Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json)
Hash identifier: V2yDg41K6Zpt9n5g30Dj3asgBfMplLTVM8JdUqK7/6Y=
Subject key identifier: 27:4B:5E:E8:4D:15:1D:50:84:27:BC:C6:7C:F2:F3:FD:F0:79:2C:75
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial: 019EECA222EA71E510F1E72FD7E7119D535D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
Manifest number: 1974
Signing time: Mon 22 Jun 2026 00:01:49 +0000
Manifest this update: Mon 22 Jun 2026 00:01:49 +0000
Manifest next update: Tue 23 Jun 2026 00:01:49 +0000
Files and hashes: 1: 0608zt-8orJ6kNX3XPv0kMyOK5Q.roa (hash: W0XCT9jMbiNFbMnkrDbCdpjPNd3+brMKEABetkqN5ic=)
2: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: N0H78E7H2EtfMIAjiNk6cyceYwJVKSg16kIqf1kIA3A=)
3: AigJOVmk91sugmvhBV28DfHr9uY.roa (hash: FSxnVUPo9yR+90FH9HDs0WUkaZbCnvLTff3dvJ/Kgmc=)
4: FiKj8ScLx1ATx_rGZ7SGgclIc6s.roa (hash: xRch7fJVmZ0aIJvLTTrTe6WF/gV2dip1dza26YmqWck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 00:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ec:a2:22:ea:71:e5:10:f1:e7:2f:d7:e7:11:9d:53:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Validity
Not Before: Jun 22 00:01:49 2026 GMT
Not After : Jun 23 00:01:49 2026 GMT
Subject: CN=274b5ee84d151d508427bcc67cf2f3fdf0792c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:cb:7a:1a:0f:2c:0a:8f:c2:63:c6:cc:ea:88:
54:dc:8c:d1:f9:b6:8f:1c:3a:76:46:ed:c5:f8:50:
79:9f:bb:25:ee:b3:e4:7d:5a:97:b0:eb:fb:6d:13:
e2:f8:8e:2d:e0:65:35:62:03:17:b5:c5:af:32:42:
8f:aa:b1:b5:57:aa:73:2e:4a:e2:db:89:32:e8:7b:
ec:8e:18:c6:08:3b:7c:20:1d:64:35:bd:de:61:75:
00:83:00:6e:a6:ed:ba:ab:1e:0f:99:51:a7:fb:dc:
ec:c8:e6:b3:30:08:77:29:70:57:08:ba:2e:30:5d:
45:2d:75:3a:e8:be:a5:35:44:4b:2c:95:28:14:92:
8b:90:3b:2f:45:d4:5a:68:d3:a4:ff:66:45:0a:12:
28:09:1e:28:b5:ef:cf:21:65:5d:ad:6b:20:9c:3b:
7a:08:10:3e:b1:d2:61:81:17:ad:44:37:ed:9d:a8:
6d:a0:db:15:22:70:bc:9b:5c:ac:50:7f:bd:16:cf:
e8:08:21:d5:d9:e2:d7:c4:54:9b:45:14:0d:15:f3:
35:d0:88:60:05:ea:a0:71:36:48:47:0e:fb:2e:9e:
3f:07:f5:ef:80:2b:7f:7c:50:fe:05:fd:b7:97:94:
fe:3e:63:0e:33:d3:c0:76:50:3b:89:fa:5a:03:58:
96:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4B:5E:E8:4D:15:1D:50:84:27:BC:C6:7C:F2:F3:FD:F0:79:2C:75
X509v3 Authority Key Identifier:
keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:cf:45:79:47:61:dd:5b:8b:7f:17:f0:91:2e:ef:46:27:09:
71:0a:6a:33:fe:76:fc:fb:f0:77:d9:af:92:bf:43:06:bd:21:
78:36:68:0d:df:7d:d3:d7:e9:8e:20:f8:32:4e:46:e2:80:69:
86:8d:17:db:29:4d:e5:86:c7:e6:12:c6:6a:9b:14:c7:6a:34:
6f:02:54:fe:d7:c8:9b:0e:d4:ed:3a:6c:6a:73:00:dd:80:6a:
ca:7b:a0:09:f1:ab:71:27:a1:bd:8b:a4:51:1a:9e:14:c1:d9:
24:51:d1:a9:9c:ba:b9:8e:49:38:02:a3:9c:4e:c4:b6:e3:c9:
c3:33:fb:80:68:8f:ed:55:e0:ec:0c:ef:25:47:c8:c2:a6:88:
90:30:27:d2:e8:91:c9:57:25:80:03:5a:4c:5c:8f:7f:1f:44:
00:4d:67:0e:d8:f3:43:14:24:2e:13:01:df:f8:18:f6:dc:e9:
43:af:bf:b0:dc:bd:da:5d:00:fe:8e:c5:eb:39:cf:76:3f:51:
07:1d:d0:fa:3e:80:df:63:75:78:2a:4f:ba:1a:ee:7f:78:f3:
e5:99:a6:91:35:68:58:eb:2d:fd:cf:11:e1:98:4e:cc:79:e7:
bd:85:6a:ed:62:ea:cb:37:0d:2a:13:86:5a:cb:b3:ff:99:4c:
7c:c8:f2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 08:27:52 2026 by rpki-client