Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
File: x50TZko3nYtdrfdj3QT1EV4CMYQ.mft (raw, json)
Hash identifier: /0z9O0VpT8ulR6s73xKsKmA2si38oWVFo8jD9x2v2Wg=
Subject key identifier: 71:53:12:D1:0E:BC:9F:61:99:06:31:C7:1A:92:B3:21:66:99:CD:79
Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184
Certificate serial: 019D2C980301FDAD1543332F7703A33A7C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
Manifest number: 02AC
Signing time: Fri 27 Mar 2026 00:00:52 +0000
Manifest this update: Fri 27 Mar 2026 00:00:52 +0000
Manifest next update: Sat 28 Mar 2026 00:00:52 +0000
Files and hashes: 1: KC60HOn4qZ_nt5IDt9mXDVYCZxE.roa (hash: Ha9h1XmaEV/kiNbn1BUvIxQ7eeMbw2HvCm3HWf0lUxA=)
2: x50TZko3nYtdrfdj3QT1EV4CMYQ.crl (hash: PyPVkmTJG16d7hoe3uYOVURHZf3MfCEDprlKg9Gl3Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:98:03:01:fd:ad:15:43:33:2f:77:03:a3:3a:7c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184
Validity
Not Before: Mar 27 00:00:52 2026 GMT
Not After : Mar 28 00:00:52 2026 GMT
Subject: CN=715312d10ebc9f61990631c71a92b3216699cd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:fe:46:24:06:27:82:e0:7f:80:09:9c:3d:
63:42:c0:b3:0b:90:a8:97:9a:4f:cc:57:12:f8:08:
96:88:b6:71:f2:65:e4:87:d1:43:9d:43:d8:8d:8d:
1b:5c:8b:a0:98:1a:6e:54:7d:f2:75:11:0d:15:9b:
6b:fd:7d:e8:97:e1:0d:19:ab:2b:da:9e:f5:3c:b3:
3b:e9:a7:94:9a:4f:37:86:fc:33:81:25:b2:43:00:
59:f4:bb:2b:71:01:6f:f3:c2:3f:7b:9e:c4:7f:da:
50:61:e0:30:50:f8:68:c5:c5:5e:ec:ae:37:be:b3:
d8:dd:57:02:23:c4:aa:84:00:f7:b3:e3:3e:35:fc:
59:fa:ae:6e:4d:0f:5d:95:14:f0:a6:ae:a0:12:9a:
c8:e3:6e:c1:c1:a5:f0:a5:e6:08:a0:e6:8c:73:10:
d8:d0:fb:ab:dc:10:a6:1f:75:d3:9b:da:e5:db:61:
ff:57:d7:4b:8a:74:ee:30:4d:9d:51:25:45:05:a5:
9e:b9:61:aa:01:0d:ac:73:63:fc:8c:a2:fd:13:a4:
21:4f:70:ce:9e:2e:18:d1:38:91:f3:dd:f4:f3:74:
0a:b8:68:f8:53:29:f0:d7:31:a2:7d:51:f7:18:04:
65:03:00:84:4e:6a:e3:08:c1:ba:f2:06:ad:11:3a:
da:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:53:12:D1:0E:BC:9F:61:99:06:31:C7:1A:92:B3:21:66:99:CD:79
X509v3 Authority Key Identifier:
keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ea:52:eb:d6:54:78:ac:05:64:83:5c:3e:4c:97:32:d4:95:
3b:16:f1:5f:b5:0e:f1:39:6f:8d:83:70:f4:15:69:b4:09:8f:
42:9d:04:7a:20:2c:80:44:09:25:c8:17:f4:1f:23:35:ae:62:
ba:49:8e:69:3e:42:cc:87:ed:8c:3d:2a:7a:0d:ae:0e:34:15:
03:88:05:44:69:3c:94:90:6d:e1:6c:ed:eb:77:1e:13:11:88:
c8:6a:d5:e5:06:e0:32:f8:0d:52:df:5a:d9:d2:ae:e3:dd:bd:
99:83:37:98:39:fb:36:f1:28:d7:cd:48:31:74:67:1a:3b:6f:
7b:c7:24:a6:28:b3:bb:f5:d7:fb:a8:98:8b:e2:6b:08:a4:5c:
ee:21:a3:9c:a7:a3:54:ce:d6:41:f7:03:ba:d0:81:ca:45:69:
9d:99:3b:28:11:1c:37:17:ec:69:a3:15:4f:95:94:cd:98:52:
50:58:62:02:f4:bb:d1:26:30:01:30:a4:be:22:43:e3:2b:f3:
89:76:ba:60:85:29:6a:ed:0d:0c:d1:0e:a8:bb:bd:af:27:fe:
c3:ec:43:be:42:e8:9e:c8:3a:c6:5f:71:df:ce:86:c4:34:5f:
0e:23:a2:24:e9:59:47:d6:c8:76:a5:08:36:e5:73:fb:76:af:
22:3f:ae:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0smAMB/a0VQzMvdwOjOnxkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3OWQxMzY2NGEzNzlkOGI1ZGFkZjc2M2RkMDRmNTExNWUw
MjMxODQwHhcNMjYwMzI3MDAwMDUyWhcNMjYwMzI4MDAwMDUyWjAzMTEwLwYDVQQD
Eyg3MTUzMTJkMTBlYmM5ZjYxOTkwNjMxYzcxYTkyYjMyMTY2OTljZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY3+RiQGJ4Lgf4AJnD1jQsCzC5Co
l5pPzFcS+AiWiLZx8mXkh9FDnUPYjY0bXIugmBpuVH3ydRENFZtr/X3ol+ENGasr
2p71PLM76aeUmk83hvwzgSWyQwBZ9LsrcQFv88I/e57Ef9pQYeAwUPhoxcVe7K43
vrPY3VcCI8SqhAD3s+M+NfxZ+q5uTQ9dlRTwpq6gEprI427BwaXwpeYIoOaMcxDY
0Pur3BCmH3XTm9rl22H/V9dLinTuME2dUSVFBaWeuWGqAQ2sc2P8jKL9E6QhT3DO
ni4Y0TiR893083QKuGj4Uynw1zGifVH3GARlAwCETmrjCMG68gatETraIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFTEtEOvJ9hmQYxxxqSsyFmmc15MB8GA1UdIwQY
MBaAFMedE2ZKN52LXa33Y90E9RFeAjGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDUwVFprbzNuWXRkcmZkajNRVDFFVjRDTVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9lYzZiMjktMzYyMS00MDI0LTg2Mjgt
Mjg4NDI1MjljN2ExLzEveDUwVFprbzNuWXRkcmZkajNRVDFFVjRDTVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9lYzZiMjktMzYyMS00MDI0LTg2MjgtMjg4NDI1MjljN2Ex
LzEveDUwVFprbzNuWXRkcmZkajNRVDFFVjRDTVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOpS69ZU
eKwFZINcPkyXMtSVOxbxX7UO8TlvjYNw9BVptAmPQp0EeiAsgEQJJcgX9B8jNa5i
ukmOaT5CzIftjD0qeg2uDjQVA4gFRGk8lJBt4Wzt63ceExGIyGrV5QbgMvgNUt9a
2dKu4929mYM3mDn7NvEo181IMXRnGjtve8ckpiizu/XX+6iYi+JrCKRc7iGjnKej
VM7WQfcDutCBykVpnZk7KBEcNxfsaaMVT5WUzZhSUFhiAvS70SYwATCkviJD4yvz
iXa6YIUpau0NDNEOqLu9ryf+w+xDvkLonsg6xl9x386GxDRfDiOiJOlZR9bIdqUI
NuVz+3avIj+upg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 10:18:43 2026 by rpki-client