Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json)
Hash identifier: lhisQ2svB986IpZI+x7bOS5TWsX9FIlEFpBd+ZOt6cU=
Subject key identifier: 53:B5:67:9D:22:96:5B:C5:0D:C1:DD:D5:CB:7B:4B:BB:06:84:26:79
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial: 01A0C3D739FBF657EE502E9BA37B25BA91F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 12:00:56 +0000
Manifest this update: Mon 21 Sep 2026 12:00:56 +0000
Manifest next update: Tue 22 Sep 2026 12:00:56 +0000
Files and hashes: 1: 0608zt-8orJ6kNX3XPv0kMyOK5Q.roa (hash: W0XCT9jMbiNFbMnkrDbCdpjPNd3+brMKEABetkqN5ic=)
2: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: sSEHY6nOW1ne+eicdOE2uHnQxhvzY9c9sAwE7X1aH+c=)
3: AigJOVmk91sugmvhBV28DfHr9uY.roa (hash: FSxnVUPo9yR+90FH9HDs0WUkaZbCnvLTff3dvJ/Kgmc=)
4: FiKj8ScLx1ATx_rGZ7SGgclIc6s.roa (hash: xRch7fJVmZ0aIJvLTTrTe6WF/gV2dip1dza26YmqWck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:39:fb:f6:57:ee:50:2e:9b:a3:7b:25:ba:91:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Validity
Not Before: Sep 21 12:00:56 2026 GMT
Not After : Sep 22 12:00:56 2026 GMT
Subject: CN=53b5679d22965bc50dc1ddd5cb7b4bbb06842679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:45:23:2c:26:a7:c4:2e:52:fb:7a:30:bf:b2:
79:c5:2c:76:0a:ac:11:2e:c7:66:e2:74:c0:32:13:
bb:cd:6a:1c:73:f4:31:43:32:db:35:d3:03:0c:3e:
d1:b9:61:71:c2:72:f6:71:ae:38:e4:f3:4c:27:b2:
23:39:7d:3e:46:f3:62:fa:27:0b:6f:3f:49:d0:0d:
77:41:82:2f:bf:a3:27:07:c2:f6:7d:c1:38:10:de:
43:95:5b:5c:8b:08:8e:eb:9d:d1:53:03:a1:67:ca:
3e:22:83:6d:b3:c6:74:08:0c:2c:c9:f2:5e:2b:67:
78:95:11:2e:3e:f5:d8:c6:14:3b:ac:eb:39:d8:de:
f3:14:37:1c:d9:35:9b:81:da:78:71:34:3b:32:9e:
b0:f2:a4:dc:42:e8:93:3c:66:d8:a8:1f:9b:8c:0a:
1c:9a:a8:da:31:3e:13:44:cb:19:7c:a2:76:1f:6d:
83:b8:5e:99:d0:ff:04:35:fb:eb:88:02:78:b8:49:
2e:bd:13:a5:e6:9b:4c:d4:35:48:38:b9:86:16:a3:
2f:67:7b:ad:de:80:a1:27:b6:39:a9:4a:84:2d:1a:
d0:59:b3:ed:20:8b:02:b9:5b:92:e7:9f:48:9b:2e:
08:e0:8e:f9:43:73:22:92:78:23:82:bd:7f:38:67:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B5:67:9D:22:96:5B:C5:0D:C1:DD:D5:CB:7B:4B:BB:06:84:26:79
X509v3 Authority Key Identifier:
keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:db:d3:8c:f2:ad:b4:9d:45:55:e8:da:b6:c9:c3:2d:fd:b1:
87:3c:0e:fc:48:0a:84:30:b5:ea:4d:64:e9:02:91:83:b5:58:
48:10:14:bb:73:05:7f:35:7f:3f:be:4a:3b:60:ef:8e:61:79:
0e:b6:af:f2:42:63:dc:d6:07:88:be:c0:0d:e7:01:61:db:9e:
6d:a8:16:13:a5:8f:d4:8a:c0:d3:07:4b:42:12:c9:10:b9:3c:
13:60:20:65:0e:a4:33:46:08:bc:2a:e5:d4:90:66:c2:dd:d8:
73:b5:b1:9e:32:5a:d0:96:27:0b:db:a2:c8:22:aa:83:7c:ce:
0c:d4:27:b5:be:b7:4a:68:1a:3b:f2:46:4b:5f:df:12:0f:9a:
53:1e:30:0c:f5:da:37:d0:f3:73:63:63:79:94:19:40:e6:da:
6d:ca:18:8d:f1:d9:a7:62:06:2d:ac:d5:47:06:97:3a:62:b4:
29:12:a1:78:b4:93:51:a5:d1:5f:89:03:51:1c:8d:cc:d2:95:
c6:43:8b:66:fc:93:7e:e6:e2:e7:61:eb:ef:d9:d8:d6:7b:3f:
15:79:f2:20:82:5c:24:26:bb:85:db:d9:14:3d:07:c4:2b:09:
dc:5c:04:7a:0e:9b:f8:e7:aa:60:75:b5:3e:16:15:b4:b4:63:
73:a3:d6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:32:30 2026 by rpki-client