Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
File: hSC3fQNbkS_6QG393ynjopY-aQQ.mft (raw, json)
Hash identifier: 9a+unZH1a4osojtnz3HT98j6i3MmJtK3l7SS9H2oxF8=
Subject key identifier: D0:70:C9:ED:8F:C5:38:9C:F1:CB:63:7C:CA:98:31:62:80:6E:43:8A
Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Certificate issuer: /CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Certificate serial: 01A0EB1C79F55EDF976C42723C0852194853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
Manifest number: 0C90
Signing time: Tue 29 Sep 2026 03:01:46 +0000
Manifest this update: Tue 29 Sep 2026 03:01:46 +0000
Manifest next update: Wed 30 Sep 2026 03:01:46 +0000
Files and hashes: 1: Sillb4nEsk9ouNCXzONZ9guaHgo.roa (hash: kbWq0G9OhRAUE6xI4of3xM29A3/8ukL1B/VOzXX1Z7E=)
2: W1-b2_39t40IJEIlY1fU30KPC7Y.roa (hash: DG8YwHrN9i6MKPRhk3te8aFn4nTPHySMexyk/ryRI0I=)
3: hSC3fQNbkS_6QG393ynjopY-aQQ.crl (hash: D1eqz9X3GbpnuSYQc402EZ6v4MmjeSbZlZ92eEe7Wb4=)
4: q3L-DLkESBWHiQCDrzrriCchSdo.asa (hash: J3JSTCDpkSsTV/MAnz+RFfxXP4Ryp2u8ZqcS0lN7eB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:79:f5:5e:df:97:6c:42:72:3c:08:52:19:48:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Validity
Not Before: Sep 29 03:01:46 2026 GMT
Not After : Sep 30 03:01:46 2026 GMT
Subject: CN=d070c9ed8fc5389cf1cb637cca983162806e438a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4f:56:d1:fe:9f:17:3f:de:5c:77:1b:1a:f3:
41:52:35:84:95:68:51:ab:a2:dd:ce:3d:67:69:f6:
f1:37:b8:94:f4:88:50:2f:3b:13:b3:1f:c9:58:1c:
af:53:df:2a:07:a8:be:4c:40:e0:47:c5:17:c3:61:
b6:63:43:24:32:c0:84:2f:c1:eb:80:11:02:07:22:
0f:c2:2b:85:a9:65:4c:eb:61:d9:ca:ba:03:98:41:
59:e3:16:0c:d4:e7:2d:64:e8:a6:78:22:2d:14:7a:
e3:5d:2b:8d:f2:d7:f7:49:49:c3:6a:f5:d5:8e:7a:
62:a7:ee:df:a7:7a:f0:fe:54:0f:31:53:6b:72:1b:
c1:58:e2:1c:4b:8d:16:0b:7c:17:70:75:e6:38:d9:
78:e1:12:2a:79:2f:2e:68:5d:1b:dc:61:aa:48:4c:
56:b2:68:bb:5e:f5:7e:69:c4:3d:7b:57:9e:76:9d:
5d:d2:af:28:b6:39:b7:4d:a1:6b:74:0f:0f:ee:67:
76:d4:b3:a0:b0:70:c0:d8:b9:18:bd:b1:ac:27:d6:
7a:bc:a4:91:7d:ad:b1:af:97:fd:0a:3d:f7:83:2c:
bd:45:76:58:57:cf:f9:0d:80:47:b5:7e:45:a4:79:
1a:ca:12:5d:e4:ac:96:34:a5:30:ef:2b:9e:07:74:
ee:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:70:C9:ED:8F:C5:38:9C:F1:CB:63:7C:CA:98:31:62:80:6E:43:8A
X509v3 Authority Key Identifier:
keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6e:2b:9a:d6:c9:8e:03:84:6a:76:6d:a4:24:96:7c:d1:41:
c5:76:ef:41:86:1b:d3:bb:d0:28:ca:24:83:df:0f:ae:9b:b2:
4b:b2:35:08:8d:a8:70:06:62:ac:91:d1:04:6e:d6:45:2c:26:
2a:64:b6:aa:23:5c:7f:96:ad:84:81:4e:64:83:90:de:4e:b2:
43:9a:97:d1:25:32:72:19:50:53:c1:7b:5e:97:77:fa:fe:3d:
45:d7:d5:ef:2c:c8:ad:93:f3:6d:10:84:25:91:4a:b9:88:10:
aa:38:0d:21:7b:ec:8e:25:53:9d:a7:86:5d:81:d8:d7:ad:6a:
0f:f3:c6:5e:dd:b9:28:68:ad:3b:29:9b:fe:50:08:5e:98:20:
ed:97:f9:8b:e2:d4:83:91:19:e2:db:a1:06:4f:66:da:dc:54:
f8:0a:a9:1f:db:64:64:e0:04:97:e6:1f:87:b9:9e:7e:f8:6c:
7d:f2:7d:b2:c1:3e:9e:b0:b5:09:7f:96:01:3c:45:77:60:60:
96:d8:ca:1e:b0:ab:e1:0b:03:4e:65:53:86:dc:3b:de:3e:4e:
61:a7:8c:1b:88:cf:b4:b6:10:46:94:ee:84:92:b5:38:ea:d5:
7f:b2:78:3c:aa:1b:83:64:c0:13:fd:69:6f:2e:90:b6:3b:67:
82:fd:34:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:35:54 2026 by rpki-client