Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json)
Hash identifier: s8nXSAZjYaguQwxd9Ccc53Ztrt569iiwlh+sfFO4D6I=
Subject key identifier: D9:66:A0:DC:E5:44:13:52:97:7D:1C:5F:7E:81:CB:10:E9:F2:38:62
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial: 019E04E34151D2267D7C29E3A3BA1BBDBE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
Manifest number: 18FC
Signing time: Fri 08 May 2026 00:01:02 +0000
Manifest this update: Fri 08 May 2026 00:01:02 +0000
Manifest next update: Sat 09 May 2026 00:01:02 +0000
Files and hashes: 1: 0608zt-8orJ6kNX3XPv0kMyOK5Q.roa (hash: W0XCT9jMbiNFbMnkrDbCdpjPNd3+brMKEABetkqN5ic=)
2: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: gIupvJWhiAThexfDLoEScWFoL3cwhnvN1nLPvLCPjfc=)
3: AigJOVmk91sugmvhBV28DfHr9uY.roa (hash: FSxnVUPo9yR+90FH9HDs0WUkaZbCnvLTff3dvJ/Kgmc=)
4: FiKj8ScLx1ATx_rGZ7SGgclIc6s.roa (hash: xRch7fJVmZ0aIJvLTTrTe6WF/gV2dip1dza26YmqWck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 May 2026 21:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:04:e3:41:51:d2:26:7d:7c:29:e3:a3:ba:1b:bd:be:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Validity
Not Before: May 8 00:01:02 2026 GMT
Not After : May 9 00:01:02 2026 GMT
Subject: CN=d966a0dce5441352977d1c5f7e81cb10e9f23862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:51:01:83:e4:00:ef:df:a9:77:0d:61:59:
a5:a7:e2:da:13:02:87:1b:55:07:b3:62:3e:e0:cb:
ad:7f:d0:17:a7:49:2e:24:49:90:5e:33:35:b9:47:
2f:08:9d:27:be:04:aa:45:20:6c:f3:6c:7b:7f:50:
e7:81:d5:1a:79:2b:5f:c4:08:5c:ba:37:bb:3a:a4:
cf:d9:fd:69:42:00:00:2b:57:1c:ab:df:8b:7f:f3:
8e:be:fb:2c:4e:bc:f4:98:84:bd:d7:6f:36:08:d2:
5f:1c:00:29:53:ec:90:43:73:ee:68:85:dd:9e:52:
53:e5:a1:4c:fc:5a:df:41:9d:7e:02:64:b5:ea:28:
9a:55:5d:12:e5:2a:9e:a1:5d:d2:4b:f6:d6:d5:22:
70:38:98:67:ee:da:25:94:3a:10:21:3f:69:18:38:
50:20:73:c4:b2:a7:bb:0b:af:72:60:ca:b2:a4:3b:
c6:3b:bb:78:fb:0f:ca:f0:29:b2:f1:ce:34:eb:47:
13:ff:74:c4:cf:0f:df:84:6d:fd:2b:f2:91:14:ca:
67:10:00:dc:6f:55:a8:c3:d4:0a:0d:ed:7d:6c:f5:
ac:14:42:da:2a:de:ce:03:a5:89:8e:a9:be:13:2f:
86:eb:ff:41:d1:fe:e8:30:54:ed:4d:14:55:aa:d3:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:66:A0:DC:E5:44:13:52:97:7D:1C:5F:7E:81:CB:10:E9:F2:38:62
X509v3 Authority Key Identifier:
keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:39:5c:75:ac:c0:9d:c5:d9:71:16:ab:81:9f:2d:bc:bd:1b:
00:09:b8:9c:74:73:ce:6f:90:e8:8f:5d:10:6e:84:1a:5a:35:
3b:fa:ef:d2:43:06:18:5b:11:58:8c:e3:0c:67:c3:57:2c:0f:
aa:98:f7:c6:03:aa:22:08:75:57:21:30:30:7d:a5:83:f4:d1:
5f:49:77:a0:62:cd:5d:ae:4d:99:86:17:63:ff:4c:e9:9e:d8:
01:89:27:22:cc:64:ad:c1:54:a1:23:ca:46:76:de:bd:3b:4b:
fd:2b:d0:fa:f2:44:8d:df:80:7c:35:8f:79:b9:98:7a:ed:46:
2d:d2:77:00:93:35:fb:13:bc:cb:ea:46:d0:9e:3f:b3:cd:e3:
44:af:db:31:58:07:32:8b:64:9d:5c:ca:a8:76:d1:00:d3:97:
19:95:b1:10:26:cd:c8:c6:a3:79:e9:2c:66:22:0c:98:26:4e:
64:c3:e3:e1:0d:76:c3:c0:02:46:09:f8:b8:8b:17:4e:8d:6f:
41:d5:dc:42:5b:09:de:4d:f1:ab:89:fe:33:f5:ec:45:e6:3f:
9b:5f:f5:83:50:18:07:1c:ca:f3:b1:84:c3:9a:00:9c:67:97:
3e:1f:e1:55:07:c9:fc:94:d8:2e:f6:36:5b:28:cc:4a:1f:d7:
d0:7e:31:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 04:19:37 2026 by rpki-client