Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
File: R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft (raw, json)
Hash identifier: 1bQPuZ7q4zoZh+GqT+nfjkuMwwn7bdNAUrOou10EgoY=
Subject key identifier: C5:16:0C:B2:02:24:A2:BA:0C:B8:EB:2C:6D:F8:A1:B4:EB:2F:97:E0
Authority key identifier: 47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
Certificate issuer: /CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Certificate serial: 019DE3D7F4C28F6866B1D74B27D9AE25C90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
Manifest number: 02FA
Signing time: Fri 01 May 2026 14:01:13 +0000
Manifest this update: Fri 01 May 2026 14:01:13 +0000
Manifest next update: Sat 02 May 2026 14:01:13 +0000
Files and hashes: 1: KLG1QGLsA0Wo21_Y-2-jBpG2vdE.roa (hash: o5WS9YslZM8q1hJsdQvxqXUe/XHXOBVv8w7uYi5QnmY=)
2: R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl (hash: ektX7O1uNjJJcYkmHvwJBqUPrX31KUOVHYuax5Ql1II=)
3: zFkMsU2Ki3kYCr1AL0Xl9I_m70E.asa (hash: GMPe7sTqw+dOkVUiUyhnUSjlJ2HjlS6Jp/u6GDQXZoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e3:d7:f4:c2:8f:68:66:b1:d7:4b:27:d9:ae:25:c9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Validity
Not Before: May 1 14:01:13 2026 GMT
Not After : May 2 14:01:13 2026 GMT
Subject: CN=c5160cb20224a2ba0cb8eb2c6df8a1b4eb2f97e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:91:22:90:72:38:2b:9d:77:11:48:41:18:d8:
36:b2:c3:69:a9:b9:82:0a:43:b8:16:ad:54:b5:52:
b7:16:33:00:1e:5f:f9:bd:2f:c9:e6:04:d9:d3:5b:
29:d2:43:93:5f:7b:da:c6:cb:77:df:6f:2b:cb:0a:
a3:b5:6d:09:4b:1c:e0:9b:92:10:73:83:7e:b0:ac:
20:0a:73:0e:d9:c1:27:2e:e5:a3:ac:92:79:1a:14:
41:b6:6e:8d:d0:b5:6c:4d:89:7d:c7:cc:d6:f0:c4:
fd:c5:49:3f:f6:72:54:4d:d2:06:77:ac:13:c6:90:
c9:a4:60:68:95:d0:f6:d4:9e:e0:90:6a:5b:65:04:
e1:be:2c:b2:73:18:6b:db:b3:ef:79:fc:38:76:05:
d8:4c:35:52:f5:80:42:30:f0:b8:d3:f0:6d:4f:28:
72:da:70:56:b8:34:6d:8c:27:e5:f4:27:9b:8c:1b:
78:73:92:e8:59:28:fc:cb:0d:b3:f2:f5:26:10:0f:
cd:b6:65:d2:b2:50:4b:27:d2:fc:44:c5:71:3f:db:
b4:3f:ed:b2:13:98:6c:a4:64:e8:59:06:79:07:16:
2e:68:45:ef:3c:94:bf:9d:2a:4a:1b:7f:44:f2:ec:
11:3d:6d:83:bf:89:1a:ad:8b:62:79:ea:b0:06:7f:
fb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:16:0C:B2:02:24:A2:BA:0C:B8:EB:2C:6D:F8:A1:B4:EB:2F:97:E0
X509v3 Authority Key Identifier:
keyid:47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:67:40:7e:d7:b0:f7:01:cf:62:a1:a0:94:15:b4:c5:ba:96:
42:46:d7:6b:77:3d:9a:bc:69:40:15:05:83:71:51:9c:2a:63:
93:87:75:cb:94:d2:32:6c:d7:9c:a5:8c:f9:3d:3f:c5:32:81:
f1:d2:c3:ea:77:44:b3:6f:df:85:0e:03:89:99:10:e4:51:be:
73:4c:f2:7d:15:ee:19:b8:be:d9:cb:f9:4d:9d:d7:28:6c:0b:
53:86:90:f4:f7:ce:f3:bd:20:5c:39:cd:32:07:8d:1b:28:94:
6f:4e:ca:78:17:80:d0:4f:97:bf:02:c9:5d:d9:3d:ca:77:76:
9f:50:e8:16:f2:7d:45:c6:f2:b8:c9:1e:36:3e:32:90:fb:78:
7d:d7:09:f6:e2:cb:9e:1f:81:e4:04:38:ba:72:c1:c3:70:f8:
3a:fd:00:e5:9e:00:8a:b1:4e:d2:8d:9c:7a:bb:36:4f:0e:6d:
94:a2:9b:44:41:c8:0e:8a:2e:57:a4:ce:f9:7c:fe:8a:8e:3f:
22:0f:7e:59:ac:33:a9:f4:cf:97:d5:9c:32:b7:94:79:9e:c3:
3d:9d:d8:d3:92:20:96:d1:45:a3:1c:90:d8:e0:68:38:f8:0b:
ff:67:66:fb:dd:4a:10:26:f3:db:a0:64:e4:8d:f9:2a:71:9d:
d1:ba:aa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 18:13:25 2026 by rpki-client