Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
File: x50TZko3nYtdrfdj3QT1EV4CMYQ.mft (raw, json)
Hash identifier: G+v959Cm75mCjNcylPAqXnJr5PnK5XlQbISpjRqj7DE=
Subject key identifier: 44:B4:65:52:2C:AC:4B:F0:A1:77:3F:70:4E:2E:AE:06:C0:2F:A3:26
Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184
Certificate serial: 019D26CD5BEB4E9A3E26E74967C5C8FD0CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
Manifest number: 02A9
Signing time: Wed 25 Mar 2026 21:01:25 +0000
Manifest this update: Wed 25 Mar 2026 21:01:25 +0000
Manifest next update: Thu 26 Mar 2026 21:01:25 +0000
Files and hashes: 1: KC60HOn4qZ_nt5IDt9mXDVYCZxE.roa (hash: Ha9h1XmaEV/kiNbn1BUvIxQ7eeMbw2HvCm3HWf0lUxA=)
2: x50TZko3nYtdrfdj3QT1EV4CMYQ.crl (hash: SD4++XZokdQCvi04UXslE9ppq1MTTu0gerazuI7z86c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:5b:eb:4e:9a:3e:26:e7:49:67:c5:c8:fd:0c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184
Validity
Not Before: Mar 25 21:01:25 2026 GMT
Not After : Mar 26 21:01:25 2026 GMT
Subject: CN=44b465522cac4bf0a1773f704e2eae06c02fa326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:0c:a8:d7:be:ce:24:13:8c:8d:f0:72:d6:
cf:92:4e:bd:c8:64:5a:98:7d:74:b8:7a:e2:2e:17:
ff:0c:5e:94:e0:2f:5c:96:e8:22:8e:d9:ad:50:f0:
85:0a:8e:cf:a5:9b:ea:11:47:04:8d:1f:e9:c9:68:
d1:17:38:2f:c6:be:8c:43:2c:9d:13:e9:31:5a:ce:
06:b7:f8:88:7d:a4:98:68:bd:46:58:68:47:ba:af:
32:d1:56:7c:1c:c1:21:90:98:cf:4b:9e:59:b9:41:
c4:07:6a:ab:1c:31:37:7e:1d:40:00:a2:72:2d:fa:
08:c1:33:b9:6a:e0:48:23:1d:bd:d4:ad:cc:cb:53:
37:0d:5a:fc:b7:2c:c0:c4:ee:63:16:1c:b9:a0:1b:
64:c0:db:61:86:13:61:b7:ef:42:c1:4b:8e:d1:74:
1a:c5:21:0c:bc:ab:8c:52:f8:7a:32:6b:a3:8a:f4:
62:be:7c:b6:de:d2:3a:ba:00:b7:87:e7:46:d2:3f:
51:1e:78:ab:74:86:74:1a:f3:f9:9b:5a:2d:9f:42:
ed:f5:57:69:e8:52:70:8f:4a:31:a3:91:b4:93:58:
83:2c:a2:eb:e7:82:23:b9:c5:40:2a:1a:fa:33:b6:
53:de:b0:b6:d4:45:f5:5e:34:18:99:e5:5f:4c:f8:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B4:65:52:2C:AC:4B:F0:A1:77:3F:70:4E:2E:AE:06:C0:2F:A3:26
X509v3 Authority Key Identifier:
keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:71:30:e1:b4:28:23:55:8a:bb:32:93:20:19:20:43:4f:8f:
da:78:5c:4c:e2:3a:b2:0c:da:ec:df:16:07:b0:eb:99:37:2b:
1e:20:7c:82:8f:4f:5f:30:0b:a1:ee:c6:9b:ad:42:58:a2:11:
0c:ca:63:92:83:2e:89:69:b4:63:89:d2:42:7a:e2:52:5d:4a:
a4:07:b0:62:6a:f1:e1:77:aa:e9:cd:3b:c3:21:ae:ab:92:ba:
06:8f:c2:38:fe:2d:a2:6d:75:9c:5f:cd:64:ac:05:ee:6f:33:
36:3b:75:5d:8a:20:46:b4:d5:2f:8c:49:c5:77:5d:9b:40:64:
7a:ec:cb:4b:da:b3:e8:eb:79:4c:b6:c6:e9:9e:ce:71:36:1c:
1e:e2:33:ef:42:49:b4:39:f6:5b:7a:0a:25:29:6c:c7:4e:c4:
8d:d4:33:ef:f9:7a:d8:d1:e3:50:67:7d:9f:a3:2f:1a:37:2a:
a2:54:cc:15:8b:ed:9e:cb:9d:4c:46:f6:85:20:b0:cc:97:00:
9c:c1:8d:77:36:65:98:ea:71:07:cb:8d:b4:68:2e:23:df:43:
88:c5:fa:0e:0c:dc:73:73:99:12:90:cd:32:5b:f1:9b:e0:43:
c3:2d:38:6b:d6:e2:97:4e:8b:dd:b7:bb:3c:6d:62:fd:23:9a:
38:8b:fb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:00 2026 by rpki-client