Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json)
Hash identifier: ThKBRscGS+I+joO084GeRWXqkUUR9sx8ECqbvLJ4eDs=
Subject key identifier: 9F:13:68:5F:C2:55:52:26:FB:F4:D1:F5:A0:21:10:12:05:55:A4:73
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial: 019D1B367133B812857A7E4317AA1F62A99B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
Manifest number: 1883
Signing time: Mon 23 Mar 2026 15:00:45 +0000
Manifest this update: Mon 23 Mar 2026 15:00:45 +0000
Manifest next update: Tue 24 Mar 2026 15:00:45 +0000
Files and hashes: 1: 0608zt-8orJ6kNX3XPv0kMyOK5Q.roa (hash: W0XCT9jMbiNFbMnkrDbCdpjPNd3+brMKEABetkqN5ic=)
2: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: 8kCjsgLiSz2ETe8RPyFgv1Zw9nM8Rm6T7v78nUzZAA8=)
3: AigJOVmk91sugmvhBV28DfHr9uY.roa (hash: FSxnVUPo9yR+90FH9HDs0WUkaZbCnvLTff3dvJ/Kgmc=)
4: FiKj8ScLx1ATx_rGZ7SGgclIc6s.roa (hash: xRch7fJVmZ0aIJvLTTrTe6WF/gV2dip1dza26YmqWck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:36:71:33:b8:12:85:7a:7e:43:17:aa:1f:62:a9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Validity
Not Before: Mar 23 15:00:45 2026 GMT
Not After : Mar 24 15:00:45 2026 GMT
Subject: CN=9f13685fc2555226fbf4d1f5a02110120555a473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:97:59:e2:f8:3e:97:21:fe:9d:5f:4a:f3:
c5:74:9a:b8:0a:16:3f:dd:4b:b6:ea:b6:56:a9:2d:
33:19:4e:dc:d2:3d:ad:1d:9d:3b:d8:11:31:e2:c1:
c6:af:09:98:24:68:58:e8:07:3d:0e:ec:50:be:d2:
cc:d5:27:a9:75:c3:0b:22:2e:43:b7:75:e6:fa:81:
db:61:c7:ad:85:78:f1:22:cc:ae:4e:29:29:29:3e:
7a:72:de:f2:9a:25:62:03:c6:96:ec:06:d6:d4:8e:
4c:28:94:2a:2f:35:d0:dd:f1:d9:35:e2:5f:08:0c:
57:a6:b1:9f:24:ad:3f:06:cb:6b:a2:99:4b:b9:52:
60:e9:5e:77:b7:45:ba:a9:81:78:ab:a3:5a:44:55:
27:2f:5b:f7:93:52:48:05:a2:f0:8a:9c:8c:0b:8c:
a6:84:10:8a:27:14:91:3f:5d:81:0a:84:21:f3:00:
3e:8c:e3:c6:7b:42:a9:36:f9:30:23:0d:fa:94:65:
1b:0e:85:17:d9:ac:8a:30:f6:f1:ee:b4:be:d7:00:
a6:94:33:fb:48:fe:5f:0d:57:ae:25:72:ac:11:6a:
25:21:97:96:09:5e:c0:dd:f6:bd:05:28:04:ab:e7:
b5:2d:55:8f:8f:3e:57:64:b8:be:89:f5:0f:6d:55:
a2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:13:68:5F:C2:55:52:26:FB:F4:D1:F5:A0:21:10:12:05:55:A4:73
X509v3 Authority Key Identifier:
keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ac:9d:a2:ed:ef:4d:4d:df:67:52:e4:92:42:0b:41:53:d2:
c9:85:5c:7c:16:19:29:6b:34:58:16:7a:c9:86:14:c4:ea:8a:
f0:7e:c9:c0:81:0e:b9:45:00:62:e3:5b:df:42:6d:ca:35:eb:
4d:31:1b:5a:ee:be:9a:5d:a0:f2:dc:64:ff:04:e7:32:78:b8:
65:3e:58:8a:96:32:d6:5d:ad:4c:94:1f:3c:1a:64:c7:94:5b:
38:f6:bc:14:7a:c0:5e:b8:7f:61:96:7f:dc:72:fe:de:bb:f0:
1d:87:b4:14:22:15:91:84:93:ea:a2:78:c4:37:72:69:d5:eb:
91:55:6a:49:47:e9:be:4b:3f:6a:84:7c:a5:d8:60:f6:35:11:
b2:5a:ea:99:cd:8f:10:bf:28:d8:6f:98:90:5b:bc:0c:88:de:
cd:70:18:43:9c:eb:46:64:d7:d2:45:a4:c3:ef:37:27:ad:f9:
f3:4a:84:6e:60:6e:f8:3c:43:c3:e6:07:57:c6:9e:01:c6:49:
99:e2:8f:53:e3:b6:17:77:22:b1:a9:39:25:25:ad:5a:34:9d:
2d:41:81:a2:47:d7:f3:81:2c:da:7c:f2:5a:e0:1a:fb:9b:c7:
95:4c:7c:9d:16:36:8e:6d:59:cc:fe:9d:a6:ae:33:f5:93:e4:
33:7a:0f:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0bNnEzuBKFen5DF6ofYqmbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODk5YzI4NjY0ZWU4MTk0YTY0MDQ4ZTQ2YzYwYzZlNWYx
OTBjNTMwHhcNMjYwMzIzMTUwMDQ1WhcNMjYwMzI0MTUwMDQ1WjAzMTEwLwYDVQQD
Eyg5ZjEzNjg1ZmMyNTU1MjI2ZmJmNGQxZjVhMDIxMTAxMjA1NTVhNDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIWXWeL4Ppch/p1fSvPFdJq4ChY/
3Uu26rZWqS0zGU7c0j2tHZ072BEx4sHGrwmYJGhY6Ac9DuxQvtLM1SepdcMLIi5D
t3Xm+oHbYcethXjxIsyuTikpKT56ct7ymiViA8aW7AbW1I5MKJQqLzXQ3fHZNeJf
CAxXprGfJK0/BstroplLuVJg6V53t0W6qYF4q6NaRFUnL1v3k1JIBaLwipyMC4ym
hBCKJxSRP12BCoQh8wA+jOPGe0KpNvkwIw36lGUbDoUX2ayKMPbx7rS+1wCmlDP7
SP5fDVeuJXKsEWolIZeWCV7A3fa9BSgEq+e1LVWPjz5XZLi+ifUPbVWi2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8TaF/CVVIm+/TR9aAhEBIFVaRzMB8GA1UdIwQY
MBaAFNyJnChmTugZSmQEjkbGDG5fGQxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUt
NTJmZTEwNTEzMTI5LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUtNTJmZTEwNTEzMTI5
LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAaydou3v
TU3fZ1LkkkILQVPSyYVcfBYZKWs0WBZ6yYYUxOqK8H7JwIEOuUUAYuNb30JtyjXr
TTEbWu6+ml2g8txk/wTnMni4ZT5YipYy1l2tTJQfPBpkx5RbOPa8FHrAXrh/YZZ/
3HL+3rvwHYe0FCIVkYST6qJ4xDdyadXrkVVqSUfpvks/aoR8pdhg9jURslrqmc2P
EL8o2G+YkFu8DIjezXAYQ5zrRmTX0kWkw+83J63580qEbmBu+DxDw+YHV8aeAcZJ
meKPU+O2F3cisak5JSWtWjSdLUGBokfX84Es2nzyWuAa+5vHlUx8nRY2jm1ZzP6d
pq4z9ZPkM3oPjw==
-----END CERTIFICATE-----
Generated at Mon Mar 23 22:23:43 2026 by rpki-client