Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
File: R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft (raw, json)
Hash identifier: AX3wnyQbqm9n3Y8EmYt2iPq/3WWGP6+Kvy1ysZb/ZC8=
Subject key identifier: DE:22:52:E8:34:E3:03:69:CC:83:E2:B3:0B:1B:3C:3A:67:83:83:E3
Authority key identifier: 47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
Certificate issuer: /CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Certificate serial: 019EC224AB0B9904B99A0DAA6656538E23CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
Manifest number: 036E
Signing time: Sat 13 Jun 2026 18:00:43 +0000
Manifest this update: Sat 13 Jun 2026 18:00:43 +0000
Manifest next update: Sun 14 Jun 2026 18:00:43 +0000
Files and hashes: 1: 93ytjsqN3qA9KgHI0d7b-3b-YTs.asa (hash: uCKm1Yr8GoKp1PjICpeP9jA2BKdMiyz2ot1DpGJxT1E=)
2: KLG1QGLsA0Wo21_Y-2-jBpG2vdE.roa (hash: o5WS9YslZM8q1hJsdQvxqXUe/XHXOBVv8w7uYi5QnmY=)
3: R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl (hash: OQb0c0eFeBNkvOWb3RMFL+uh6GNXuHkV8t6rfU5YXC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:ab:0b:99:04:b9:9a:0d:aa:66:56:53:8e:23:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Validity
Not Before: Jun 13 18:00:43 2026 GMT
Not After : Jun 14 18:00:43 2026 GMT
Subject: CN=de2252e834e30369cc83e2b30b1b3c3a678383e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:67:bf:23:42:cf:01:6d:11:6c:4b:02:fa:9f:
7f:75:e1:75:ac:a7:91:cf:5a:61:25:41:7f:52:87:
2a:8f:8a:79:4b:32:bd:91:1e:86:19:d4:23:c6:1d:
40:5b:24:bc:e3:95:7d:20:c5:83:45:f7:24:e1:4b:
ca:80:c3:d0:79:14:92:dc:df:9a:ce:ad:7d:9b:ce:
69:ac:b6:92:f1:f3:09:6b:2a:1e:c9:46:8a:7a:1a:
36:63:43:6e:b9:8e:6d:04:20:bf:76:0d:d8:41:f8:
88:27:13:c5:25:4f:49:db:92:18:44:ed:1c:39:54:
30:47:03:39:70:f3:be:c4:95:b2:41:73:65:ab:bc:
f4:88:a8:58:2c:ca:1a:26:ca:59:54:ed:33:13:44:
0e:25:49:40:47:4e:de:69:69:b7:cb:22:28:26:ea:
f7:49:1f:73:a1:53:33:d9:8e:60:7f:91:be:61:cb:
09:81:8b:e3:4a:fd:51:9a:7f:26:47:a4:9c:ab:24:
0a:a2:23:f2:c3:01:f9:77:46:d5:e0:bc:25:d1:f0:
eb:d1:03:c5:4e:42:85:55:78:11:51:f7:c8:d7:17:
44:51:04:75:82:f7:ce:d0:3b:f4:e0:17:89:98:d6:
05:d9:b6:15:37:bd:9c:6c:f7:62:78:1d:b0:6e:c3:
7a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:22:52:E8:34:E3:03:69:CC:83:E2:B3:0B:1B:3C:3A:67:83:83:E3
X509v3 Authority Key Identifier:
keyid:47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:67:dd:02:42:84:36:d9:09:32:7a:b3:8a:64:30:cb:59:9b:
e7:32:b7:b8:5c:e9:2d:c3:8f:fc:62:94:64:f0:dd:8d:05:27:
c6:d8:f1:a0:43:b0:3a:a6:9f:5a:0d:ef:82:86:da:82:fc:89:
4f:d7:45:28:f5:71:a2:13:b4:2b:9f:eb:15:30:69:13:e3:c0:
df:c3:93:f6:66:da:81:12:95:dd:02:55:01:4f:a2:18:d8:88:
95:c0:83:1f:1e:bd:48:6b:d5:27:32:f8:f3:a7:26:d9:9a:bd:
0f:29:88:0d:18:de:c3:a4:9d:11:2c:ec:8b:76:1b:11:a0:c4:
7b:06:b2:52:7f:26:d6:04:70:94:82:63:40:a8:d0:36:25:aa:
d0:83:90:33:44:b6:2e:6e:d3:cf:e8:28:39:a9:0f:84:83:12:
46:8f:0e:cf:c2:2f:43:f9:6e:40:c0:38:c7:cf:67:20:a2:8d:
5b:fd:f7:ca:d0:d7:b8:80:c2:14:f8:f9:a7:b2:96:ab:b3:2b:
1b:c9:c5:dc:61:28:95:c3:0f:6f:9b:52:c3:fb:de:68:31:a6:
8b:f3:e8:79:3c:12:16:10:e3:80:77:4f:4e:50:fd:ae:91:16:
f4:b4:1f:63:a4:ec:c0:b9:c4:c6:34:52:ff:e7:2a:2e:dd:1f:
10:4f:3d:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CJKsLmQS5mg2qZlZTjiPPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NzMyNDMwODFlYWRjMWVmNGFlMzIzNGY4NmIyYmQ3MjYy
MmI1YzQwHhcNMjYwNjEzMTgwMDQzWhcNMjYwNjE0MTgwMDQzWjAzMTEwLwYDVQQD
EyhkZTIyNTJlODM0ZTMwMzY5Y2M4M2UyYjMwYjFiM2MzYTY3ODM4M2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWe/I0LPAW0RbEsC+p9/deF1rKeR
z1phJUF/Uocqj4p5SzK9kR6GGdQjxh1AWyS845V9IMWDRfck4UvKgMPQeRSS3N+a
zq19m85prLaS8fMJayoeyUaKeho2Y0NuuY5tBCC/dg3YQfiIJxPFJU9J25IYRO0c
OVQwRwM5cPO+xJWyQXNlq7z0iKhYLMoaJspZVO0zE0QOJUlAR07eaWm3yyIoJur3
SR9zoVMz2Y5gf5G+YcsJgYvjSv1Rmn8mR6ScqyQKoiPywwH5d0bV4Lwl0fDr0QPF
TkKFVXgRUffI1xdEUQR1gvfO0Dv04BeJmNYF2bYVN72cbPdieB2wbsN6QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4iUug04wNpzIPiswsbPDpng4PjMB8GA1UdIwQY
MBaAFEdzJDCB6twe9K4yNPhrK9cmIrXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNTQ5ODgtODdlMS00YTlkLWEzM2It
MzRhOTQ5YzkyMDc0LzEvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNTQ5ODgtODdlMS00YTlkLWEzM2ItMzRhOTQ5YzkyMDc0
LzEvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGfdAkKE
NtkJMnqzimQwy1mb5zK3uFzpLcOP/GKUZPDdjQUnxtjxoEOwOqafWg3vgobagvyJ
T9dFKPVxohO0K5/rFTBpE+PA38OT9mbagRKV3QJVAU+iGNiIlcCDHx69SGvVJzL4
86cm2Zq9DymIDRjew6SdESzsi3YbEaDEewayUn8m1gRwlIJjQKjQNiWq0IOQM0S2
Lm7Tz+goOakPhIMSRo8Oz8IvQ/luQMA4x89nIKKNW/33ytDXuIDCFPj5p7KWq7Mr
G8nF3GEolcMPb5tSw/veaDGmi/PoeTwSFhDjgHdPTlD9rpEW9LQfY6TswLnExjRS
/+cqLt0fEE89nQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:11:08 2026 by rpki-client