Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json)
Hash identifier: Qnv7z/keY8cK6Ob7mXpcaZuBtjFPnE60llIWpYJxgo4=
Subject key identifier: EB:2E:5F:48:63:7D:17:30:A8:DC:55:27:14:C8:6F:A3:1D:D7:8C:54
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial: 019FA9E313FF733C27CFC55499CAC86FB13C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 18:00:58 +0000
Manifest this update: Tue 28 Jul 2026 18:00:58 +0000
Manifest next update: Wed 29 Jul 2026 18:00:58 +0000
Files and hashes: 1: 0608zt-8orJ6kNX3XPv0kMyOK5Q.roa (hash: W0XCT9jMbiNFbMnkrDbCdpjPNd3+brMKEABetkqN5ic=)
2: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: F91C4+5JPyZX5CZD7xMVwDSHCws5Q9OrQISeWRczCuI=)
3: AigJOVmk91sugmvhBV28DfHr9uY.roa (hash: FSxnVUPo9yR+90FH9HDs0WUkaZbCnvLTff3dvJ/Kgmc=)
4: FiKj8ScLx1ATx_rGZ7SGgclIc6s.roa (hash: xRch7fJVmZ0aIJvLTTrTe6WF/gV2dip1dza26YmqWck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:13:ff:73:3c:27:cf:c5:54:99:ca:c8:6f:b1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Validity
Not Before: Jul 28 18:00:58 2026 GMT
Not After : Jul 29 18:00:58 2026 GMT
Subject: CN=eb2e5f48637d1730a8dc552714c86fa31dd78c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:d2:72:e8:a4:0f:b0:4a:45:ef:08:20:72:
69:f1:ef:45:40:da:5c:8f:59:e6:22:7f:f3:df:84:
ae:c2:66:82:7d:a7:63:0d:24:d4:78:42:12:af:cd:
ca:11:1e:92:83:c5:db:03:be:3f:08:80:a5:7b:e3:
cd:a1:d1:0c:44:4e:b9:c7:3b:4a:b5:a9:9f:58:29:
95:c8:1c:3b:55:0a:aa:fc:2d:f6:c1:40:9e:04:fc:
e3:60:36:cd:0d:71:01:e7:27:99:d4:46:fb:98:40:
7c:56:a6:dc:cd:7b:0e:3f:84:66:79:59:94:4c:06:
f9:22:da:11:67:4b:f3:76:37:d8:d0:f4:00:ed:84:
23:c6:93:45:9b:ad:52:97:85:e6:60:42:55:4e:5d:
df:8e:a1:a9:fa:a0:e1:7d:0d:14:06:c8:6e:3e:17:
8a:de:7c:10:ee:ec:d6:ee:ac:35:9f:03:5d:d3:52:
f7:4a:d5:04:7e:f1:e4:31:76:d2:52:4c:b4:cb:1b:
d1:fc:ef:89:46:bc:c5:36:b6:49:41:4f:a6:c9:c2:
7e:25:c7:2c:bb:ed:20:59:7e:7d:72:5c:6b:76:59:
99:d7:dc:08:84:dc:20:68:cc:bd:52:19:07:55:b7:
e3:de:5f:09:36:7f:79:e1:22:bd:85:1a:98:97:f9:
72:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2E:5F:48:63:7D:17:30:A8:DC:55:27:14:C8:6F:A3:1D:D7:8C:54
X509v3 Authority Key Identifier:
keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:fb:37:0d:43:66:54:ca:ee:98:16:99:09:11:9d:6f:b4:ae:
ac:69:27:2e:99:77:1e:d3:ca:db:7d:d3:3f:1a:67:03:5d:90:
e4:71:9c:4e:fc:86:9c:1d:1a:86:ac:28:e1:f3:dc:f9:15:9a:
c2:2f:4e:73:4b:34:b7:50:02:89:a8:68:e0:11:aa:cf:10:ca:
fc:21:5f:64:60:05:85:da:58:dd:ac:a7:92:1b:f6:17:b8:77:
63:dd:ce:e3:8a:f3:63:d2:f1:4a:fc:4e:3e:cd:0d:14:a8:86:
4b:30:79:55:be:77:6b:c6:ed:2c:8e:07:42:b5:64:ed:ca:04:
29:4f:d1:3d:5d:66:20:4b:e5:ee:0b:f2:94:e4:b2:be:fe:0d:
bc:77:2f:b9:3c:bc:22:10:ca:19:e4:ea:e9:e6:a8:57:01:85:
0e:93:cc:14:bc:59:c4:54:e0:88:e3:a3:ae:62:b1:c2:5c:df:
88:04:40:4d:a4:05:d2:f7:be:be:81:28:3b:85:6d:29:20:ad:
06:ee:5f:d6:e1:9e:1e:b1:4a:b7:d1:8c:47:87:50:a4:de:bd:
b5:8f:e5:78:21:4d:b0:37:1f:2e:d7:d6:d4:a8:bb:66:cc:e7:
fa:fb:2e:52:1f:1b:80:b8:e6:70:06:3c:85:c0:41:dc:0a:07:
8b:9e:38:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:36:51 2026 by rpki-client