Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
File: R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft (raw, json)
Hash identifier: 9I1FAkQodOkSU+WtGQBcZDNHeVdMFQq485dCh/ok5jY=
Subject key identifier: 9B:8E:25:D4:34:E0:4B:A2:1E:0E:FA:EF:74:F5:1C:9D:C7:70:8C:C2
Authority key identifier: 47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
Certificate issuer: /CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Certificate serial: 01A03894641E0A00AD1CCB1A05B2A6AB9E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
Manifest number: 0430
Signing time: Tue 25 Aug 2026 11:00:43 +0000
Manifest this update: Tue 25 Aug 2026 11:00:43 +0000
Manifest next update: Wed 26 Aug 2026 11:00:43 +0000
Files and hashes: 1: 93ytjsqN3qA9KgHI0d7b-3b-YTs.asa (hash: uCKm1Yr8GoKp1PjICpeP9jA2BKdMiyz2ot1DpGJxT1E=)
2: KLG1QGLsA0Wo21_Y-2-jBpG2vdE.roa (hash: o5WS9YslZM8q1hJsdQvxqXUe/XHXOBVv8w7uYi5QnmY=)
3: R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl (hash: AEQdpJqSk6RbV6toEzpjvupG/C5PDWbVlZ35wYvchz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:94:64:1e:0a:00:ad:1c:cb:1a:05:b2:a6:ab:9e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Validity
Not Before: Aug 25 11:00:43 2026 GMT
Not After : Aug 26 11:00:43 2026 GMT
Subject: CN=9b8e25d434e04ba21e0efaef74f51c9dc7708cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e6:83:d0:fc:8f:bf:53:ee:51:07:b0:29:43:
0c:56:18:38:c3:72:c6:62:de:2b:7f:ad:0e:15:8f:
17:ee:b6:57:a5:e4:0b:6d:f5:9d:ad:56:f7:fd:a6:
5e:11:59:0f:d8:15:f8:45:12:b0:f9:55:2c:16:2c:
7f:40:b7:e5:31:0e:7f:df:46:17:bb:50:84:f4:66:
cd:c9:17:72:dd:3f:9a:b2:cd:16:48:78:46:64:07:
d7:2a:45:10:51:1c:97:77:ee:ae:74:64:06:51:cc:
8e:ba:82:d1:fb:53:b4:54:be:f6:4c:cc:15:a2:dd:
b9:f0:ce:c7:ae:db:44:63:e1:81:28:8e:bd:d5:10:
8f:05:69:c7:de:0e:73:6a:93:46:81:72:19:d8:90:
4c:91:af:c4:ab:93:3f:b7:0d:64:42:f8:35:f7:3a:
2d:60:8b:f2:05:27:3c:a3:46:63:da:4f:f8:db:6e:
8d:8a:cb:0a:09:45:66:ae:78:09:69:0b:4a:c4:30:
da:27:03:ba:69:d4:0e:32:d1:cc:8c:76:33:bc:cb:
82:f9:92:2d:2c:9e:bc:5b:d8:84:37:0f:99:9c:dc:
05:02:6c:0c:9e:d8:44:c6:4c:e9:8f:e0:1d:79:bb:
60:6b:f7:19:88:66:6b:33:e6:1a:00:35:72:39:4c:
57:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8E:25:D4:34:E0:4B:A2:1E:0E:FA:EF:74:F5:1C:9D:C7:70:8C:C2
X509v3 Authority Key Identifier:
keyid:47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:19:fd:da:9f:03:73:fe:f5:6a:46:0d:92:9e:e4:22:b4:43:
9f:1d:a8:b1:2e:4b:0a:5c:85:f2:55:ea:9a:30:35:c5:82:2c:
12:54:49:a6:87:2b:cb:a7:71:11:52:68:d3:27:f2:f2:4c:63:
d6:9c:71:89:de:1f:1f:0e:38:74:79:72:88:1a:6d:c4:8f:4e:
ba:18:fd:27:a4:cb:f0:bd:7e:1e:e7:3a:33:5b:74:f7:3d:9e:
86:ff:c5:a0:65:db:dc:89:0a:df:fd:5c:c5:4b:f5:7d:b0:1e:
6d:f1:ec:29:d8:84:03:f4:5c:2f:da:c9:3c:d5:5b:d9:6c:a6:
f0:37:de:6d:be:cf:af:c3:8a:b0:33:0e:cf:df:84:8f:d0:8c:
3e:ac:7a:89:f5:9b:18:da:8f:ba:97:8e:0c:b2:71:c6:58:a5:
b0:3c:2c:97:63:66:80:2c:85:24:73:a5:b1:2e:8a:cd:c5:6b:
65:d6:97:0c:3e:f2:f1:f2:8f:0c:b6:c8:97:94:79:01:5d:ba:
47:2c:0e:e0:3e:e6:7b:66:cf:88:3e:b8:ae:7d:83:d6:7c:f2:
b9:52:75:e6:a4:82:4a:19:a8:98:20:54:58:25:66:1a:c4:17:
43:42:17:b6:ba:b8:f4:02:36:86:81:ce:e6:bd:c8:6c:c0:6f:
27:5d:55:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA4lGQeCgCtHMsaBbKmq54UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NzMyNDMwODFlYWRjMWVmNGFlMzIzNGY4NmIyYmQ3MjYy
MmI1YzQwHhcNMjYwODI1MTEwMDQzWhcNMjYwODI2MTEwMDQzWjAzMTEwLwYDVQQD
Eyg5YjhlMjVkNDM0ZTA0YmEyMWUwZWZhZWY3NGY1MWM5ZGM3NzA4Y2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uaD0PyPv1PuUQewKUMMVhg4w3LG
Yt4rf60OFY8X7rZXpeQLbfWdrVb3/aZeEVkP2BX4RRKw+VUsFix/QLflMQ5/30YX
u1CE9GbNyRdy3T+ass0WSHhGZAfXKkUQURyXd+6udGQGUcyOuoLR+1O0VL72TMwV
ot258M7HrttEY+GBKI691RCPBWnH3g5zapNGgXIZ2JBMka/Eq5M/tw1kQvg19zot
YIvyBSc8o0Zj2k/4226NissKCUVmrngJaQtKxDDaJwO6adQOMtHMjHYzvMuC+ZIt
LJ68W9iENw+ZnNwFAmwMnthExkzpj+Adebtga/cZiGZrM+YaADVyOUxXIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuOJdQ04EuiHg7673T1HJ3HcIzCMB8GA1UdIwQY
MBaAFEdzJDCB6twe9K4yNPhrK9cmIrXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNTQ5ODgtODdlMS00YTlkLWEzM2It
MzRhOTQ5YzkyMDc0LzEvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNTQ5ODgtODdlMS00YTlkLWEzM2ItMzRhOTQ5YzkyMDc0
LzEvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRn92p8D
c/71akYNkp7kIrRDnx2osS5LClyF8lXqmjA1xYIsElRJpocry6dxEVJo0yfy8kxj
1pxxid4fHw44dHlyiBptxI9Ouhj9J6TL8L1+Huc6M1t09z2ehv/FoGXb3IkK3/1c
xUv1fbAebfHsKdiEA/RcL9rJPNVb2Wym8Dfebb7Pr8OKsDMOz9+Ej9CMPqx6ifWb
GNqPupeODLJxxlilsDwsl2NmgCyFJHOlsS6KzcVrZdaXDD7y8fKPDLbIl5R5AV26
RywO4D7me2bPiD64rn2D1nzyuVJ15qSCShmomCBUWCVmGsQXQ0IXtrq49AI2hoHO
5r3IbMBvJ11V0Q==
-----END CERTIFICATE-----
Generated at Tue Aug 25 17:46:33 2026 by rpki-client