Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json)
Hash identifier: 8fBX3GcnxV5yz1W1kysiWfWHfjEXRZITGA7ZoU/4jUw=
Subject key identifier: 49:56:3B:CD:78:BE:61:19:FB:DB:56:C4:43:23:61:FD:C5:D2:D0:BA
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial: 019F90C7DB8BCE4530D440D3F86756B2B6C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 21:00:44 +0000
Manifest this update: Thu 23 Jul 2026 21:00:44 +0000
Manifest next update: Fri 24 Jul 2026 21:00:44 +0000
Files and hashes: 1: 0608zt-8orJ6kNX3XPv0kMyOK5Q.roa (hash: W0XCT9jMbiNFbMnkrDbCdpjPNd3+brMKEABetkqN5ic=)
2: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: NzvgTt7lNA/2ZIFriZLdEoHNqyQ0ekMBbOlVS7zzU6Q=)
3: AigJOVmk91sugmvhBV28DfHr9uY.roa (hash: FSxnVUPo9yR+90FH9HDs0WUkaZbCnvLTff3dvJ/Kgmc=)
4: FiKj8ScLx1ATx_rGZ7SGgclIc6s.roa (hash: xRch7fJVmZ0aIJvLTTrTe6WF/gV2dip1dza26YmqWck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:db:8b:ce:45:30:d4:40:d3:f8:67:56:b2:b6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Validity
Not Before: Jul 23 21:00:44 2026 GMT
Not After : Jul 24 21:00:44 2026 GMT
Subject: CN=49563bcd78be6119fbdb56c4432361fdc5d2d0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:69:60:3e:15:9e:e2:81:72:68:d0:4d:ea:fc:
7e:29:bd:eb:e2:aa:c9:90:1f:78:7b:5c:5b:f7:6b:
43:44:e8:aa:9b:59:18:52:82:36:d8:52:30:d0:c8:
5c:dc:a6:1a:7f:84:6f:c9:9c:50:7d:aa:11:9d:47:
b3:f3:4d:45:c7:87:b2:16:5c:ad:1f:d0:8c:dc:d0:
ce:ea:66:5e:eb:f6:27:a4:3a:f2:9f:61:84:ae:4e:
f8:8e:0f:be:21:f5:bc:c1:79:a3:e0:57:c4:a1:b6:
54:0e:46:df:d5:c4:df:c1:f2:e9:3c:6e:be:f9:d4:
82:fd:6f:7a:be:c2:4d:f8:0e:5f:f6:92:b5:3d:05:
9d:ec:68:ab:c0:1e:6d:73:49:fc:e6:4f:ac:3b:bf:
dd:1b:58:79:d8:14:a2:c7:e4:f7:9f:39:10:2c:49:
ae:7c:b0:fc:28:e0:63:4e:d3:df:da:50:4b:66:d1:
bb:54:b7:bd:8e:0c:b4:e0:42:fb:b4:1a:11:6d:23:
4b:48:44:ee:3e:03:f1:d8:46:d2:4b:f8:94:32:8c:
da:ea:1e:53:00:4d:42:5a:a7:c1:a1:bb:14:06:f3:
a5:ad:a7:44:84:07:b0:ef:e4:49:23:67:d9:d8:fd:
9b:49:bf:62:50:d2:25:f8:aa:01:6d:51:91:26:6d:
07:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:56:3B:CD:78:BE:61:19:FB:DB:56:C4:43:23:61:FD:C5:D2:D0:BA
X509v3 Authority Key Identifier:
keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:45:d7:77:9c:09:60:dc:9b:d6:b4:60:90:64:d4:38:b5:9a:
fc:a3:94:9f:6f:07:b7:7e:cf:70:2e:cf:eb:a0:80:99:b5:fd:
9c:e9:e0:6a:78:d6:8e:53:8d:cb:d1:71:3e:aa:a4:df:be:5e:
c6:5d:47:50:f0:8e:d6:9f:d9:50:02:64:38:b5:92:61:50:bd:
86:a2:6b:a1:c1:26:77:fc:f5:61:5a:02:74:c0:60:db:91:ab:
df:79:37:bc:ba:96:72:b5:39:5e:10:ce:d2:a8:74:fa:a4:57:
cb:b6:d1:3a:4b:f0:dd:1e:14:26:d8:1d:51:3e:06:0c:7b:53:
ae:e1:2b:e9:ef:81:0d:c0:c3:41:4c:bd:3f:bf:a6:ea:de:1f:
0e:3a:c4:6e:1d:32:1f:38:d2:e1:75:13:05:15:1e:d6:9b:67:
68:85:88:3c:5e:ff:77:23:6d:35:37:2a:02:95:77:a8:78:ce:
d7:4f:c1:c3:63:e5:3a:69:92:fd:af:c5:54:f6:13:3d:fd:15:
7c:9d:91:96:28:40:c8:7c:6f:35:0f:68:cb:01:4a:e6:13:ef:
03:a9:23:bd:67:8d:dd:92:17:96:fd:23:94:74:ed:1b:ea:78:
ef:31:3b:a4:83:72:b0:44:74:70:93:e9:90:6f:16:3c:c7:bb:
8e:55:25:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:51 2026 by rpki-client