Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
File: R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft (raw, json)
Hash identifier: 5kLU450FR02dvAwIvz8zXQagg39BvX8SR73I/WK2SNY=
Subject key identifier: FA:36:BF:80:8F:91:BC:F0:2E:33:98:DA:63:E0:28:44:09:6B:5F:A8
Authority key identifier: 47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
Certificate issuer: /CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Certificate serial: 019F11526A3FCC213BE39D7CFF39001F413D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
Manifest number: 0397
Signing time: Mon 29 Jun 2026 03:00:41 +0000
Manifest this update: Mon 29 Jun 2026 03:00:41 +0000
Manifest next update: Tue 30 Jun 2026 03:00:41 +0000
Files and hashes: 1: 93ytjsqN3qA9KgHI0d7b-3b-YTs.asa (hash: uCKm1Yr8GoKp1PjICpeP9jA2BKdMiyz2ot1DpGJxT1E=)
2: KLG1QGLsA0Wo21_Y-2-jBpG2vdE.roa (hash: o5WS9YslZM8q1hJsdQvxqXUe/XHXOBVv8w7uYi5QnmY=)
3: R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl (hash: 2vRXWfJRyvSfuj8wXOYiep9fYxWw66Iz4sGgt1v856Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:6a:3f:cc:21:3b:e3:9d:7c:ff:39:00:1f:41:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Validity
Not Before: Jun 29 03:00:41 2026 GMT
Not After : Jun 30 03:00:41 2026 GMT
Subject: CN=fa36bf808f91bcf02e3398da63e02844096b5fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:22:12:d9:a8:fb:50:7b:32:2f:9b:a1:aa:07:
bb:90:be:4c:e3:b9:03:69:06:ac:96:22:f5:c0:ad:
9e:0b:31:56:1b:34:2c:ce:23:9f:f9:04:8c:a5:b3:
3a:cc:7e:95:f6:5f:89:75:53:bc:bd:1b:0a:f5:7c:
81:01:01:2a:10:40:79:b9:d3:d3:40:80:2c:09:c1:
58:9c:c4:b1:d9:03:14:54:90:af:c4:2a:a0:0a:91:
30:20:86:c6:d1:f8:0b:c6:f4:00:34:4a:3e:e3:9f:
98:ec:f0:75:58:67:a3:7f:49:ee:eb:fb:d4:b8:1b:
56:45:97:79:31:94:2a:21:b1:6c:36:87:98:39:b3:
64:8a:29:d1:78:37:c6:f4:de:33:83:5f:90:b0:46:
aa:b9:ce:27:11:7d:5a:73:2b:0a:80:a7:3e:df:86:
b5:83:18:75:8e:18:4e:d1:38:41:47:fa:ab:e8:8e:
d9:ac:31:1c:44:6f:96:af:4e:54:1f:bf:d0:9b:81:
d5:c8:48:5a:19:09:10:1d:e4:c5:30:cc:75:e1:7c:
ab:03:8b:db:59:54:7c:b4:67:0b:ff:31:45:8c:75:
13:03:89:2b:92:50:f1:14:45:be:2e:ed:f1:45:fa:
93:b5:aa:8a:6e:71:53:a6:e1:bc:d6:3a:07:f8:b5:
fa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:36:BF:80:8F:91:BC:F0:2E:33:98:DA:63:E0:28:44:09:6B:5F:A8
X509v3 Authority Key Identifier:
keyid:47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:32:f5:ee:84:98:52:cf:bf:c5:3b:85:5c:0a:4d:22:3d:68:
89:bc:87:19:69:1b:22:28:06:46:bc:7d:1a:73:63:5a:6c:50:
86:1f:85:ae:33:c9:e5:5f:82:b0:9f:b5:05:85:77:a9:ea:ef:
b2:91:02:7f:b5:3f:19:73:d9:f5:4a:ca:3e:fd:3b:db:7a:70:
07:0d:c4:29:3f:99:43:8e:c0:77:81:8b:1c:50:42:2e:37:df:
71:1b:58:ef:c4:42:52:cb:26:c9:c5:2d:1d:4f:38:e5:f9:d5:
f9:a8:d3:43:b7:f2:a3:41:78:ac:b3:b4:5b:9c:f5:7f:ea:a5:
a8:5d:2a:42:6f:a7:c9:a5:a0:44:b7:c8:8b:cb:89:95:15:68:
5c:65:ce:27:63:fa:5e:84:43:c9:e6:2a:a9:f6:2b:dd:a9:de:
3e:30:d7:80:a9:e7:56:4c:07:1e:6b:4a:dc:38:4d:0b:31:c8:
34:03:88:93:7f:8b:ac:37:44:62:ac:cf:90:37:8b:70:20:64:
7c:82:40:ec:65:75:4b:95:ac:5e:0e:42:bd:7a:0f:24:ff:cc:
72:9e:e9:2b:0b:3a:59:a4:b8:d9:4a:5c:af:36:b5:18:a0:5a:
73:19:74:e5:7a:5e:fc:c2:dd:3c:43:38:35:c3:43:2b:f0:f5:
4c:e4:75:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:03 2026 by rpki-client