Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
File: x50TZko3nYtdrfdj3QT1EV4CMYQ.mft (raw, json)
Hash identifier: 27LU+rNiu70oyuAGzSpIZFITJanDw0OHIW/mrJitOr4=
Subject key identifier: D1:74:BD:B5:6D:E9:EA:00:1A:92:BE:09:D5:E8:BE:A6:E7:53:66:D7
Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184
Certificate serial: 019D9C99F6E08DE81A61F643D9A09DCEEBC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
Manifest number: 02E6
Signing time: Fri 17 Apr 2026 18:00:28 +0000
Manifest this update: Fri 17 Apr 2026 18:00:28 +0000
Manifest next update: Sat 18 Apr 2026 18:00:28 +0000
Files and hashes: 1: KC60HOn4qZ_nt5IDt9mXDVYCZxE.roa (hash: Ha9h1XmaEV/kiNbn1BUvIxQ7eeMbw2HvCm3HWf0lUxA=)
2: x50TZko3nYtdrfdj3QT1EV4CMYQ.crl (hash: gGc4pdsMajsiW4ShTWrt2HQcnby3sRbSZ9cNUAdC1QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:99:f6:e0:8d:e8:1a:61:f6:43:d9:a0:9d:ce:eb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184
Validity
Not Before: Apr 17 18:00:28 2026 GMT
Not After : Apr 18 18:00:28 2026 GMT
Subject: CN=d174bdb56de9ea001a92be09d5e8bea6e75366d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:8a:17:32:71:49:74:9e:45:3a:2c:a7:b4:
09:cd:26:27:08:12:82:e2:9c:dd:69:54:a7:7e:a7:
13:e2:ff:93:2c:a5:4b:1d:20:54:4b:73:57:31:b7:
7f:a7:d4:0e:3e:22:ee:68:3a:7a:bf:45:be:07:bc:
f9:e0:74:fb:05:fe:c8:2d:49:34:07:a4:3a:58:9a:
18:a0:47:26:0e:70:af:38:f9:85:16:2e:eb:e2:66:
2e:2d:51:85:97:54:06:86:a5:ac:c4:2e:72:ea:9f:
98:3b:4f:b9:ca:1e:59:50:4a:26:63:49:71:16:83:
9d:7b:3b:cf:da:81:d9:c4:bc:d4:a4:59:f5:89:f0:
3a:23:5e:79:80:70:77:7b:ad:c3:14:b3:e9:6e:f9:
6e:1d:50:20:26:5c:0a:7f:86:3a:e0:ad:5a:38:16:
b1:05:69:1e:0d:04:14:af:1d:24:37:3f:14:d4:d9:
1d:b3:b3:d9:b6:da:d7:3f:6c:74:c3:f3:e6:af:3f:
2b:ef:a6:3a:aa:5f:2a:50:24:1a:2b:5c:0c:fe:65:
71:a8:ab:9b:24:17:e1:71:18:f1:e3:6b:bb:c9:48:
d3:ce:95:97:a8:f7:92:29:c4:14:3e:34:62:0b:0f:
af:ba:85:b3:5c:d5:f4:2b:2a:01:c6:55:f4:53:84:
80:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:BD:B5:6D:E9:EA:00:1A:92:BE:09:D5:E8:BE:A6:E7:53:66:D7
X509v3 Authority Key Identifier:
keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fc:7c:98:21:20:ff:27:b6:c0:ee:6f:6d:54:b6:dd:b2:74:
6b:d3:37:6a:46:2e:a1:b5:f1:41:f2:d9:a9:ec:b7:4c:9b:04:
83:1d:ef:dc:71:47:f9:e5:f1:62:ee:81:3b:00:98:e3:02:3d:
42:a0:a0:0c:9a:36:14:d3:76:c3:17:e9:7a:88:a4:48:3f:8b:
c0:d9:93:e4:45:fa:73:ba:aa:cf:0c:62:28:c7:5f:ab:3d:5b:
80:54:c1:b5:53:cb:db:51:4f:8f:62:b4:89:c7:06:c4:cc:98:
6f:7c:23:21:0c:3f:f9:9f:69:94:71:6a:27:80:92:1c:2b:f3:
b4:56:78:fd:61:cd:7a:2b:80:9f:ad:87:a3:e6:47:b9:2b:db:
11:ee:69:e2:cf:92:d6:e2:52:92:d6:26:af:30:d7:e9:8d:3a:
33:4f:7a:fe:29:66:15:fe:0f:8b:23:9c:90:6c:57:79:c0:cc:
4a:ad:32:26:79:3b:6f:43:02:55:9e:b0:6b:1a:86:69:40:61:
00:12:55:62:30:d5:7d:77:d0:65:4e:c0:2e:ce:56:98:50:03:
27:2c:e9:8a:8f:f1:14:70:fd:c6:41:8c:45:1f:69:18:38:cc:
42:5c:85:8e:6d:85:bf:3d:57:ad:89:db:0f:15:c0:65:63:ae:
ef:27:08:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:30:09 2026 by rpki-client