Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json)
Hash identifier: YN5/At0DuniMHXVuywJRpezH6SUVpqv2bINaw76xZRg=
Subject key identifier: 48:03:60:F7:A0:14:61:AA:82:D4:1B:E1:63:71:42:06:14:2C:35:C9
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial: 01A0DCF28BEAE1AD0B7A09AEB21298B7DAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
Manifest number: 1A75
Signing time: Sat 26 Sep 2026 09:01:17 +0000
Manifest this update: Sat 26 Sep 2026 09:01:17 +0000
Manifest next update: Sun 27 Sep 2026 09:01:17 +0000
Files and hashes: 1: 0608zt-8orJ6kNX3XPv0kMyOK5Q.roa (hash: W0XCT9jMbiNFbMnkrDbCdpjPNd3+brMKEABetkqN5ic=)
2: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: a7bPZDRJKlljgeSnhSIlG+vQOklgPO/tU3WHJUHKTZk=)
3: AigJOVmk91sugmvhBV28DfHr9uY.roa (hash: FSxnVUPo9yR+90FH9HDs0WUkaZbCnvLTff3dvJ/Kgmc=)
4: FiKj8ScLx1ATx_rGZ7SGgclIc6s.roa (hash: xRch7fJVmZ0aIJvLTTrTe6WF/gV2dip1dza26YmqWck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:8b:ea:e1:ad:0b:7a:09:ae:b2:12:98:b7:da:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Validity
Not Before: Sep 26 09:01:17 2026 GMT
Not After : Sep 27 09:01:17 2026 GMT
Subject: CN=480360f7a01461aa82d41be163714206142c35c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:6b:cd:03:fd:37:c0:40:00:b1:fb:bf:a6:
37:be:64:35:9f:aa:ee:f5:f4:43:06:6e:34:3a:ff:
13:1a:f8:01:f9:e9:d3:5d:d9:13:c1:58:60:47:c7:
95:ec:99:78:1a:5e:c3:9e:d3:65:e0:08:bb:c5:af:
32:cb:6f:5f:ac:8b:29:04:86:78:ae:09:c9:43:2e:
c8:6b:3a:11:b1:96:7f:b8:82:c4:0e:40:e8:14:ed:
8d:db:6c:fa:4e:fa:41:c0:3a:3f:2b:fb:09:1e:3b:
3f:00:22:e5:d5:c1:30:49:6f:1d:8c:94:6a:6a:c0:
42:03:26:7b:87:ce:cd:d6:36:70:dd:0b:47:b5:46:
02:c4:8a:64:da:b7:3e:73:11:2f:1a:53:c6:60:26:
e2:f4:9c:c1:78:d9:36:f3:18:dc:03:58:86:1a:65:
83:3e:c1:ff:1d:e6:6c:d0:4f:04:2d:5b:49:64:1b:
d4:57:53:6f:02:e7:d4:b3:93:a5:8f:ef:9d:3d:d9:
c1:7b:1d:d1:ce:80:e3:f6:85:b9:2f:5c:d6:ff:ff:
30:cc:a6:c8:1a:4e:4a:98:a0:3c:26:52:e5:db:6a:
55:46:2e:26:48:10:a2:b5:fe:49:19:ed:be:cb:e3:
f4:76:f2:03:9d:08:8b:0f:a3:00:55:27:00:00:9f:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:03:60:F7:A0:14:61:AA:82:D4:1B:E1:63:71:42:06:14:2C:35:C9
X509v3 Authority Key Identifier:
keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ca:fd:aa:bf:0e:17:49:d1:e8:f4:8d:5c:63:a1:cd:37:ec:
1e:cf:ce:b6:30:9f:b0:e8:5e:ef:30:5e:6a:59:d2:fd:fb:7b:
9a:6f:77:98:59:94:a7:32:97:12:77:e0:98:1a:2c:97:62:02:
5a:a5:e3:b9:e7:12:18:20:1f:d5:17:5c:83:a4:91:b3:a9:32:
38:0c:b5:6a:e0:b3:dd:4b:45:84:2c:94:45:96:32:56:e7:f3:
ae:52:b8:13:ec:eb:e8:2f:ea:23:d2:76:e5:98:3f:e9:fe:b0:
6b:e1:5c:66:b9:22:67:d0:dd:ee:fa:dc:d0:31:59:11:ab:32:
13:67:bf:58:56:38:f2:b2:2a:66:69:ac:4d:45:f8:c9:bd:09:
55:99:d2:fc:ca:76:7a:39:ba:5d:df:f3:30:0c:bf:b1:b1:b4:
f0:dc:f0:2f:bf:8e:32:10:c1:2d:03:2d:ca:ff:24:39:8d:52:
e0:4a:65:57:81:89:07:09:26:28:2e:33:53:fc:d6:95:e5:db:
5f:cd:a7:5e:1f:6c:8f:aa:85:1a:e8:ea:63:59:53:07:fc:f3:
36:b1:19:b0:57:9a:7d:cf:8a:70:03:46:4c:3b:c5:66:9c:cf:
66:6b:75:82:dc:fc:4c:4e:5a:49:4f:5b:7c:a3:76:ae:4d:ce:
d6:a2:6c:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDc8ovq4a0LegmushKYt9ruMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODk5YzI4NjY0ZWU4MTk0YTY0MDQ4ZTQ2YzYwYzZlNWYx
OTBjNTMwHhcNMjYwOTI2MDkwMTE3WhcNMjYwOTI3MDkwMTE3WjAzMTEwLwYDVQQD
Eyg0ODAzNjBmN2EwMTQ2MWFhODJkNDFiZTE2MzcxNDIwNjE0MmMzNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGVrzQP9N8BAALH7v6Y3vmQ1n6ru
9fRDBm40Ov8TGvgB+enTXdkTwVhgR8eV7Jl4Gl7DntNl4Ai7xa8yy29frIspBIZ4
rgnJQy7IazoRsZZ/uILEDkDoFO2N22z6TvpBwDo/K/sJHjs/ACLl1cEwSW8djJRq
asBCAyZ7h87N1jZw3QtHtUYCxIpk2rc+cxEvGlPGYCbi9JzBeNk28xjcA1iGGmWD
PsH/HeZs0E8ELVtJZBvUV1NvAufUs5Olj++dPdnBex3RzoDj9oW5L1zW//8wzKbI
Gk5KmKA8JlLl22pVRi4mSBCitf5JGe2+y+P0dvIDnQiLD6MAVScAAJ+tVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgDYPegFGGqgtQb4WNxQgYULDXJMB8GA1UdIwQY
MBaAFNyJnChmTugZSmQEjkbGDG5fGQxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUt
NTJmZTEwNTEzMTI5LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUtNTJmZTEwNTEzMTI5
LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsr9qr8O
F0nR6PSNXGOhzTfsHs/OtjCfsOhe7zBealnS/ft7mm93mFmUpzKXEnfgmBosl2IC
WqXjuecSGCAf1Rdcg6SRs6kyOAy1auCz3UtFhCyURZYyVufzrlK4E+zr6C/qI9J2
5Zg/6f6wa+FcZrkiZ9Dd7vrc0DFZEasyE2e/WFY48rIqZmmsTUX4yb0JVZnS/Mp2
ejm6Xd/zMAy/sbG08NzwL7+OMhDBLQMtyv8kOY1S4EplV4GJBwkmKC4zU/zWleXb
X82nXh9sj6qFGujqY1lTB/zzNrEZsFeafc+KcANGTDvFZpzPZmt1gtz8TE5aSU9b
fKN2rk3O1qJsEA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:30:31 2026 by rpki-client