Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
File: x50TZko3nYtdrfdj3QT1EV4CMYQ.mft (raw, json)
Hash identifier: o36O937DXCFTEC3sT/PLP+eFFbMjj6zBS/G3wR8e9dM=
Subject key identifier: 2A:BE:DB:29:80:FD:16:F1:9A:60:FD:A6:D0:B7:02:1C:6A:8E:5C:C6
Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184
Certificate serial: 019D2E861C7863DE2099C5EBE52A959A2E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
Manifest number: 02AD
Signing time: Fri 27 Mar 2026 09:00:34 +0000
Manifest this update: Fri 27 Mar 2026 09:00:34 +0000
Manifest next update: Sat 28 Mar 2026 09:00:34 +0000
Files and hashes: 1: KC60HOn4qZ_nt5IDt9mXDVYCZxE.roa (hash: Ha9h1XmaEV/kiNbn1BUvIxQ7eeMbw2HvCm3HWf0lUxA=)
2: x50TZko3nYtdrfdj3QT1EV4CMYQ.crl (hash: yAImCPMUusskvE1OXWykFhg/4p3s+N/njb18cJzznVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:86:1c:78:63:de:20:99:c5:eb:e5:2a:95:9a:2e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184
Validity
Not Before: Mar 27 09:00:34 2026 GMT
Not After : Mar 28 09:00:34 2026 GMT
Subject: CN=2abedb2980fd16f19a60fda6d0b7021c6a8e5cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d4:36:46:56:6a:eb:ec:63:66:c4:46:0c:d7:
e3:ea:fb:8e:1c:b3:7a:32:e6:70:17:ad:f7:4d:57:
34:e1:ad:00:b7:91:2f:ca:30:1d:c4:44:fe:20:13:
89:b7:fb:92:93:af:0a:cc:0d:8c:1f:92:6b:0d:cb:
56:92:cb:cd:e6:5a:ae:0a:38:56:9e:3d:79:6c:bc:
eb:e0:70:97:ff:30:8e:6c:c2:77:53:13:e5:76:44:
f0:d7:27:df:00:2b:7d:42:70:49:b5:a9:0c:ef:57:
d6:a2:e4:c5:f4:db:f4:69:eb:0c:e0:28:4e:af:6d:
92:be:a6:98:59:58:a1:15:ed:8d:07:4e:cc:6f:97:
02:d0:40:16:aa:64:d3:3a:e1:1a:b0:2e:31:86:a4:
da:62:4d:52:a2:a0:60:52:ce:e4:d4:d0:88:6e:eb:
0f:96:ec:5e:88:14:70:79:7c:7d:5d:b0:9d:1a:6a:
81:a7:96:7e:0d:a9:30:ec:b1:0b:16:d6:f7:b6:a7:
76:f5:94:a2:ae:c8:ec:16:98:74:e9:73:73:d9:f0:
29:8e:ec:23:50:38:82:23:e3:af:1d:4d:c2:eb:64:
3e:86:36:28:7f:d7:ce:5e:be:a4:a3:58:e1:cf:ed:
ad:87:ac:7e:38:d5:b6:7e:5d:1c:89:3a:e8:ed:06:
e0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BE:DB:29:80:FD:16:F1:9A:60:FD:A6:D0:B7:02:1C:6A:8E:5C:C6
X509v3 Authority Key Identifier:
keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:4b:37:1b:28:da:61:7f:ef:19:6f:6e:93:cd:8a:ba:4d:3a:
31:9b:b3:1f:e1:6b:ba:b9:b2:cf:bc:46:6a:26:06:f0:01:96:
10:e1:15:a0:ce:c6:c0:3c:6f:10:cd:28:62:48:9d:cc:6d:21:
aa:aa:1b:c8:4d:b0:de:15:b9:7e:ff:eb:fe:b2:9c:73:39:ad:
e7:dd:a5:7c:f5:56:6d:fd:06:7d:da:87:8a:35:d5:00:97:3d:
51:ff:40:f9:6e:8e:49:9b:39:b6:55:40:0d:4c:c0:da:fb:11:
c9:1a:1f:94:7e:5b:94:5b:b8:3e:34:60:d4:0d:88:05:35:5f:
3a:a5:1f:ed:8b:5b:2d:db:56:f8:86:1d:13:35:67:8f:87:6e:
68:7e:55:c4:8b:41:4c:8e:99:8b:bc:8e:07:17:b4:74:fb:85:
13:33:16:67:21:73:56:35:1d:d0:92:d3:d6:d7:f8:2e:e6:b5:
95:d5:0b:3d:d9:a2:45:c5:4e:71:72:71:f2:fb:95:6b:31:77:
93:b6:dc:ed:be:34:c5:5d:84:7f:32:65:45:a3:c4:bf:3b:d4:
aa:d5:f9:1e:d1:3c:44:b6:e1:e9:55:65:31:de:95:5e:a1:6f:
0d:8c:e6:10:38:23:da:ca:b3:8b:0c:0b:f6:0b:15:e8:4c:09:
89:a3:c0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 11:30:56 2026 by rpki-client