Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
File: R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft (raw, json)
Hash identifier: 41ApACzhDZnOVWO1j5D9wK2dTonNvBgMm/ZqoOglt3E=
Subject key identifier: 97:83:E2:C9:67:7F:B3:52:1D:AF:50:82:EE:69:53:19:08:95:6C:BD
Authority key identifier: 47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
Certificate issuer: /CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Certificate serial: 019F927F111BF76BBA9F6F5A20F702785089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
Manifest number: 03DA
Signing time: Fri 24 Jul 2026 05:00:28 +0000
Manifest this update: Fri 24 Jul 2026 05:00:28 +0000
Manifest next update: Sat 25 Jul 2026 05:00:28 +0000
Files and hashes: 1: 93ytjsqN3qA9KgHI0d7b-3b-YTs.asa (hash: uCKm1Yr8GoKp1PjICpeP9jA2BKdMiyz2ot1DpGJxT1E=)
2: KLG1QGLsA0Wo21_Y-2-jBpG2vdE.roa (hash: o5WS9YslZM8q1hJsdQvxqXUe/XHXOBVv8w7uYi5QnmY=)
3: R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl (hash: +ySuF+1YYbbJ9KNeyz9PR0gpdcmzIqzf7naMXpvDOz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:11:1b:f7:6b:ba:9f:6f:5a:20:f7:02:78:50:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Validity
Not Before: Jul 24 05:00:28 2026 GMT
Not After : Jul 25 05:00:28 2026 GMT
Subject: CN=9783e2c9677fb3521daf5082ee69531908956cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a9:e2:1c:08:9c:63:8d:a2:ad:53:6c:49:4e:
2c:99:5d:9b:38:4c:4b:c7:74:ba:f3:df:e1:6a:47:
92:2c:db:66:6d:06:84:1f:07:bb:70:00:25:d0:82:
4f:d0:a5:f1:92:c8:7f:36:f0:63:84:c4:d5:8c:fa:
3a:ee:46:f3:08:2a:6a:97:9c:d9:99:69:f8:a1:77:
a8:2f:16:3f:2f:65:47:bd:f4:5f:f1:57:61:47:da:
93:1d:ba:4e:07:ff:82:7f:e5:7d:11:57:10:10:f2:
49:18:83:db:5a:de:eb:ea:7d:e3:a5:27:51:c8:bd:
f1:f5:25:6f:50:3d:6c:84:3f:01:27:a2:3f:3b:1b:
b2:8d:bd:27:81:9d:ce:af:dc:50:b8:3f:a1:06:9d:
c8:89:0d:ee:1f:3e:9b:b8:21:56:b0:fe:d6:c4:33:
95:1a:39:66:fe:e5:75:8a:5a:9c:a0:d7:e5:81:fa:
74:5d:53:3b:fd:fa:1c:c2:24:24:e5:4f:42:8f:c8:
09:06:87:44:4c:18:91:cc:d9:1d:4a:04:88:96:7f:
29:69:0f:2d:de:87:3f:91:31:47:aa:35:94:c0:ee:
48:67:96:b0:95:2a:e4:64:df:29:ed:a1:e1:59:89:
f7:f2:31:57:71:f9:f1:db:e6:d0:2d:d7:75:6f:d1:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:83:E2:C9:67:7F:B3:52:1D:AF:50:82:EE:69:53:19:08:95:6C:BD
X509v3 Authority Key Identifier:
keyid:47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fe:84:10:37:f8:a7:82:97:5a:c2:66:0d:c5:53:78:88:26:
4a:ff:77:ed:e9:81:c9:04:76:da:76:17:20:57:af:7c:6a:b8:
f0:e1:8f:8b:e7:e9:1b:4f:7f:43:1a:ca:d7:de:2b:ec:f9:f3:
f2:a7:2c:17:dc:d8:98:99:50:8b:de:ef:f2:57:fd:b5:2c:5c:
88:a5:98:75:3f:3b:30:42:77:8b:58:f2:09:c1:88:f3:96:98:
ec:c1:34:de:5b:3b:bd:e5:d7:d0:05:c4:b9:c5:9e:ad:fd:c6:
2c:28:e5:65:a7:a1:db:b4:a1:d5:97:34:b2:3e:32:d9:47:37:
b5:ef:d5:ad:8a:c7:41:65:67:f2:a2:24:43:f9:32:85:bd:c7:
85:6c:89:5f:0f:3d:8b:c7:52:6d:5f:8b:b0:35:eb:36:f9:0b:
cf:44:52:bd:73:02:b6:70:a6:bb:c5:0c:1d:2a:19:53:1c:8d:
8e:16:37:5f:b5:bf:06:4f:6c:24:86:88:fd:3d:cb:09:73:09:
0c:8b:52:14:75:84:66:a4:f1:44:fc:fa:27:c1:c6:3a:31:86:
aa:b9:e5:07:ef:13:1a:15:af:05:a9:de:c4:e5:09:6b:4a:3f:
7f:fa:33:58:2f:30:4b:a0:4f:fb:dd:65:61:af:60:f3:3f:dd:
8b:3c:16:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:01:05 2026 by rpki-client