
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
File: x50TZko3nYtdrfdj3QT1EV4CMYQ.mft (raw, json)
Hash identifier: OYhFyr13MLYXQ5JL2zYcSFjtVVA6xTYnjwoKW32YKFQ=
Subject key identifier: 6F:28:E1:A7:35:20:CC:5C:F0:1C:55:93:40:C3:0A:7A:AF:78:03:A3
Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184
Certificate serial: 01A11BD129B118B28CFD39D19D02E1726C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
Manifest number: 04B7
Signing time: Thu 08 Oct 2026 14:00:54 +0000
Manifest this update: Thu 08 Oct 2026 14:00:54 +0000
Manifest next update: Fri 09 Oct 2026 14:00:54 +0000
Files and hashes: 1: 6yyB24me4Mn3puiEBQ4zRTAPk-E.roa (hash: YO5t1MuMlwUTQbqSGR4RC9grjswW/0er9HP9kdISB5A=)
2: KC60HOn4qZ_nt5IDt9mXDVYCZxE.roa (hash: Ha9h1XmaEV/kiNbn1BUvIxQ7eeMbw2HvCm3HWf0lUxA=)
3: TITnSXpWW3qxfDNPouCwtI3YpEQ.roa (hash: sm1bU0K4LgCRG0wGAryCUHdSLiQ6rkGZDYDjE1Aj7fM=)
4: x50TZko3nYtdrfdj3QT1EV4CMYQ.crl (hash: kExGlItT5xhAzdQZHMoPcCGj7ZX4cAlE+mvpuOsoiHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:d1:29:b1:18:b2:8c:fd:39:d1:9d:02:e1:72:6c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184
Validity
Not Before: Oct 8 14:00:54 2026 GMT
Not After : Oct 9 14:00:54 2026 GMT
Subject: CN=6f28e1a73520cc5cf01c559340c30a7aaf7803a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:34:a4:41:e0:39:3c:c8:42:7d:66:6d:4b:
c4:40:05:34:87:4b:8a:d4:11:9c:84:d9:27:e0:62:
47:73:0d:7b:53:80:ea:50:66:b2:bf:95:32:78:45:
54:6e:cd:a3:93:6a:d5:ee:13:be:9a:40:06:3b:62:
ca:f9:78:52:c3:f8:0f:59:e9:8c:04:02:bd:0b:de:
d4:eb:11:8c:30:58:96:5b:35:0e:57:5f:a1:0f:d1:
d3:cf:85:5d:36:b3:dd:8d:5a:ea:99:e3:fe:13:db:
82:03:2c:1d:9e:19:f6:8f:51:b9:45:3b:49:15:4b:
4b:59:b9:db:60:2a:82:63:13:b0:c4:67:d4:a8:92:
8e:f9:49:81:dc:a8:ab:34:66:9d:3a:43:21:21:26:
12:57:34:8a:35:b8:e9:7b:1e:bc:cd:2e:4e:12:bc:
e3:87:9b:c6:fa:05:97:35:d0:00:55:93:f2:bb:9c:
0b:a4:cf:31:55:8a:98:2f:d3:ba:f2:2d:6a:a7:53:
51:3b:aa:3c:76:14:44:eb:29:46:8e:04:25:7c:dc:
12:30:dd:a1:87:d2:72:38:23:56:7b:20:ab:a9:f9:
ed:96:c1:90:19:41:a4:85:d7:bf:f6:b5:37:5c:b7:
46:1a:3f:6a:7a:72:e3:91:c9:c1:a0:2a:5a:f4:10:
3f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:28:E1:A7:35:20:CC:5C:F0:1C:55:93:40:C3:0A:7A:AF:78:03:A3
X509v3 Authority Key Identifier:
keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:98:be:8e:3f:27:d6:b5:cc:19:d3:75:1c:3c:ca:78:dd:a2:
b7:51:53:02:7f:ba:92:39:f6:62:11:0f:aa:db:04:94:0c:38:
20:7c:45:44:1d:f9:f0:a5:5b:fc:2f:b0:79:3b:ff:12:44:9c:
9a:96:a5:f5:aa:cc:d8:bf:34:89:86:e0:1e:1a:9d:ac:25:97:
d7:61:3c:ef:7c:a7:02:b5:e5:37:7b:be:f4:e7:15:3e:ab:a2:
cb:12:d6:a4:20:28:6b:60:f7:f8:8a:2a:df:eb:a6:2e:5b:1c:
9a:10:82:f5:49:53:d2:a9:d1:f5:79:c1:b7:44:dc:03:ac:96:
22:5a:4a:96:14:f9:cd:1c:33:f6:6c:83:20:55:27:df:c4:7a:
30:5f:41:be:89:8f:8d:72:87:d8:3a:6d:17:32:bd:85:75:8a:
8a:b7:0a:f3:88:65:d2:13:84:e6:1f:ea:fe:9d:10:cd:cb:9b:
d7:08:d2:05:c5:7d:45:9c:9d:de:0b:ee:0d:43:92:5f:d5:52:
9b:8a:a0:17:eb:fa:32:6e:84:3d:27:b8:6b:a4:c1:f2:cb:c6:
28:3e:b8:c6:6a:ed:30:ad:93:c8:08:8e:93:30:55:5b:22:0d:
bc:af:ac:8e:b5:16:a0:07:8a:28:29:fc:7e:d1:b7:77:f1:cf:
64:18:01:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEb0SmxGLKM/TnRnQLhcmxVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3OWQxMzY2NGEzNzlkOGI1ZGFkZjc2M2RkMDRmNTExNWUw
MjMxODQwHhcNMjYxMDA4MTQwMDU0WhcNMjYxMDA5MTQwMDU0WjAzMTEwLwYDVQQD
Eyg2ZjI4ZTFhNzM1MjBjYzVjZjAxYzU1OTM0MGMzMGE3YWFmNzgwM2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAQ0pEHgOTzIQn1mbUvEQAU0h0uK
1BGchNkn4GJHcw17U4DqUGayv5UyeEVUbs2jk2rV7hO+mkAGO2LK+XhSw/gPWemM
BAK9C97U6xGMMFiWWzUOV1+hD9HTz4VdNrPdjVrqmeP+E9uCAywdnhn2j1G5RTtJ
FUtLWbnbYCqCYxOwxGfUqJKO+UmB3KirNGadOkMhISYSVzSKNbjpex68zS5OErzj
h5vG+gWXNdAAVZPyu5wLpM8xVYqYL9O68i1qp1NRO6o8dhRE6ylGjgQlfNwSMN2h
h9JyOCNWeyCrqfntlsGQGUGkhde/9rU3XLdGGj9qenLjkcnBoCpa9BA/UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8o4ac1IMxc8BxVk0DDCnqveAOjMB8GA1UdIwQY
MBaAFMedE2ZKN52LXa33Y90E9RFeAjGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDUwVFprbzNuWXRkcmZkajNRVDFFVjRDTVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9lYzZiMjktMzYyMS00MDI0LTg2Mjgt
Mjg4NDI1MjljN2ExLzEveDUwVFprbzNuWXRkcmZkajNRVDFFVjRDTVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9lYzZiMjktMzYyMS00MDI0LTg2MjgtMjg4NDI1MjljN2Ex
LzEveDUwVFprbzNuWXRkcmZkajNRVDFFVjRDTVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5i+jj8n
1rXMGdN1HDzKeN2it1FTAn+6kjn2YhEPqtsElAw4IHxFRB358KVb/C+weTv/EkSc
mpal9arM2L80iYbgHhqdrCWX12E873ynArXlN3u+9OcVPquiyxLWpCAoa2D3+Ioq
3+umLlscmhCC9UlT0qnR9XnBt0TcA6yWIlpKlhT5zRwz9myDIFUn38R6MF9BvomP
jXKH2DptFzK9hXWKircK84hl0hOE5h/q/p0Qzcub1wjSBcV9RZyd3gvuDUOSX9VS
m4qgF+v6Mm6EPSe4a6TB8svGKD64xmrtMK2TyAiOkzBVWyINvK+sjrUWoAeKKCn8
ftG3d/HPZBgBgw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 17:16:13 2026 by rpki-client