Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
File: R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft (raw, json)
Hash identifier: R7iD16klcnyIlD6BEcy4lxwlX49EBT24ssLD5DLVO5g=
Subject key identifier: 02:69:F4:F5:C6:10:90:A3:92:CC:76:14:B5:1F:C1:BC:75:BA:55:B6
Authority key identifier: 47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
Certificate issuer: /CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Certificate serial: 01A0C39FD308C857673AB3C09E286484EB16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
Manifest number: 0478
Signing time: Mon 21 Sep 2026 11:00:26 +0000
Manifest this update: Mon 21 Sep 2026 11:00:26 +0000
Manifest next update: Tue 22 Sep 2026 11:00:26 +0000
Files and hashes: 1: 93ytjsqN3qA9KgHI0d7b-3b-YTs.asa (hash: uCKm1Yr8GoKp1PjICpeP9jA2BKdMiyz2ot1DpGJxT1E=)
2: KLG1QGLsA0Wo21_Y-2-jBpG2vdE.roa (hash: o5WS9YslZM8q1hJsdQvxqXUe/XHXOBVv8w7uYi5QnmY=)
3: R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl (hash: EHq0WzCNqBpBOnL7JdDDPSHkaCJxAqyLgZvVULYGYs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:d3:08:c8:57:67:3a:b3:c0:9e:28:64:84:eb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Validity
Not Before: Sep 21 11:00:26 2026 GMT
Not After : Sep 22 11:00:26 2026 GMT
Subject: CN=0269f4f5c61090a392cc7614b51fc1bc75ba55b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:74:9a:f5:ba:c6:3d:7c:ab:da:91:2d:3e:
04:08:51:50:aa:ff:9c:30:36:9f:b2:38:fa:bb:b8:
2a:9b:e1:6f:84:1e:06:01:a5:7d:38:9e:2a:a6:ff:
ca:d7:4f:01:b9:6f:36:c3:2a:ee:1a:5c:33:2e:50:
83:4b:96:dd:07:33:51:8c:3d:9a:29:c0:b5:fc:15:
71:6e:aa:d7:42:07:5e:bd:25:b4:44:01:8c:fc:bd:
74:98:22:05:12:12:00:86:e5:14:67:cf:7e:50:9d:
5c:23:a5:3e:3f:0e:78:fe:5d:78:d1:1d:7f:13:fd:
89:8a:d9:15:8e:7c:54:4a:22:42:f3:92:b6:ca:02:
4c:6f:40:25:30:71:f7:9b:0f:bf:bb:33:0f:89:e1:
07:32:65:95:fc:20:87:7d:a2:a4:87:0c:2b:23:c9:
60:80:12:01:c9:8a:0b:84:63:55:a9:76:6f:aa:ba:
10:f6:a3:67:2c:44:30:66:75:cf:fd:be:73:60:d1:
1c:0e:cc:87:30:5b:0f:e5:63:5e:7e:03:d6:f2:38:
29:d9:13:a9:71:32:20:7a:8e:bd:b3:60:f4:bd:a5:
48:07:b3:05:e7:ae:60:35:9f:d0:d1:3c:0c:18:0e:
23:ea:68:3d:8e:a3:34:35:27:c1:e5:a8:82:d6:8e:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:69:F4:F5:C6:10:90:A3:92:CC:76:14:B5:1F:C1:BC:75:BA:55:B6
X509v3 Authority Key Identifier:
keyid:47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0a:90:18:f1:48:bf:c5:75:27:06:37:fc:e8:8c:c6:c7:fa:
96:25:00:f0:87:9d:fc:f7:ba:e3:f6:26:4b:ea:ae:fb:54:5c:
5c:d5:b0:66:95:1e:86:11:74:21:ab:a5:6a:84:51:15:fb:6f:
9c:a8:5b:e0:de:f3:e4:65:c4:1c:db:5e:c9:96:09:7b:b6:5a:
1f:0e:17:78:19:0b:82:ea:21:96:44:bb:0e:c6:6f:ea:27:17:
e0:1f:8d:70:04:04:03:92:02:14:f5:34:3b:6d:85:04:61:8e:
32:52:7a:3f:5b:a0:4e:75:8c:0e:ce:da:4b:5c:08:aa:44:31:
72:c3:97:55:5d:13:a1:31:38:0c:de:a4:42:be:65:e7:33:5e:
aa:b9:b6:cf:64:31:e0:9a:75:6d:9d:cf:29:96:f8:2c:c9:ef:
8e:19:73:fe:61:69:8f:89:dd:d9:ce:c7:36:db:96:ca:7e:4f:
11:21:b8:3d:67:8c:e5:50:9e:c3:4b:be:20:73:d0:a6:a7:a3:
28:65:0b:29:0a:f7:bc:a8:15:3d:97:6c:60:69:ce:b1:3c:ed:
d1:0d:be:e5:fa:2b:3f:02:7a:69:20:1c:9b:ea:94:70:22:21:
7f:4f:e4:7c:fe:f4:25:93:dd:a8:1b:b6:d1:9e:3a:54:d9:ab:
5e:ee:a8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:19:22 2026 by rpki-client