Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
File: hSC3fQNbkS_6QG393ynjopY-aQQ.mft (raw, json)
Hash identifier: 3dkSNf3vRYMWFDgLc2ua9wy/OdbYVG6zb+jOdITlWwY=
Subject key identifier: 43:88:0D:5F:A0:67:5C:A3:37:F9:FC:70:06:0A:B6:DD:45:47:60:08
Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Certificate issuer: /CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Certificate serial: 019D2A7256285DE255256E3F0F2524EBDCA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
Manifest number: 0A9C
Signing time: Thu 26 Mar 2026 14:00:29 +0000
Manifest this update: Thu 26 Mar 2026 14:00:29 +0000
Manifest next update: Fri 27 Mar 2026 14:00:29 +0000
Files and hashes: 1: AtB3A-GtrGG7ULQ6X8PKuFu-MDA.roa (hash: XelAFahqgXKc+akh+CQIFVNSjnh+4lCVUJF9Ga/50EI=)
2: Sillb4nEsk9ouNCXzONZ9guaHgo.roa (hash: kbWq0G9OhRAUE6xI4of3xM29A3/8ukL1B/VOzXX1Z7E=)
3: hSC3fQNbkS_6QG393ynjopY-aQQ.crl (hash: /i2g3w/PFRGx8cNu0njlWNLb/GcE0EUBKmW2zaffgCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:56:28:5d:e2:55:25:6e:3f:0f:25:24:eb:dc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Validity
Not Before: Mar 26 14:00:29 2026 GMT
Not After : Mar 27 14:00:29 2026 GMT
Subject: CN=43880d5fa0675ca337f9fc70060ab6dd45476008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:22:f2:4f:77:8e:8f:f4:e2:d2:88:f4:92:
dd:3e:77:c3:b1:62:fd:4e:c4:56:fc:0f:b0:78:2a:
c5:28:1b:e6:6e:57:58:0b:b9:f9:9d:8d:90:c4:c0:
b6:e2:70:f4:6d:97:6b:60:ab:ff:1b:35:d3:03:67:
9f:72:19:57:8a:b9:53:4a:88:7c:95:c4:18:56:ea:
bb:36:e3:d3:2a:3f:50:9f:db:d0:0e:50:1b:33:53:
c1:bd:8a:b1:31:72:8c:e5:55:e2:4d:6c:9b:10:0c:
10:97:53:29:41:36:bc:56:9d:48:8b:5a:20:c3:5a:
64:67:38:7d:fb:d5:30:57:42:50:59:ce:94:02:42:
ab:fc:ef:15:d6:57:13:64:7a:8d:0f:78:c6:98:77:
39:1f:97:f5:b4:52:68:be:90:53:6b:ba:9f:a3:3a:
62:93:16:b8:b6:5a:7e:35:98:2f:3b:f3:38:3a:fe:
af:78:cb:f2:c9:26:d1:ea:de:d5:a9:a8:b2:4a:32:
da:63:cf:07:e4:98:a7:e7:6f:de:d9:e1:3a:0a:b9:
1c:5c:1f:9b:6a:08:08:8b:95:e1:f9:73:54:c9:30:
48:0c:4e:4c:08:de:17:34:f1:32:b5:00:64:b5:00:
b2:e0:b9:eb:ce:cd:2d:74:49:47:08:25:da:79:bb:
4e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:88:0D:5F:A0:67:5C:A3:37:F9:FC:70:06:0A:B6:DD:45:47:60:08
X509v3 Authority Key Identifier:
keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:28:f3:f6:4b:e1:9f:9d:f0:b8:81:a0:1a:3c:ea:6c:49:86:
0e:24:65:2d:69:94:b2:75:f4:3e:0a:11:df:be:0e:bc:86:c0:
4b:6d:e8:25:91:98:7a:43:26:13:b5:2d:3b:85:d5:8c:35:d9:
39:ea:40:b9:91:b5:af:85:e3:c9:bd:5b:0d:e0:10:d1:2f:bd:
46:d6:1c:64:7b:ef:f6:b3:41:9e:c4:e5:e5:e4:57:aa:bd:c2:
a5:45:90:ae:03:da:c2:7d:92:9c:ed:da:93:01:13:b2:6b:f0:
fe:1b:cb:5f:60:ed:d9:2d:f7:9c:83:b3:95:1d:14:5f:20:11:
45:e0:be:25:88:b1:84:a1:91:0f:01:da:03:5b:84:13:0e:d3:
48:ea:52:0a:5e:50:2f:22:b1:01:f7:c7:44:43:e7:29:ce:6b:
fc:9f:30:7e:81:ba:81:23:99:15:2a:fd:34:36:1b:ed:9c:e8:
d1:e7:9b:b8:4c:c9:df:fc:4c:9c:4a:21:59:9b:43:43:e1:32:
cf:23:f7:3e:c8:3b:c0:b0:9d:bd:d5:8f:f4:a1:7a:b8:3f:53:
01:2e:c2:ae:1f:4a:5f:5c:a6:1c:bf:31:e4:f0:52:4d:38:ca:
5a:e4:fd:01:f6:35:8b:4d:16:82:23:a1:72:ba:55:dd:55:d3:
80:d9:38:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qclYoXeJVJW4/DyUk69ypMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MjBiNzdkMDM1YjkxMmZmYTQwNmRmZGRmMjllM2EyOTYz
ZTY5MDQwHhcNMjYwMzI2MTQwMDI5WhcNMjYwMzI3MTQwMDI5WjAzMTEwLwYDVQQD
Eyg0Mzg4MGQ1ZmEwNjc1Y2EzMzdmOWZjNzAwNjBhYjZkZDQ1NDc2MDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstgi8k93jo/04tKI9JLdPnfDsWL9
TsRW/A+weCrFKBvmbldYC7n5nY2QxMC24nD0bZdrYKv/GzXTA2efchlXirlTSoh8
lcQYVuq7NuPTKj9Qn9vQDlAbM1PBvYqxMXKM5VXiTWybEAwQl1MpQTa8Vp1Ii1og
w1pkZzh9+9UwV0JQWc6UAkKr/O8V1lcTZHqND3jGmHc5H5f1tFJovpBTa7qfozpi
kxa4tlp+NZgvO/M4Ov6veMvyySbR6t7VqaiySjLaY88H5Jin52/e2eE6CrkcXB+b
aggIi5Xh+XNUyTBIDE5MCN4XNPEytQBktQCy4Lnrzs0tdElHCCXaebtOFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOIDV+gZ1yjN/n8cAYKtt1FR2AIMB8GA1UdIwQY
MBaAFIUgt30DW5Ev+kBt/d8p46KWPmkEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFNDM2ZRTmJrU182UUczOTN5bmpvcFktYVFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mMDQ2ODYtMzU5Yi00NzQ0LWI5MzAt
MWFmMjc5NjI1ZmQwLzEvaFNDM2ZRTmJrU182UUczOTN5bmpvcFktYVFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9mMDQ2ODYtMzU5Yi00NzQ0LWI5MzAtMWFmMjc5NjI1ZmQw
LzEvaFNDM2ZRTmJrU182UUczOTN5bmpvcFktYVFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyjz9kvh
n53wuIGgGjzqbEmGDiRlLWmUsnX0PgoR374OvIbAS23oJZGYekMmE7UtO4XVjDXZ
OepAuZG1r4Xjyb1bDeAQ0S+9RtYcZHvv9rNBnsTl5eRXqr3CpUWQrgPawn2SnO3a
kwETsmvw/hvLX2Dt2S33nIOzlR0UXyARReC+JYixhKGRDwHaA1uEEw7TSOpSCl5Q
LyKxAffHREPnKc5r/J8wfoG6gSOZFSr9NDYb7Zzo0eebuEzJ3/xMnEohWZtDQ+Ey
zyP3Psg7wLCdvdWP9KF6uD9TAS7Crh9KX1ymHL8x5PBSTTjKWuT9AfY1i00WgiOh
crpV3VXTgNk4LQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:56:40 2026 by rpki-client