Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
File: R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft (raw, json)
Hash identifier: bz3kwVsB3lrxfsDbgNaUYgeZsvkRJMUg6ZgsZpAGowc=
Subject key identifier: A4:64:23:01:93:DD:04:9D:9D:2B:3B:89:59:EE:7D:97:9E:C8:CF:BB
Authority key identifier: 47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
Certificate issuer: /CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Certificate serial: 019CF34CF66E0536AE1D3B9B0005A9FE3436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
Manifest number: 027D
Signing time: Sun 15 Mar 2026 21:00:33 +0000
Manifest this update: Sun 15 Mar 2026 21:00:33 +0000
Manifest next update: Mon 16 Mar 2026 21:00:33 +0000
Files and hashes: 1: KLG1QGLsA0Wo21_Y-2-jBpG2vdE.roa (hash: o5WS9YslZM8q1hJsdQvxqXUe/XHXOBVv8w7uYi5QnmY=)
2: R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl (hash: CY99nPPr2ZvmQp1VbeEAuqSirDVirVmdlM6irCQpgbE=)
3: rjl8q1May9ngAKB0tf1EIzvVDHs.asa (hash: ncCuZ+NTDFllzogWT+L6gN+UpS9ksu5cpO/4f9HFWfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:4c:f6:6e:05:36:ae:1d:3b:9b:00:05:a9:fe:34:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Validity
Not Before: Mar 15 21:00:33 2026 GMT
Not After : Mar 16 21:00:33 2026 GMT
Subject: CN=a464230193dd049d9d2b3b8959ee7d979ec8cfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:21:17:df:e5:30:98:df:3b:fe:cf:e8:69:6c:
4e:9e:72:7e:65:15:50:00:ea:6b:c9:86:85:4d:05:
98:20:14:2a:27:eb:61:61:94:1e:e8:c6:1f:f7:04:
35:51:70:9f:0c:19:45:08:fa:e7:0f:d7:90:42:aa:
d4:88:9e:e4:02:e2:de:99:46:ae:55:b1:66:05:ce:
65:29:26:7f:7b:18:35:6f:68:2f:2b:ae:94:6e:93:
d0:b4:06:06:af:0d:01:18:0f:01:66:09:c5:03:21:
ab:44:94:36:77:90:60:41:33:c8:18:36:03:19:02:
2f:d4:cb:00:c1:cb:a0:25:a8:dc:52:b0:d3:ab:59:
e2:63:fc:ef:83:77:af:fc:b0:00:eb:29:1c:e3:49:
7f:45:ba:b1:33:da:dc:c6:48:43:ce:17:c2:c9:0c:
2d:1f:26:25:64:55:20:a5:5e:fe:f0:28:df:41:cd:
f3:a5:1c:13:f7:4e:32:82:61:7e:84:95:0e:1d:49:
6f:d7:ec:18:d9:30:70:2b:4b:e3:9f:9c:d9:4b:49:
32:0e:fb:cc:57:4d:15:2b:4a:53:79:8b:6e:6e:98:
ce:3f:b1:ad:c5:b3:1b:95:b9:f4:f4:e3:5f:cb:ca:
04:7d:90:c2:68:cb:e6:89:8f:ce:f7:7d:0a:e0:e1:
32:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:64:23:01:93:DD:04:9D:9D:2B:3B:89:59:EE:7D:97:9E:C8:CF:BB
X509v3 Authority Key Identifier:
keyid:47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cb:32:b7:f8:4e:58:45:91:0b:cc:3c:03:f4:07:2a:fe:3f:
36:a7:d9:79:d9:71:7d:50:70:5c:dd:f7:31:4c:95:35:bc:a6:
0c:a5:8c:8b:f6:b9:9c:9a:eb:36:ea:eb:ee:c5:df:69:65:37:
ed:bb:a6:a9:21:24:c1:e5:c6:ad:55:9e:14:d2:bd:97:7c:c4:
8d:d8:7c:a9:a9:f6:ac:55:89:02:33:03:17:0a:91:29:98:50:
af:c0:0f:54:9e:84:32:22:76:d1:dd:d8:1f:b5:a3:94:8b:fb:
3c:ea:fd:b7:c0:21:ff:2d:a4:3c:28:ea:46:92:32:d9:5f:1b:
3f:24:e0:f9:df:d3:1e:2a:49:4e:5b:91:82:5f:b3:ba:ee:58:
8c:a8:20:87:00:ee:22:6b:a1:a9:58:96:55:3d:fc:b5:03:40:
39:81:b7:56:62:d3:26:eb:62:bc:dd:5e:9c:00:b8:5b:8e:9e:
c8:8b:ee:98:37:c1:02:ca:67:85:59:1e:1e:0a:07:18:3e:12:
11:83:5e:03:9f:f1:64:4b:f6:06:b9:9e:d9:53:2f:7a:39:70:
04:db:91:7a:d5:ce:3b:ab:6e:b5:9a:c3:31:7b:2f:0e:ee:26:
47:c5:05:d8:94:ee:2a:f6:96:cf:2b:26:79:51:4e:37:71:ba:
cc:7b:ea:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:00:37 2026 by rpki-client