Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
File: x50TZko3nYtdrfdj3QT1EV4CMYQ.mft (raw, json)
Hash identifier: bPS7r/1Jtb/oWnxCoLcIvWWlY1ZIi1e6XI9eFzzHaiU=
Subject key identifier: 4C:4A:86:DF:45:94:12:D3:7D:58:4F:86:AC:5A:2F:6A:1F:2A:3A:E3
Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184
Certificate serial: 019F92B5EBDF6959FFCA88B7528791CC1EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
Manifest number: 03EA
Signing time: Fri 24 Jul 2026 06:00:23 +0000
Manifest this update: Fri 24 Jul 2026 06:00:23 +0000
Manifest next update: Sat 25 Jul 2026 06:00:23 +0000
Files and hashes: 1: KC60HOn4qZ_nt5IDt9mXDVYCZxE.roa (hash: Ha9h1XmaEV/kiNbn1BUvIxQ7eeMbw2HvCm3HWf0lUxA=)
2: x50TZko3nYtdrfdj3QT1EV4CMYQ.crl (hash: DzQCzBHu0y088nNXT2kHtAYVwae0URB2IiV3X3HsHw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:eb:df:69:59:ff:ca:88:b7:52:87:91:cc:1e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184
Validity
Not Before: Jul 24 06:00:23 2026 GMT
Not After : Jul 25 06:00:23 2026 GMT
Subject: CN=4c4a86df459412d37d584f86ac5a2f6a1f2a3ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:69:8b:6b:8f:98:03:fc:2c:9c:08:22:ff:d6:
7e:bd:13:b4:66:ab:d2:b5:a3:89:f8:a4:e7:a2:38:
d5:a7:54:51:e4:c8:05:8a:c6:d7:6a:2e:c7:97:a7:
49:55:d7:41:47:70:9b:01:55:ca:5b:b3:9b:26:50:
c5:9d:31:0b:27:9d:f0:4e:67:4a:64:0d:60:32:77:
a0:83:bb:7f:64:a6:1b:b9:63:b8:01:39:e7:16:c2:
ac:39:2a:16:3d:b9:1a:2d:95:1a:1f:25:f3:b8:ca:
0d:b6:94:b0:37:05:a1:df:6a:9e:de:80:97:6f:96:
83:a0:25:4e:a7:c2:4c:c1:99:33:99:e9:98:df:5b:
d6:13:04:e6:b9:53:29:8a:57:60:6b:09:55:81:b8:
3c:33:8d:5b:13:d2:5c:a5:8e:5d:6d:c9:94:a2:38:
32:ef:6e:bd:ec:ed:63:96:9b:88:8d:4e:b7:59:1f:
aa:55:29:d3:f6:43:1e:4f:fd:c3:86:08:bb:93:c7:
3c:f6:f4:98:7e:43:7a:15:fe:36:a6:c1:64:06:3d:
84:36:2d:59:16:ae:9b:ea:38:01:f4:10:9d:d4:d8:
10:6d:6d:e0:72:cd:2a:29:ae:73:9f:29:b2:46:e5:
58:97:f9:a7:68:06:a3:46:f9:1c:91:45:1b:27:65:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4A:86:DF:45:94:12:D3:7D:58:4F:86:AC:5A:2F:6A:1F:2A:3A:E3
X509v3 Authority Key Identifier:
keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bf:3c:4d:63:21:d8:77:da:23:f5:68:44:35:7b:f7:9c:5f:
5f:cd:ae:87:e6:e1:1d:da:34:e2:ed:c6:69:0b:94:92:3b:aa:
24:a7:48:d7:ce:1f:58:6b:f5:70:85:1d:f7:66:8e:2d:35:e1:
8d:71:78:d1:e5:b2:2d:a5:a8:12:af:a6:d8:7c:ff:d6:16:f1:
9a:07:3a:dc:e7:06:dc:0f:ed:90:ff:d5:a4:74:d1:94:3b:c2:
05:d2:89:50:f2:1f:44:7a:22:94:71:b0:32:6b:47:e2:5a:06:
7c:c4:ab:e8:37:cf:d9:63:0d:89:b9:51:a2:27:ac:29:37:3a:
97:1f:bb:9e:f7:9a:25:4c:4b:8c:2b:73:30:7d:7f:dd:6f:63:
26:44:67:31:03:f2:d6:70:56:ae:a0:bf:6a:d1:6d:b2:ca:49:
bb:4a:75:f1:07:fb:98:62:40:c5:f4:6c:4e:1c:0a:7f:58:39:
06:ef:df:45:c7:00:23:fc:95:14:c5:24:51:b6:93:06:9c:96:
ef:e5:23:c0:c9:b3:12:a3:b6:50:f2:57:3a:74:28:19:14:dd:
1a:0a:8b:a1:0d:27:7e:98:a2:32:71:a8:57:e2:5b:08:39:85:
08:d9:37:9c:ae:00:8f:e8:24:5f:0b:60:79:a6:31:67:42:31:
52:6e:59:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:21:55 2026 by rpki-client