25:94:d8:4d:72:2f:c6:67:93:3e:43:91:8e:db:cf:4c:
03:b2:15:6e:fa:e6:11:cd:cb:de:2b:fb:36:94:e7:12:44:fc:
bf:45:d7:bf:18:1b:c3:e7:47:af:38:0a:73:c5:7f:9d:82:b8:
4c:e4:26:60:ff:f7:63:5b:ca:cc:67:19:61:e1:9c:73:5b:0f:
7b:83:a5:f8:0d:1d:bc:a0:da:d4:8a:a3:f7:4e:d3:88:d1:59:
8b:3d:bf:ed:6e:ad:b7:84:7d:d8:28:95:2d:c1:94:93:cc:18:
6f:f4:d2:8f:be:b7:d5:00:0d:9d:8b:65:53:d7:7f:09:b5:11:
af:a9:05:5a:0f:ab:60:15:91:f8:f2:95:81:6a:47:ac:13:7d:
44:30:3b:56:f8:ab:a6:78:90:f4:e2:dc:40:19:f7:70:ba:03:
bf:8a:9c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:27:11 2026 by rpki-client