Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft
File: 50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft (raw, json)
Hash identifier: j2rZ766fOY4tGn6e8SsWVappyy+YNk/FnhuzgT1WiRM=
Subject key identifier: 74:A8:9D:BA:F1:2F:0B:12:E3:0D:07:76:FF:65:4C:18:70:BF:44:5F
Authority key identifier: E7:43:67:87:46:E7:9E:91:A4:76:8C:83:17:38:DF:82:3E:13:E8:C2
Certificate issuer: /CN=e743678746e79e91a4768c831738df823e13e8c2
Certificate serial: 019D390A642D6C87331EE34747F0A3901F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50Nnh0bnnpGkdoyDFzjfgj4T6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft
Manifest number: 1F
Signing time: Sun 29 Mar 2026 10:01:15 +0000
Manifest this update: Sun 29 Mar 2026 10:01:15 +0000
Manifest next update: Mon 30 Mar 2026 10:01:15 +0000
Files and hashes: 1: 50Nnh0bnnpGkdoyDFzjfgj4T6MI.crl (hash: +l3mxgA12q0ZQLr6iylgnDgQYV9aWJchj4S7HYd574U=)
2: 6JazZr7SPXh8slqXB7HbHUov70k.roa (hash: 7XDa+VuKmI+wLywvS5/AlPdQmoE7eWHSvxOhyrEmunI=)
3: aIKtZGQTlVVpSIQ2xB365ii0-Kw.roa (hash: m8BHvkfBcBguPzQ9nNGWSBwFbV1HakSsU6GmXM8bvfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/50Nnh0bnnpGkdoyDFzjfgj4T6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:64:2d:6c:87:33:1e:e3:47:47:f0:a3:90:1f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e743678746e79e91a4768c831738df823e13e8c2
Validity
Not Before: Mar 29 10:01:15 2026 GMT
Not After : Mar 30 10:01:15 2026 GMT
Subject: CN=74a89dbaf12f0b12e30d0776ff654c1870bf445f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:31:4e:a4:a5:12:5d:74:80:71:e5:49:76:bd:
6a:66:01:94:e9:a2:2c:e7:f8:79:7e:a7:f6:54:31:
ee:7e:dc:60:57:4d:f1:16:67:70:b0:03:25:da:89:
34:bc:a7:15:44:be:0f:79:6c:99:40:99:e6:4d:8a:
29:c2:a5:67:6a:12:58:5b:c1:0a:44:fc:03:88:e9:
a6:09:3f:ac:ef:56:c7:b5:7f:e2:03:f5:4f:f3:e8:
12:de:bd:25:0b:ab:e0:b1:cf:41:85:ad:96:f8:96:
35:41:8f:03:75:81:1b:57:4a:a4:12:a6:f7:4b:d0:
c6:8d:f2:58:4a:a2:12:3b:47:0e:85:35:bf:44:0e:
10:52:aa:4b:24:9b:db:87:7b:c9:00:83:f7:31:5f:
c2:f0:e6:7b:35:41:c8:37:d9:64:d8:74:18:7f:89:
c3:0c:94:76:4e:a6:93:1e:47:dc:b9:3c:7d:53:cb:
58:5c:04:3d:37:78:cb:04:0e:a9:47:84:f3:de:a8:
32:80:a3:bb:19:6d:14:ef:63:06:4c:fa:f0:0f:7b:
30:ba:09:76:1f:11:16:7c:0f:c9:96:0d:24:6b:69:
43:71:e7:17:f1:88:cc:f2:bf:25:c9:af:cf:16:a8:
7c:71:32:e8:69:14:f8:20:53:d6:7c:cc:61:44:d7:
8b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A8:9D:BA:F1:2F:0B:12:E3:0D:07:76:FF:65:4C:18:70:BF:44:5F
X509v3 Authority Key Identifier:
keyid:E7:43:67:87:46:E7:9E:91:A4:76:8C:83:17:38:DF:82:3E:13:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50Nnh0bnnpGkdoyDFzjfgj4T6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:44:6f:46:46:52:78:80:f6:4f:b5:e6:79:0f:d5:57:39:c6:
f7:21:c2:26:c4:a8:6d:4d:4d:25:e0:4f:9c:f1:51:50:e6:31:
29:2f:94:6a:10:41:de:01:3c:32:50:2f:36:8b:d7:ff:d8:e8:
b2:7f:8a:87:07:14:31:8c:3a:16:96:14:a1:04:19:da:c0:a5:
7b:f6:f9:d7:92:46:84:0c:51:9f:98:69:36:e0:76:dd:5b:c9:
d5:61:bf:3d:40:e4:43:08:b1:30:49:87:d7:02:49:ed:93:5d:
79:72:d3:db:4f:94:de:49:ac:36:38:42:4e:b5:0d:ac:fd:b6:
05:45:2b:4c:ec:85:48:71:8c:ae:55:64:6c:4c:e3:c4:35:94:
15:37:0a:44:b4:d2:51:d6:19:f8:7e:ac:1c:35:ff:1e:5f:8b:
67:be:a0:6d:40:62:ad:a0:18:6d:bc:4e:99:8d:c1:0c:98:0a:
2f:36:a1:11:10:1f:b1:45:3e:5e:df:c1:62:b3:5d:c3:f2:2e:
78:0e:a4:1d:6a:7a:4e:e9:54:3f:c2:98:f4:3b:8d:86:08:a3:
69:8a:6f:6e:ce:1e:23:c5:84:e9:b0:21:fd:f1:bd:3b:94:d9:
22:76:f3:bc:c1:cd:e9:55:87:60:84:b7:4c:04:f6:5f:41:ea:
4c:3c:60:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:38:55 2026 by rpki-client