Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json)
Hash identifier: z/2D4s4iWWVII/dQLTkfRns5t2FMPRDKUvB6Uec4x80=
Subject key identifier: 98:8D:D0:CF:73:D9:4C:0A:2C:39:48:F9:17:FA:5F:85:69:F1:EE:90
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial: 01A0CF6D60A4EFBBFB4594AF31B6BAB174D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 18:00:46 +0000
Manifest this update: Wed 23 Sep 2026 18:00:46 +0000
Manifest next update: Thu 24 Sep 2026 18:00:46 +0000
Files and hashes: 1: 0608zt-8orJ6kNX3XPv0kMyOK5Q.roa (hash: W0XCT9jMbiNFbMnkrDbCdpjPNd3+brMKEABetkqN5ic=)
2: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: 123voAv3qz6JVznJfJpvPi87HsEPChbuAoadQVFCdNU=)
3: AigJOVmk91sugmvhBV28DfHr9uY.roa (hash: FSxnVUPo9yR+90FH9HDs0WUkaZbCnvLTff3dvJ/Kgmc=)
4: FiKj8ScLx1ATx_rGZ7SGgclIc6s.roa (hash: xRch7fJVmZ0aIJvLTTrTe6WF/gV2dip1dza26YmqWck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:60:a4:ef:bb:fb:45:94:af:31:b6:ba:b1:74:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Validity
Not Before: Sep 23 18:00:46 2026 GMT
Not After : Sep 24 18:00:46 2026 GMT
Subject: CN=988dd0cf73d94c0a2c3948f917fa5f8569f1ee90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ff:57:88:a3:d0:14:ac:59:cc:d8:34:71:a5:
3d:62:e7:fe:b2:c1:05:ce:1f:0d:21:82:bd:c4:04:
8e:f7:aa:b5:67:77:fb:bf:36:eb:72:a6:1b:9f:34:
58:29:20:82:97:d8:1a:26:d2:bf:2d:cf:83:85:5c:
06:b4:f7:fa:a0:6b:91:30:9a:0b:93:3e:0b:71:98:
7c:77:a3:b9:05:d5:97:eb:28:9d:ed:19:e8:c1:af:
49:c2:35:03:fb:1c:64:b9:6f:ab:6b:de:8a:25:71:
51:af:59:84:cd:19:2f:c5:87:da:56:7d:61:9b:72:
0f:9a:09:86:a3:b8:b1:14:c2:64:27:3a:e4:e3:8f:
8e:fb:22:31:96:71:df:4e:70:41:8e:19:75:db:1f:
37:c4:af:4d:32:06:b1:1f:4c:2f:73:74:e9:0b:0a:
6b:0a:d7:26:e9:27:d1:4a:1a:f0:46:65:50:52:d0:
e8:24:5d:7e:ff:16:78:81:16:7a:4a:85:31:fa:f8:
ab:f6:42:2f:f1:c2:82:bd:ba:97:d1:b4:7e:f5:c3:
b8:4d:7e:5e:5e:96:69:d3:f5:1b:4e:a7:ee:09:35:
e7:dc:72:7a:88:2e:59:6a:d5:9a:aa:71:1e:d3:7f:
1e:d6:3f:59:cc:82:98:f9:cf:39:03:23:f0:4f:51:
68:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8D:D0:CF:73:D9:4C:0A:2C:39:48:F9:17:FA:5F:85:69:F1:EE:90
X509v3 Authority Key Identifier:
keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fd:0e:00:80:18:50:19:c8:61:c3:17:6a:ca:7f:e8:5a:83:
46:cd:8e:5c:b0:be:09:70:55:47:d7:ed:0b:e5:1d:ee:7b:2c:
29:f1:13:33:8d:e4:b0:31:67:92:84:74:75:40:1e:45:4b:56:
8f:f2:ba:0d:86:bf:2c:da:35:4f:84:4c:2a:f6:89:d8:3c:6f:
62:70:e7:e1:18:f7:ed:1f:26:5f:50:28:ee:c3:46:70:65:bb:
71:2b:bb:49:88:5d:91:d2:e3:f1:67:37:49:aa:fa:07:d4:da:
14:a7:d8:39:7c:5d:5e:46:39:0d:5f:30:e8:d5:a4:d6:1e:3f:
71:15:e4:71:06:48:04:4b:d2:98:29:3e:0a:26:56:77:e5:96:
b6:47:71:95:2f:8b:c2:c0:62:a2:4e:a6:66:e6:9c:55:c6:74:
5d:4d:a9:a4:3e:3a:5e:ca:ee:76:a6:75:9b:43:53:b6:b9:c0:
f0:37:f6:e8:64:5c:67:40:ae:9f:c9:ea:af:5a:91:84:fd:a3:
73:ee:d3:c5:55:f6:b3:c5:ad:2f:88:34:36:c4:de:0d:39:e8:
e7:92:61:a8:1c:39:36:ec:7a:41:a4:18:4c:13:11:94:19:4a:
4b:96:b0:70:26:3a:48:80:00:42:82:ff:07:19:e9:b3:13:21:
8f:9f:7b:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPbWCk77v7RZSvMba6sXTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODk5YzI4NjY0ZWU4MTk0YTY0MDQ4ZTQ2YzYwYzZlNWYx
OTBjNTMwHhcNMjYwOTIzMTgwMDQ2WhcNMjYwOTI0MTgwMDQ2WjAzMTEwLwYDVQQD
Eyg5ODhkZDBjZjczZDk0YzBhMmMzOTQ4ZjkxN2ZhNWY4NTY5ZjFlZTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6v9XiKPQFKxZzNg0caU9Yuf+ssEF
zh8NIYK9xASO96q1Z3f7vzbrcqYbnzRYKSCCl9gaJtK/Lc+DhVwGtPf6oGuRMJoL
kz4LcZh8d6O5BdWX6yid7Rnowa9JwjUD+xxkuW+ra96KJXFRr1mEzRkvxYfaVn1h
m3IPmgmGo7ixFMJkJzrk44+O+yIxlnHfTnBBjhl12x83xK9NMgaxH0wvc3TpCwpr
Ctcm6SfRShrwRmVQUtDoJF1+/xZ4gRZ6SoUx+vir9kIv8cKCvbqX0bR+9cO4TX5e
XpZp0/UbTqfuCTXn3HJ6iC5ZatWaqnEe038e1j9ZzIKY+c85AyPwT1Fo+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiN0M9z2UwKLDlI+Rf6X4Vp8e6QMB8GA1UdIwQY
MBaAFNyJnChmTugZSmQEjkbGDG5fGQxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUt
NTJmZTEwNTEzMTI5LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUtNTJmZTEwNTEzMTI5
LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/0OAIAY
UBnIYcMXasp/6FqDRs2OXLC+CXBVR9ftC+Ud7nssKfETM43ksDFnkoR0dUAeRUtW
j/K6DYa/LNo1T4RMKvaJ2DxvYnDn4Rj37R8mX1Ao7sNGcGW7cSu7SYhdkdLj8Wc3
Sar6B9TaFKfYOXxdXkY5DV8w6NWk1h4/cRXkcQZIBEvSmCk+CiZWd+WWtkdxlS+L
wsBiok6mZuacVcZ0XU2ppD46XsrudqZ1m0NTtrnA8Df26GRcZ0Cun8nqr1qRhP2j
c+7TxVX2s8WtL4g0NsTeDTno55JhqBw5Nux6QaQYTBMRlBlKS5awcCY6SIAAQoL/
BxnpsxMhj597ZQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:19:48 2026 by rpki-client