Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
File: x50TZko3nYtdrfdj3QT1EV4CMYQ.mft (raw, json)
Hash identifier: K+bw5KtGqpfiWbjYaboz7bBadujRi0Sgh5GDWvh3v9M=
Subject key identifier: DB:A4:82:07:6A:D7:AA:28:CF:75:86:EB:3D:AF:7E:38:9E:5E:21:9D
Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184
Certificate serial: 019CAD2302BEDE25E7C7F2624029C881F4D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
Manifest number: 026A
Signing time: Mon 02 Mar 2026 06:01:18 +0000
Manifest this update: Mon 02 Mar 2026 06:01:18 +0000
Manifest next update: Tue 03 Mar 2026 06:01:18 +0000
Files and hashes: 1: KC60HOn4qZ_nt5IDt9mXDVYCZxE.roa (hash: Ha9h1XmaEV/kiNbn1BUvIxQ7eeMbw2HvCm3HWf0lUxA=)
2: x50TZko3nYtdrfdj3QT1EV4CMYQ.crl (hash: pLBtZjYi6RkJfacH7J74fsYiuPVZ0bdt3UAsPslEPWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:02:be:de:25:e7:c7:f2:62:40:29:c8:81:f4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184
Validity
Not Before: Mar 2 06:01:18 2026 GMT
Not After : Mar 3 06:01:18 2026 GMT
Subject: CN=dba482076ad7aa28cf7586eb3daf7e389e5e219d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:15:c5:ac:dd:f5:65:c2:0a:e9:56:cf:4d:
b1:ec:ac:1f:f7:db:3e:b2:e4:9e:24:79:7c:6d:b4:
0c:0f:50:21:f9:6a:40:af:55:d2:40:36:df:17:bc:
a6:70:be:94:05:fb:2b:44:9f:60:78:17:b1:04:ba:
c5:41:85:c6:41:fe:15:e4:55:09:88:73:37:b4:02:
4c:e1:95:b8:f9:03:b4:7d:d2:49:a3:50:4b:79:bb:
bc:01:31:b0:6f:3f:36:26:12:9b:ac:24:c1:0e:c2:
cb:00:2c:fe:db:8c:94:96:d8:69:3c:ad:ba:a8:64:
db:31:59:96:30:dd:3d:c3:79:f4:32:2e:16:d0:aa:
c6:3f:65:f6:e6:18:d0:b6:e0:32:d5:e9:97:8f:fe:
69:7e:9f:2a:94:cb:a4:f3:82:ab:f2:2a:86:e8:39:
52:8c:fd:5e:30:14:f8:5f:c4:3c:a6:7b:10:c6:94:
9d:d5:d5:12:68:c4:16:1b:35:1d:1e:f6:80:35:79:
84:5a:42:c1:6b:2f:a1:25:57:e6:1e:b8:70:7e:20:
17:ea:d5:b3:65:3e:ec:22:65:4c:81:e1:e8:d6:6b:
b2:5a:d6:9b:c7:a9:10:d3:84:45:ad:49:a6:18:ec:
6e:27:ca:52:9a:cc:8a:16:0e:5b:c9:97:f4:42:c0:
9f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A4:82:07:6A:D7:AA:28:CF:75:86:EB:3D:AF:7E:38:9E:5E:21:9D
X509v3 Authority Key Identifier:
keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:94:fc:04:da:57:e6:21:2a:47:55:03:83:9a:fe:3a:f2:d7:
ab:11:04:2f:14:52:94:88:2c:a6:64:71:f4:99:1d:2f:ec:73:
b5:8d:b1:4c:73:46:d1:5e:93:c3:e5:ff:a8:53:6a:e9:b7:55:
7e:99:2a:c1:01:e9:d2:e6:a2:13:56:81:06:1d:f0:aa:9c:b0:
c6:a1:19:1b:a9:83:e2:4c:d7:61:13:36:6d:14:e1:44:18:85:
db:17:9c:a7:30:2c:2b:1a:21:f2:87:5a:38:58:10:9a:51:eb:
2d:06:aa:26:3a:24:e1:11:28:61:7f:c9:c2:1d:fa:c5:c2:da:
1c:94:cb:b8:d7:6a:f8:7c:0f:66:b1:3d:c8:3e:4c:82:dd:44:
4f:76:92:98:11:fc:b2:b7:46:fe:82:68:a0:dd:2f:83:2b:00:
f1:1a:da:03:a6:90:25:6d:fe:ec:b5:76:27:11:45:8d:6c:5d:
af:6f:62:fc:f4:8b:d7:7c:70:73:aa:27:08:42:18:fd:d5:b6:
75:da:ba:71:e9:38:1a:e5:26:c7:26:24:47:b0:30:36:4e:1d:
d2:c3:b5:6b:1c:05:7c:ed:96:14:c4:25:01:59:aa:8c:3a:9e:
0f:fa:6f:2f:e9:75:a4:7d:b3:bf:7b:35:76:5b:13:00:72:9b:
a2:89:68:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:19 2026 by rpki-client