Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json)
Hash identifier: gsxIGS8i5mVEYDFs9XW34BK7BDWzuy4+72+b6ErxoTs=
Subject key identifier: F7:03:DE:55:8B:6C:28:02:DC:D0:58:90:93:3C:76:FD:51:74:1A:40
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial: 019E1C1059A3BCDF17A9B267D3A5AC4B1115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 12:01:34 +0000
Manifest this update: Tue 12 May 2026 12:01:34 +0000
Manifest next update: Wed 13 May 2026 12:01:34 +0000
Files and hashes: 1: 0608zt-8orJ6kNX3XPv0kMyOK5Q.roa (hash: W0XCT9jMbiNFbMnkrDbCdpjPNd3+brMKEABetkqN5ic=)
2: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: tEggxowuwL9W/YWojhAeN5u1MTI53Pb1TmB4JIqvjAk=)
3: AigJOVmk91sugmvhBV28DfHr9uY.roa (hash: FSxnVUPo9yR+90FH9HDs0WUkaZbCnvLTff3dvJ/Kgmc=)
4: FiKj8ScLx1ATx_rGZ7SGgclIc6s.roa (hash: xRch7fJVmZ0aIJvLTTrTe6WF/gV2dip1dza26YmqWck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:59:a3:bc:df:17:a9:b2:67:d3:a5:ac:4b:11:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Validity
Not Before: May 12 12:01:34 2026 GMT
Not After : May 13 12:01:34 2026 GMT
Subject: CN=f703de558b6c2802dcd05890933c76fd51741a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:86:80:d0:df:ff:5d:3e:31:29:85:3f:1c:5d:
a9:42:1a:41:16:3f:97:b9:ac:73:ba:13:1a:16:2a:
b2:cd:00:5b:7a:c4:c9:16:f7:5b:70:a2:fd:52:08:
0a:d2:e7:00:a7:3c:18:a6:ff:ab:29:77:8e:48:89:
36:ee:54:da:ee:c4:b6:01:eb:63:73:4a:5d:ff:41:
36:8d:20:a2:c4:ba:85:d5:33:35:3b:af:7c:ea:ee:
ec:4a:b9:a2:5f:82:7f:3f:61:3a:3b:7e:ce:c6:fe:
44:cc:74:ca:3c:5a:3e:d3:a4:15:f5:68:25:3a:81:
ee:1b:13:35:b1:b8:f7:50:cb:75:96:2b:52:1e:69:
cc:1c:cd:2d:1e:e4:03:9c:81:f8:dd:62:31:e7:19:
6b:12:46:40:b2:7d:ec:7c:c1:79:db:9d:0d:38:b1:
63:5e:a8:a5:d5:58:14:28:db:5e:c4:b8:49:3e:c8:
6a:8f:46:db:7a:49:99:d6:b0:be:8b:41:f8:f4:da:
4c:3d:21:14:12:cd:a3:96:79:e7:93:f7:e2:52:f0:
24:6d:6f:d7:79:4b:6c:ed:44:5c:bc:b1:52:2c:88:
45:ba:0e:9d:dc:2f:70:03:02:57:b5:98:8e:18:95:
56:71:74:5a:1b:32:71:3b:65:b3:d3:e7:6d:f6:84:
aa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:03:DE:55:8B:6C:28:02:DC:D0:58:90:93:3C:76:FD:51:74:1A:40
X509v3 Authority Key Identifier:
keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:14:4c:e5:5e:18:c6:93:14:e0:c1:23:cc:82:9e:91:07:3b:
e3:4a:84:3b:1e:c3:1f:4b:93:da:35:cc:fc:55:e5:40:61:31:
ca:f8:51:dc:9f:12:ee:d2:66:84:57:e5:86:81:17:01:ca:8b:
ab:01:c0:0c:6c:f7:11:bb:dc:76:23:42:41:e2:b5:5d:96:e9:
bc:e3:c6:42:90:c0:c0:49:f1:9f:fa:40:01:7e:c6:b4:10:59:
52:9c:29:81:80:eb:1b:f0:79:1f:7f:88:af:4a:92:35:9f:80:
6e:24:00:60:65:5b:4a:76:03:0b:ef:6e:8b:8b:e4:ae:9f:7a:
0b:71:b2:36:ca:21:26:8a:8a:a6:10:6d:78:5f:57:b3:4f:bb:
5b:be:6b:17:4b:a8:5d:16:43:a2:11:a4:d8:c1:cd:b6:c9:ae:
8b:c9:e7:e0:f5:29:6b:ff:6d:f4:01:4e:87:60:8d:54:ad:cc:
a3:7b:b2:2e:1e:77:38:e4:07:e2:91:a3:ff:48:92:82:02:d4:
37:b5:2a:04:b1:c5:6d:36:f8:52:11:87:b4:86:dc:6d:ba:3e:
ca:02:26:8d:29:0e:83:0d:7c:67:6e:b4:a4:e2:3e:5b:0b:cf:
bb:dc:c6:07:85:81:37:b5:ef:1f:37:57:c3:27:22:13:1c:da:
b8:60:15:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:23 2026 by rpki-client