Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft
File: 50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft (raw, json)
Hash identifier: mHhItgjYf5v+pUpBFYVpmBGzY7MdFlN7rbQlpCza4V8=
Subject key identifier: 40:E4:CA:99:60:9C:F1:B2:0E:49:72:99:03:3C:54:95:2A:56:EC:35
Authority key identifier: E7:43:67:87:46:E7:9E:91:A4:76:8C:83:17:38:DF:82:3E:13:E8:C2
Certificate issuer: /CN=e743678746e79e91a4768c831738df823e13e8c2
Certificate serial: 01A183E329ECD33F155BBCF564206938B420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50Nnh0bnnpGkdoyDFzjfgj4T6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft
Manifest number: 0258
Signing time: Wed 28 Oct 2026 19:01:04 +0000
Manifest this update: Wed 28 Oct 2026 19:01:04 +0000
Manifest next update: Thu 29 Oct 2026 19:01:04 +0000
Files and hashes: 1: 50Nnh0bnnpGkdoyDFzjfgj4T6MI.crl (hash: K69RWPVIRSd5mD+9XZPAJNxTDEU9JHbmpDoJy6jyG6E=)
2: 6JazZr7SPXh8slqXB7HbHUov70k.roa (hash: 7XDa+VuKmI+wLywvS5/AlPdQmoE7eWHSvxOhyrEmunI=)
3: aIKtZGQTlVVpSIQ2xB365ii0-Kw.roa (hash: m8BHvkfBcBguPzQ9nNGWSBwFbV1HakSsU6GmXM8bvfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/50Nnh0bnnpGkdoyDFzjfgj4T6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:e3:29:ec:d3:3f:15:5b:bc:f5:64:20:69:38:b4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e743678746e79e91a4768c831738df823e13e8c2
Validity
Not Before: Oct 28 19:01:04 2026 GMT
Not After : Oct 29 19:01:04 2026 GMT
Subject: CN=40e4ca99609cf1b20e497299033c54952a56ec35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:23:06:c3:db:73:ae:c6:35:9c:17:23:71:
d4:ff:e3:23:13:35:f2:d7:3c:1f:c4:a0:59:35:f9:
a9:26:b3:6d:27:6e:f7:90:6e:4a:e3:a7:72:cc:ce:
e5:2f:dc:8c:37:eb:a3:17:8d:95:e2:49:df:62:3a:
3e:6f:18:7d:07:69:1d:16:e6:4f:b2:71:24:5b:6b:
31:72:27:92:fa:37:24:b3:59:9e:a2:f2:a6:87:e3:
c5:ca:2d:e5:06:32:a0:00:a1:a0:b5:a5:b7:21:dd:
f9:66:3b:ae:98:16:74:09:38:64:ec:28:8d:d4:69:
fb:6e:46:57:e3:eb:c9:9e:85:c8:17:a2:c1:5d:00:
72:90:48:e9:a4:ff:34:3c:76:b8:20:c6:3d:77:c4:
1d:6d:91:10:19:43:12:1c:a4:22:2e:29:ac:21:1f:
82:0d:1f:59:d1:34:41:27:a1:ad:ae:c9:46:25:7d:
a9:99:bc:a1:c4:6a:a3:1e:9a:32:45:75:52:0e:57:
28:0e:32:35:de:ca:8c:36:c3:3c:b7:15:eb:a4:0a:
1f:2e:d8:72:47:fe:50:92:36:4e:27:e6:fe:f4:ed:
5b:f2:0b:d1:6f:b0:12:65:5c:23:16:34:6e:c5:ea:
f6:86:3f:7f:94:6e:bc:52:de:41:0b:d4:3f:62:5b:
87:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E4:CA:99:60:9C:F1:B2:0E:49:72:99:03:3C:54:95:2A:56:EC:35
X509v3 Authority Key Identifier:
keyid:E7:43:67:87:46:E7:9E:91:A4:76:8C:83:17:38:DF:82:3E:13:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50Nnh0bnnpGkdoyDFzjfgj4T6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:12:5b:59:69:05:a0:03:bb:a1:27:1a:65:78:7a:40:37:d3:
62:52:3e:18:b0:aa:6e:85:ff:d4:b2:5b:83:b5:ea:8c:f4:17:
08:14:fa:8f:5f:08:8d:c2:99:c8:bc:25:cc:30:3f:89:79:76:
3e:7a:09:6d:55:c1:c4:49:73:d8:dd:30:84:eb:85:fb:a6:db:
56:3d:60:b9:61:3d:07:d3:e0:6a:16:3e:2d:fc:57:a8:14:da:
34:7f:b9:1c:b1:94:64:8f:f8:ee:a4:ba:26:41:00:3c:3d:64:
df:9c:59:f1:13:88:37:ae:d0:ac:ff:63:bc:fd:07:55:20:09:
f5:71:5d:d6:8c:4f:6f:c8:96:1c:27:0c:67:fb:21:dd:1a:fc:
54:79:c2:cf:c4:e9:c1:c6:f1:b4:84:18:1a:42:ce:52:60:bd:
b4:3f:86:66:6b:d3:6c:72:8e:2f:b4:81:6a:06:22:44:0a:15:
40:59:fd:df:33:d3:74:dd:96:8e:47:9c:23:d7:79:91:54:19:
5f:c8:b2:6d:0e:3d:81:12:15:e9:0d:60:24:09:40:25:3a:4c:
0c:57:d9:d6:7f:b4:b0:97:25:40:06:ea:5d:f6:4a:db:96:5d:
de:d4:c4:4c:71:f7:74:b2:0c:1e:81:15:d8:0e:72:2c:6f:6f:
8b:23:b7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:44:26 2026 by rpki-client