Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
File: x50TZko3nYtdrfdj3QT1EV4CMYQ.mft (raw, json)
Hash identifier: boQq//SzUW0vYlOeLZJsScpkfkHOgEaKScAMTM72SKs=
Subject key identifier: CA:34:44:B3:C1:16:33:60:90:9A:B9:AC:65:AC:E6:94:2D:DB:14:13
Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184
Certificate serial: 019F288002C9ABB197540670FAE56C4F35D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
Manifest number: 03B3
Signing time: Fri 03 Jul 2026 15:01:45 +0000
Manifest this update: Fri 03 Jul 2026 15:01:45 +0000
Manifest next update: Sat 04 Jul 2026 15:01:45 +0000
Files and hashes: 1: KC60HOn4qZ_nt5IDt9mXDVYCZxE.roa (hash: Ha9h1XmaEV/kiNbn1BUvIxQ7eeMbw2HvCm3HWf0lUxA=)
2: x50TZko3nYtdrfdj3QT1EV4CMYQ.crl (hash: zCuO3x/x7n1mBCl/FOGGNUc3OP2f8V22c+qktgj1/vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:80:02:c9:ab:b1:97:54:06:70:fa:e5:6c:4f:35:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184
Validity
Not Before: Jul 3 15:01:45 2026 GMT
Not After : Jul 4 15:01:45 2026 GMT
Subject: CN=ca3444b3c1163360909ab9ac65ace6942ddb1413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cf:29:1e:97:95:4f:3e:d3:f2:ba:5c:92:2b:
57:d2:6a:df:47:01:02:e9:b8:c4:90:7f:d2:82:41:
8c:4b:d7:68:9c:c3:1d:b0:ce:93:4c:9a:64:1a:46:
50:b7:96:57:3d:0c:6a:54:7d:94:dd:31:76:ef:f2:
70:19:f0:1b:94:99:b5:8c:8c:da:68:81:f1:04:3a:
f1:45:2d:60:3e:39:fc:28:fd:cc:2e:c7:e3:08:86:
a8:50:72:51:a3:1a:21:d1:57:11:6f:1f:26:4e:70:
34:0f:16:1d:7a:2f:f3:80:53:65:17:45:8a:77:8e:
ca:e8:d3:21:b5:33:09:39:0c:30:d1:c2:63:33:bd:
8a:b7:33:e7:9c:40:85:76:5e:00:12:3b:b2:97:1d:
70:fd:f8:59:e4:20:e3:d4:ae:4e:5a:60:71:e0:37:
87:a1:e4:57:1f:fe:fd:6f:ce:80:9d:92:53:b7:da:
19:30:9c:2e:4f:5c:42:ab:eb:c0:c4:17:44:11:2f:
0e:ae:d8:b3:26:31:8b:ab:2e:b8:a9:be:1b:cf:02:
fd:84:87:35:ef:13:dd:31:30:1b:a6:50:ce:76:b5:
3c:16:95:10:30:55:5d:4a:ff:4f:ca:75:fd:da:10:
bf:43:5d:97:df:a5:d0:86:98:9e:dc:8f:c5:a2:5b:
1a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:34:44:B3:C1:16:33:60:90:9A:B9:AC:65:AC:E6:94:2D:DB:14:13
X509v3 Authority Key Identifier:
keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d5:ca:a3:6a:29:93:ad:85:73:f0:69:b1:59:46:b6:b7:24:
ff:d4:f6:08:7c:91:29:70:3c:be:fa:e8:bd:aa:8d:c9:ba:8d:
84:4f:c8:47:38:08:94:70:4b:27:9c:99:ef:fc:72:31:97:03:
ce:8f:c1:18:d4:a7:3e:d2:84:56:9a:87:c7:a9:4a:bd:e1:b6:
78:05:0e:11:b3:9f:69:6f:ca:2a:cc:79:20:87:49:7f:53:42:
92:b6:c0:23:34:58:8b:e2:ae:cb:1d:1c:04:4c:37:67:87:dd:
98:9d:83:83:d5:37:ca:95:de:89:ae:1a:98:ed:83:bb:c5:72:
8b:4b:de:e0:17:ef:d3:87:f4:23:21:b3:42:9a:93:38:df:6f:
04:0e:c2:21:ca:6f:6c:9b:d3:6a:67:4f:d5:89:4c:ef:54:5d:
f9:20:2b:67:b9:71:37:41:09:28:2c:2f:82:66:9e:97:a4:27:
04:6e:32:9c:d2:83:36:72:54:6d:45:3d:c3:83:e3:61:36:c5:
33:fe:5d:16:b3:68:e7:f0:66:1d:5b:3c:9a:e7:ba:13:7a:7b:
de:5f:ce:01:c3:3d:a2:c4:1b:5c:0f:55:39:f1:85:31:6e:8a:
7d:4d:97:87:89:5f:2b:45:c8:fd:4f:04:72:b6:ed:ff:3b:f4:
ef:2a:a8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 17:52:44 2026 by rpki-client