Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
File: x50TZko3nYtdrfdj3QT1EV4CMYQ.mft (raw, json)
Hash identifier: fb8cyIUw0MjaMOxRp8pseYsQgcyGRxJjLmba2S3FgNU=
Subject key identifier: 6B:CD:BF:18:0F:5F:75:D1:E2:FB:F5:E0:F1:42:89:7D:BA:4E:9C:A5
Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184
Certificate serial: 01A0103DAAA23ACFCEC051B20CDF31C9A43E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
Manifest number: 042B
Signing time: Mon 17 Aug 2026 15:01:11 +0000
Manifest this update: Mon 17 Aug 2026 15:01:11 +0000
Manifest next update: Tue 18 Aug 2026 15:01:11 +0000
Files and hashes: 1: KC60HOn4qZ_nt5IDt9mXDVYCZxE.roa (hash: Ha9h1XmaEV/kiNbn1BUvIxQ7eeMbw2HvCm3HWf0lUxA=)
2: x50TZko3nYtdrfdj3QT1EV4CMYQ.crl (hash: noeE1MpuxmVpl59ChSudBmkx8F7jN+ttAfnJjMKlooo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:3d:aa:a2:3a:cf:ce:c0:51:b2:0c:df:31:c9:a4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184
Validity
Not Before: Aug 17 15:01:11 2026 GMT
Not After : Aug 18 15:01:11 2026 GMT
Subject: CN=6bcdbf180f5f75d1e2fbf5e0f142897dba4e9ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:ef:bc:41:ca:33:99:63:6b:f7:e1:9c:c1:da:
ec:0b:d7:c7:28:9d:a6:66:4a:f8:3e:8b:46:12:6b:
63:c7:44:71:2f:e9:7d:e0:33:32:c9:73:21:bf:f0:
a5:85:22:6b:78:0d:03:e1:f5:ac:0c:41:65:59:69:
0f:47:d2:e7:e8:16:4c:3a:22:5c:67:01:f1:0c:f7:
30:90:c9:ed:42:cd:f1:ac:42:f3:d4:4a:6c:9e:f1:
13:0d:1f:9f:e6:5e:f5:e4:dc:b4:ae:3b:dd:56:41:
83:61:00:5d:9a:8e:19:8a:da:82:ae:3a:ce:61:dc:
f1:43:e5:ec:45:94:04:a6:11:00:9f:10:22:a4:6f:
ed:dd:a6:51:bc:38:76:c8:e6:72:86:4e:c1:b4:17:
24:c7:ec:5b:85:1e:5c:09:9d:c5:ab:3c:62:dd:ce:
3f:73:30:77:f3:ed:f4:c5:13:9a:0c:58:f8:ca:cf:
83:c0:18:88:fb:a9:a2:e0:7f:99:93:40:d5:f5:6b:
61:ca:1a:0d:77:2c:35:2b:95:d2:aa:3e:6a:43:d5:
0c:8d:14:09:11:07:54:7b:aa:8a:78:e3:59:8b:b0:
18:8e:41:80:3d:2e:9e:11:4c:dd:cc:f0:84:3c:8b:
7b:9a:11:03:2d:8b:2b:2e:33:ae:a3:0b:1a:59:ba:
9d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CD:BF:18:0F:5F:75:D1:E2:FB:F5:E0:F1:42:89:7D:BA:4E:9C:A5
X509v3 Authority Key Identifier:
keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:93:d5:66:a2:17:52:95:39:3f:20:24:60:0d:d8:af:65:98:
df:fb:b9:5f:e5:e6:82:32:b1:4e:b0:1d:ee:e2:f8:db:44:2c:
3a:08:6f:08:d4:92:93:f8:af:43:40:de:cc:9d:67:14:bb:5a:
4d:14:94:ef:03:bb:bf:df:d8:4d:c4:51:c0:88:f2:b7:34:7f:
52:59:ed:be:42:70:74:0e:9f:25:34:78:45:14:42:e5:f8:8e:
60:98:52:4e:c5:b2:c7:92:8d:47:b8:40:a7:50:d4:4f:c7:b0:
fe:9d:39:bc:9e:08:3d:78:71:a3:c2:bd:73:99:d0:64:da:f5:
d1:6b:ad:aa:ec:02:0a:5e:2b:4f:4d:ac:9c:0a:47:06:21:a8:
61:09:ad:70:77:cd:50:07:25:3c:08:1d:eb:6b:55:c1:e9:3d:
cf:73:57:92:fd:ce:2b:05:43:7a:d3:5a:38:3b:2e:c0:dd:21:
6f:33:88:dd:f1:0e:94:49:49:89:b3:7d:b5:4f:87:b5:86:a4:
96:2b:0c:39:7d:20:3a:40:44:4f:a1:ce:7b:9e:55:d2:a4:7f:
78:50:d9:9d:9e:3b:92:ac:a3:1b:0d:52:2c:43:0a:9e:0b:32:
ec:68:b5:e0:fc:e4:73:20:57:9f:bf:44:fe:82:ba:f7:1b:11:
82:49:04:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 21:17:28 2026 by rpki-client