Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
File: R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft (raw, json)
Hash identifier: u3Wbpig/s/MmXmvnFQbkKUCJ8IplgbOBgEkX4+ibLJc=
Subject key identifier: 0B:46:BD:51:97:A2:49:2E:13:9E:31:31:32:25:78:3A:09:31:A9:4E
Authority key identifier: 47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
Certificate issuer: /CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Certificate serial: 019D24A807E1C97273FE11A6B589738C7A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
Manifest number: 0297
Signing time: Wed 25 Mar 2026 11:01:24 +0000
Manifest this update: Wed 25 Mar 2026 11:01:24 +0000
Manifest next update: Thu 26 Mar 2026 11:01:24 +0000
Files and hashes: 1: KLG1QGLsA0Wo21_Y-2-jBpG2vdE.roa (hash: o5WS9YslZM8q1hJsdQvxqXUe/XHXOBVv8w7uYi5QnmY=)
2: R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl (hash: SnqKLdwqshJPEjf41MHL2BDLw+FhxNEsv8nkatfzVds=)
3: zFkMsU2Ki3kYCr1AL0Xl9I_m70E.asa (hash: GMPe7sTqw+dOkVUiUyhnUSjlJ2HjlS6Jp/u6GDQXZoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:a8:07:e1:c9:72:73:fe:11:a6:b5:89:73:8c:7a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Validity
Not Before: Mar 25 11:01:24 2026 GMT
Not After : Mar 26 11:01:24 2026 GMT
Subject: CN=0b46bd5197a2492e139e31313225783a0931a94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:e3:17:fa:7d:46:47:02:65:ff:6c:fd:03:
f3:71:a6:ab:95:15:d9:ce:22:70:3e:04:11:bf:43:
8d:4a:98:fe:ce:48:f9:7e:00:00:c2:6c:2c:c5:60:
a9:fb:f0:0e:a8:fd:bc:35:bc:0e:70:b5:3f:22:4f:
06:9a:76:21:df:c6:43:d1:c8:be:d6:da:7e:58:11:
62:e3:28:f3:be:61:7e:0a:31:fd:90:f8:63:fd:66:
d0:af:27:74:45:39:c6:d4:94:d1:f3:2e:1d:c2:1d:
eb:81:13:04:c7:ae:b1:fd:fd:6d:9b:a3:82:7c:0c:
ae:53:3e:38:46:62:94:ab:40:76:55:81:78:59:c7:
06:98:0b:93:9e:8c:bc:2a:f3:15:7d:83:55:c5:cf:
a2:00:9a:69:54:34:55:4b:18:a3:91:a0:e0:09:b0:
bc:9e:07:14:77:b2:c4:48:9c:fd:4e:88:ff:d3:b8:
22:b5:5f:a9:5d:d4:9b:33:c7:7b:4a:ce:37:af:24:
46:b3:00:74:ca:a8:4e:1f:6e:49:99:4b:55:f6:43:
57:ae:8b:fb:41:a7:29:8f:ab:87:f1:e7:51:1e:d0:
45:d9:73:61:43:23:51:0d:4e:10:55:ed:6f:c9:d1:
db:66:9f:44:90:59:d5:37:d5:36:48:1f:e1:7e:e1:
be:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:46:BD:51:97:A2:49:2E:13:9E:31:31:32:25:78:3A:09:31:A9:4E
X509v3 Authority Key Identifier:
keyid:47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:62:41:a1:76:6b:47:36:cc:17:18:8b:59:c5:82:2b:4f:3a:
dd:43:cf:54:25:76:00:3f:6c:67:ff:46:71:1f:8e:55:d4:a8:
3c:93:a0:08:ba:83:a6:e1:2b:ae:25:8e:7a:1e:ec:12:f3:3f:
8d:f2:ec:e6:70:56:e4:73:81:e0:92:86:0e:dc:dc:63:97:35:
3d:ec:3d:37:55:33:e4:bd:d3:84:50:8e:42:e5:0e:64:87:dc:
c4:37:95:1e:37:2b:da:32:99:7f:82:bf:67:17:de:f7:3c:ca:
e6:2a:d4:f2:f4:71:ff:de:ca:75:a5:73:d5:a2:c9:8e:fb:d5:
b5:1c:f1:20:e5:a7:ce:e4:6d:30:14:0b:ba:bf:a8:b9:65:12:
48:1f:24:ce:8d:70:ac:fa:80:56:80:92:c1:ca:4c:a5:c7:e0:
d7:f7:96:e4:c8:5a:16:99:47:cb:de:a0:00:8f:45:89:09:a8:
4b:d0:1e:97:ec:24:5c:a0:3f:ae:6f:ed:ab:64:55:c8:d6:b3:
cc:df:81:4a:8f:ad:f0:55:c2:0c:0c:92:78:e6:bc:ab:6f:a1:
c5:79:c6:0f:1e:50:e6:d2:a3:88:6d:48:c6:7c:a8:b4:0f:c1:
ed:a4:d5:e4:8a:46:80:f4:f3:7d:d1:86:41:fb:18:06:a6:b1:
cc:83:5e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:24:37 2026 by rpki-client