Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
File: hSC3fQNbkS_6QG393ynjopY-aQQ.mft (raw, json)
Hash identifier: EJ3SHh+YQJOK7T2dgFMHtc0SU5UKRPcuqvjasKG3sfA=
Subject key identifier: 48:8C:BC:3E:58:D1:C1:8A:21:F1:D0:2C:A6:C5:C9:E6:CE:4C:1C:D2
Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Certificate issuer: /CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Certificate serial: 019E1CB5566939F49EE4168B5848317DBCFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
Manifest number: 0B1C
Signing time: Tue 12 May 2026 15:01:46 +0000
Manifest this update: Tue 12 May 2026 15:01:46 +0000
Manifest next update: Wed 13 May 2026 15:01:46 +0000
Files and hashes: 1: Sillb4nEsk9ouNCXzONZ9guaHgo.roa (hash: kbWq0G9OhRAUE6xI4of3xM29A3/8ukL1B/VOzXX1Z7E=)
2: W1-b2_39t40IJEIlY1fU30KPC7Y.roa (hash: DG8YwHrN9i6MKPRhk3te8aFn4nTPHySMexyk/ryRI0I=)
3: hSC3fQNbkS_6QG393ynjopY-aQQ.crl (hash: 8YajqRQVwyKBsZF1LUvfjoOjlpdVh8xghZ394r6/kaQ=)
4: q3L-DLkESBWHiQCDrzrriCchSdo.asa (hash: J3JSTCDpkSsTV/MAnz+RFfxXP4Ryp2u8ZqcS0lN7eB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:56:69:39:f4:9e:e4:16:8b:58:48:31:7d:bc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Validity
Not Before: May 12 15:01:46 2026 GMT
Not After : May 13 15:01:46 2026 GMT
Subject: CN=488cbc3e58d1c18a21f1d02ca6c5c9e6ce4c1cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:0b:58:2a:df:8c:0b:97:1a:04:b0:4f:48:
c4:7f:c4:1a:b7:a3:97:bb:11:8f:18:98:87:90:89:
91:1f:a3:4a:de:ff:3c:28:a9:51:58:2d:3d:51:7c:
2d:43:e8:09:cc:e6:49:4f:7b:88:e8:95:dd:05:ee:
3d:cf:a1:5d:02:23:c2:17:d6:58:ca:ae:8c:d9:56:
50:b4:14:a0:36:bb:aa:8e:3c:dd:03:0e:b8:ae:79:
3a:55:7d:53:87:46:c8:39:2a:0c:b3:fc:80:36:5d:
97:8e:fb:52:20:46:09:8b:e8:a1:c8:b7:67:4e:90:
05:c7:69:1c:39:de:8e:06:20:6f:e2:cf:34:1e:94:
43:d0:d2:b6:09:22:6f:f9:a6:a3:5d:a0:44:c9:99:
4c:a8:17:63:22:a0:9c:c5:a8:6d:f7:64:c9:a7:24:
ec:79:52:2f:e2:ee:26:54:4a:49:46:71:94:dd:05:
86:b0:39:74:7a:20:b9:c3:61:6e:cb:f3:1d:c8:4e:
9e:87:ba:e6:b7:71:c4:44:90:66:42:70:44:1b:fc:
a2:1a:a9:40:26:c1:26:80:b6:e3:b9:f0:33:75:e6:
8d:76:34:fe:00:ba:24:05:92:9a:4d:49:b9:b6:10:
cf:8f:bc:a4:74:18:f1:3e:50:69:b0:a9:aa:64:b1:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8C:BC:3E:58:D1:C1:8A:21:F1:D0:2C:A6:C5:C9:E6:CE:4C:1C:D2
X509v3 Authority Key Identifier:
keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ca:d4:74:1c:ce:62:99:4f:e3:aa:24:98:bb:13:7f:67:39:
d5:a7:a4:be:72:a8:3a:03:03:81:52:2f:47:a0:64:ea:75:52:
c0:8c:ff:c5:a8:95:6f:a5:a9:55:5b:61:eb:d5:ab:29:a1:b9:
1e:21:7d:ec:09:a4:ac:a2:9d:4c:76:0f:24:27:19:52:32:19:
66:c2:1e:2c:58:11:b5:6c:d5:d6:4a:e9:84:d6:0a:bf:b8:ea:
03:7f:14:8e:aa:d3:a5:1b:69:17:1c:d0:6e:bc:b0:9b:33:90:
24:28:f7:e0:01:97:1f:f6:e5:f8:ef:21:1b:c5:ee:ae:e1:98:
f4:06:9c:bd:d4:bd:29:6c:fd:be:44:fd:b5:7a:7b:e9:76:30:
ce:04:30:b7:c2:fb:a5:42:49:99:cd:d2:3f:3d:c2:4b:bd:7b:
10:f8:e7:91:df:de:ff:b2:20:5c:1f:6e:82:65:6b:b4:80:08:
81:bc:aa:7f:96:5c:24:ca:d5:1b:29:7c:46:f2:65:50:69:79:
35:14:58:3b:cd:5b:9d:f5:a9:8c:70:b6:e5:5e:21:be:b2:ca:
3c:db:04:36:20:32:54:6d:2d:10:00:02:d7:bc:16:f0:c9:d4:
a2:d3:0c:5e:dd:b4:40:77:90:48:cd:e4:48:6d:9b:60:cd:22:
b1:e2:eb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:53 2026 by rpki-client