Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
File: R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft (raw, json)
Hash identifier: YNeeixuRV6Um5TMXEUoIqxWv/dhwn8/2dqHQNPN2tP0=
Subject key identifier: 55:C9:8C:24:B7:BE:00:8E:B8:C7:56:F3:41:1B:A6:8E:95:B4:6E:FB
Authority key identifier: 47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
Certificate issuer: /CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Certificate serial: 019CED81D15C4909AF2A7F379A83559C6317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
Manifest number: 027A
Signing time: Sat 14 Mar 2026 18:00:33 +0000
Manifest this update: Sat 14 Mar 2026 18:00:33 +0000
Manifest next update: Sun 15 Mar 2026 18:00:33 +0000
Files and hashes: 1: KLG1QGLsA0Wo21_Y-2-jBpG2vdE.roa (hash: o5WS9YslZM8q1hJsdQvxqXUe/XHXOBVv8w7uYi5QnmY=)
2: R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl (hash: 3pkBYknknX8EInFZP6TkTLdgfDlyCePthixAaRUQrio=)
3: rjl8q1May9ngAKB0tf1EIzvVDHs.asa (hash: ncCuZ+NTDFllzogWT+L6gN+UpS9ksu5cpO/4f9HFWfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:81:d1:5c:49:09:af:2a:7f:37:9a:83:55:9c:63:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Validity
Not Before: Mar 14 18:00:33 2026 GMT
Not After : Mar 15 18:00:33 2026 GMT
Subject: CN=55c98c24b7be008eb8c756f3411ba68e95b46efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3e:33:aa:6f:6e:d7:27:b9:03:ee:37:83:44:
3d:1e:7f:ea:93:12:22:58:40:bf:44:d4:ce:c8:ed:
51:dd:51:90:d3:4a:e4:8a:b0:e8:73:73:69:08:81:
39:7d:5d:0d:c1:ae:48:6a:59:8c:1c:ea:0f:fa:88:
c2:e0:49:b9:a6:72:2b:91:e4:04:1a:ff:0d:ac:0a:
03:48:80:f5:f5:b2:73:77:ca:be:e5:22:ee:a7:2f:
cc:d6:5a:26:d2:b9:c4:28:2f:cd:9c:2f:b6:b2:32:
a8:ba:0b:b1:97:e3:80:93:39:c7:f4:0b:8c:ed:f9:
bb:55:2d:fa:a4:a8:6f:a7:d5:51:b2:5b:38:d0:21:
63:29:14:1e:53:01:32:dd:5b:87:e6:62:ac:45:a0:
dc:3d:c5:d1:b8:63:88:12:e1:13:2c:c9:97:7c:91:
35:c6:48:c6:dd:54:66:b4:5a:bf:e0:91:49:1d:ab:
2a:c9:ff:04:89:56:cf:7a:30:eb:d1:17:d3:b6:00:
aa:f6:59:c0:96:44:2e:a0:fa:46:f1:68:21:ea:d8:
c6:a9:d0:23:ab:cc:3c:6e:a3:e1:23:5b:49:3b:d7:
4c:60:50:19:1b:de:a1:f9:4f:41:5f:85:59:22:61:
07:5d:2b:cb:22:3a:d9:91:1f:99:80:ee:65:5b:62:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C9:8C:24:B7:BE:00:8E:B8:C7:56:F3:41:1B:A6:8E:95:B4:6E:FB
X509v3 Authority Key Identifier:
keyid:47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3b:49:64:3f:08:ab:0f:19:a7:d3:a3:7d:23:97:25:36:6e:
d1:dd:4e:3b:d1:cb:fb:7e:8b:40:41:74:ad:87:41:b7:25:ce:
b4:67:eb:a9:8e:ea:89:e2:a7:27:a4:ef:54:9e:f3:87:dd:1a:
26:ec:89:1d:84:c1:52:0f:e1:96:d8:91:59:b6:b2:e6:06:8a:
0f:65:94:4f:9a:c0:47:49:f3:ac:03:48:2a:f6:f2:c0:9e:8d:
4c:10:c6:a4:f0:df:f7:11:8d:dc:ac:0c:92:46:de:78:6a:35:
9d:a3:cc:50:09:66:98:b3:83:8c:e1:56:e1:c4:71:90:01:81:
9d:ae:5a:5d:17:5b:91:1b:11:54:fa:e5:f5:f7:a0:b4:7a:0e:
ec:81:52:99:69:4e:ef:6c:35:c7:f1:fb:b4:19:6d:42:d1:46:
c9:88:2f:48:26:1c:9e:2e:16:c8:c9:bb:1e:fe:ec:0e:f0:ea:
57:03:67:1f:76:4c:36:32:96:b7:b0:66:21:18:c6:b3:b4:41:
5a:d6:ba:cc:69:34:76:af:27:16:14:68:5d:43:04:cd:cf:4a:
7e:48:6c:74:6a:f1:30:5b:2c:9a:15:2a:4b:36:2e:8e:6b:ea:
d1:71:eb:cd:85:05:0f:2f:db:d1:af:38:b6:1d:f9:21:5c:c2:
68:1e:5d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 22:48:58 2026 by rpki-client