Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json)
Hash identifier: RzAuyHBh91ke7M1Q3yiSuyo4WU9vCtEpuZ/eXl+B73E=
Subject key identifier: 45:95:21:EA:94:7B:4D:9E:FE:A9:C3:CA:E1:33:67:6A:55:A3:F9:D2
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial: 019D26CD13FEBA793C96818DCCEB6FC5664F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 21:01:07 +0000
Manifest this update: Wed 25 Mar 2026 21:01:07 +0000
Manifest next update: Thu 26 Mar 2026 21:01:07 +0000
Files and hashes: 1: 0608zt-8orJ6kNX3XPv0kMyOK5Q.roa (hash: W0XCT9jMbiNFbMnkrDbCdpjPNd3+brMKEABetkqN5ic=)
2: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: gk1mW43w3Hzvxg5SFX6oW6wd1oxJyIONgJHwNe10IQw=)
3: AigJOVmk91sugmvhBV28DfHr9uY.roa (hash: FSxnVUPo9yR+90FH9HDs0WUkaZbCnvLTff3dvJ/Kgmc=)
4: FiKj8ScLx1ATx_rGZ7SGgclIc6s.roa (hash: xRch7fJVmZ0aIJvLTTrTe6WF/gV2dip1dza26YmqWck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:13:fe:ba:79:3c:96:81:8d:cc:eb:6f:c5:66:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Validity
Not Before: Mar 25 21:01:07 2026 GMT
Not After : Mar 26 21:01:07 2026 GMT
Subject: CN=459521ea947b4d9efea9c3cae133676a55a3f9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:07:8c:42:13:1e:2c:87:02:91:48:b1:dd:
49:7d:d4:6a:f8:e1:3b:44:a3:b6:47:e6:28:b8:f1:
d4:7a:4c:06:16:b3:30:73:ce:a4:8c:91:93:f2:9c:
7f:ce:01:55:ec:15:9d:c3:1a:8a:f4:f3:8a:10:ec:
92:85:82:72:f1:76:88:14:5e:b5:75:e2:ef:ca:97:
db:c7:11:a7:79:ad:31:cb:cd:04:41:ef:1e:41:fb:
6c:f3:b9:de:15:8c:16:e4:ac:88:a2:61:ae:cb:f0:
7f:b5:85:48:96:17:cd:47:47:6d:4a:eb:d5:36:e0:
5a:64:27:d6:de:91:ab:16:64:8d:20:7d:11:1c:c7:
44:e3:bd:bc:00:06:2c:6d:e6:d6:10:1f:48:76:37:
a7:0a:49:21:88:f7:96:82:25:6d:28:15:cb:f5:7d:
a1:50:82:b5:a4:3a:9a:5e:02:b3:55:1e:49:8f:53:
56:4f:8e:30:ea:a3:83:55:36:13:07:da:ce:e7:c5:
22:b4:32:fc:e6:13:ab:a1:af:50:95:be:fc:1f:f8:
31:9a:18:2a:ce:65:3a:a6:2e:d1:bd:cc:02:c2:4b:
ce:c1:f0:3f:77:4a:38:13:02:52:3a:af:27:13:c1:
9e:24:11:3f:65:5b:ac:f5:4d:6e:9f:30:7d:16:13:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:95:21:EA:94:7B:4D:9E:FE:A9:C3:CA:E1:33:67:6A:55:A3:F9:D2
X509v3 Authority Key Identifier:
keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ed:cd:71:e9:30:fe:31:76:73:98:cb:05:d4:7f:f1:f1:d6:
3e:21:a8:4e:85:12:43:61:13:81:42:ef:67:61:9b:dd:06:72:
c5:1c:1e:5f:e2:dd:fb:2b:21:a8:69:64:c1:15:85:00:83:d4:
54:84:5a:f7:3f:5c:0c:6d:33:61:c4:38:fb:a2:8d:7a:67:81:
3e:9c:37:29:2d:ad:e8:e3:48:85:5e:5a:fc:8b:86:08:ec:85:
8c:03:dd:f5:f1:26:ad:4c:8c:11:e4:bc:94:e9:cb:10:14:ee:
7c:a2:6b:89:30:7c:f7:14:7f:e8:56:da:e5:14:71:25:8e:67:
14:b2:77:dd:07:52:9f:af:32:b5:a8:97:64:97:7f:79:9e:89:
d5:df:a6:ab:e8:ac:99:55:b7:0a:39:55:94:92:c0:d2:45:cc:
02:53:29:9f:51:b3:b3:b6:49:6a:1d:d6:d3:ac:b6:83:4a:31:
2e:31:96:88:53:23:4c:5f:64:45:9c:a8:da:18:ae:4b:82:d0:
74:de:ba:83:64:cd:2a:13:d7:51:47:5c:9c:d8:ac:86:f3:30:
aa:0d:6a:d8:04:82:69:fa:59:88:d8:af:23:a6:a4:60:5b:90:
5c:96:5d:66:09:8f:a6:f5:1f:c6:87:cc:b7:a9:27:9d:0e:d6:
ab:0e:57:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:33 2026 by rpki-client