Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
File: hSC3fQNbkS_6QG393ynjopY-aQQ.mft (raw, json)
Hash identifier: WO+1ArnZvv6y+hy6ZSukaBH6TwsyZ5xcwly33AtTw7Y=
Subject key identifier: 11:CF:34:39:0A:3A:9D:81:0C:A4:23:43:C5:F7:9F:60:46:7C:F5:AB
Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Certificate issuer: /CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Certificate serial: 019F8F7E4523E01018402EE9AE7BC2294212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
Manifest number: 0BDC
Signing time: Thu 23 Jul 2026 15:00:44 +0000
Manifest this update: Thu 23 Jul 2026 15:00:44 +0000
Manifest next update: Fri 24 Jul 2026 15:00:44 +0000
Files and hashes: 1: Sillb4nEsk9ouNCXzONZ9guaHgo.roa (hash: kbWq0G9OhRAUE6xI4of3xM29A3/8ukL1B/VOzXX1Z7E=)
2: W1-b2_39t40IJEIlY1fU30KPC7Y.roa (hash: DG8YwHrN9i6MKPRhk3te8aFn4nTPHySMexyk/ryRI0I=)
3: hSC3fQNbkS_6QG393ynjopY-aQQ.crl (hash: tQm8iJMWSF6XoKE5s1DN1QPtliDY8n7cjbRTZiqHaHg=)
4: q3L-DLkESBWHiQCDrzrriCchSdo.asa (hash: J3JSTCDpkSsTV/MAnz+RFfxXP4Ryp2u8ZqcS0lN7eB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:45:23:e0:10:18:40:2e:e9:ae:7b:c2:29:42:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Validity
Not Before: Jul 23 15:00:44 2026 GMT
Not After : Jul 24 15:00:44 2026 GMT
Subject: CN=11cf34390a3a9d810ca42343c5f79f60467cf5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:1f:f9:57:65:e8:f1:68:c4:56:c0:25:82:
49:b8:58:5b:55:5d:32:d0:b1:d4:79:32:dc:46:38:
93:27:ce:e3:91:41:35:35:9d:3f:ec:31:11:16:15:
1d:9e:d8:d0:c6:61:60:62:92:4c:c0:51:ee:69:69:
2f:5d:5b:62:a0:35:15:77:ff:c6:57:22:00:43:ad:
2c:da:83:09:4b:1f:8d:40:c9:5f:20:2f:38:5d:93:
09:e9:54:dd:5a:7a:3a:89:b7:c4:0a:99:3b:5d:37:
f5:3a:ab:34:40:86:c9:d5:22:80:f6:80:76:a4:b0:
ed:64:8e:09:17:69:e5:a3:1a:5f:d3:93:80:3e:22:
60:5c:c9:46:59:af:85:7b:d6:f2:0e:93:9e:23:45:
c2:93:f7:9e:a2:44:7b:c8:e4:77:94:c9:36:13:3f:
74:02:4d:e0:27:76:ea:ad:c7:5d:e9:c2:b8:1b:62:
12:19:7b:a9:67:b9:43:d1:04:9d:61:90:d1:47:57:
f5:a6:d2:9a:c0:22:80:32:6e:c4:d1:6d:39:ce:19:
a8:5d:a9:fc:70:8a:3a:d8:2a:84:78:ac:4a:c9:58:
3b:b5:da:cd:7a:d8:b0:39:73:df:bb:eb:cd:e5:e2:
08:60:83:5f:51:36:0b:92:fc:00:0e:cb:9b:75:d5:
b8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CF:34:39:0A:3A:9D:81:0C:A4:23:43:C5:F7:9F:60:46:7C:F5:AB
X509v3 Authority Key Identifier:
keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:cb:dc:f6:f1:68:ec:b1:a1:6c:36:6a:21:ae:50:99:85:4d:
50:23:45:78:81:e0:69:ee:a2:4e:72:d8:fe:8b:ac:1d:4e:13:
8d:1b:9b:12:92:28:f1:fb:b2:a9:d1:6f:5e:6c:a6:aa:83:10:
22:1e:14:f8:f1:94:a5:c9:e0:21:12:d3:67:9a:f8:cc:c5:7c:
ff:a9:75:78:81:4c:96:0d:10:39:18:79:5b:55:ae:c4:e1:18:
38:45:59:bc:f0:45:a1:0f:7f:77:ca:24:f0:3b:ca:aa:dc:44:
d5:9a:af:1f:04:fc:dc:60:60:d5:c2:90:cb:9a:7d:2c:ac:e7:
3e:5c:8f:b1:ed:ca:51:23:d5:af:ac:d3:68:34:57:41:06:23:
93:bb:50:7d:12:86:89:8a:7d:04:8c:d3:21:83:74:b7:3e:f1:
bb:b7:68:7f:e7:ed:83:ba:2b:40:48:ed:aa:22:5e:04:ce:36:
a2:66:de:8a:3a:b9:9b:ee:13:44:f5:45:58:25:de:0c:43:59:
76:8b:7d:cf:9b:12:2c:65:c6:cf:53:d9:17:b6:79:e5:f4:5b:
47:fa:cc:d0:df:d1:87:7e:a4:31:54:2e:43:31:b6:33:77:32:
2c:7a:91:0a:0e:5b:6c:26:10:41:25:5b:73:ca:ea:79:ee:94:
8b:fe:ea:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:23:35 2026 by rpki-client