Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
File: hSC3fQNbkS_6QG393ynjopY-aQQ.mft (raw, json)
Hash identifier: EXpe05Bh8a+yN5w34i9R6J5zp6DjiQLJ+VTxotXflcE=
Subject key identifier: 58:24:BE:47:1E:59:A8:5F:93:5C:08:C0:53:72:80:3D:08:2F:CB:BB
Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Certificate issuer: /CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Certificate serial: 019D9E520DBE176F39388B6072919A1201B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
Manifest number: 0AD8
Signing time: Sat 18 Apr 2026 02:01:10 +0000
Manifest this update: Sat 18 Apr 2026 02:01:10 +0000
Manifest next update: Sun 19 Apr 2026 02:01:10 +0000
Files and hashes: 1: AtB3A-GtrGG7ULQ6X8PKuFu-MDA.roa (hash: XelAFahqgXKc+akh+CQIFVNSjnh+4lCVUJF9Ga/50EI=)
2: Sillb4nEsk9ouNCXzONZ9guaHgo.roa (hash: kbWq0G9OhRAUE6xI4of3xM29A3/8ukL1B/VOzXX1Z7E=)
3: hSC3fQNbkS_6QG393ynjopY-aQQ.crl (hash: fLzOuTmGrXbbSE/AmcpRb3RKo02WGKMhyai8WhdZRLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:52:0d:be:17:6f:39:38:8b:60:72:91:9a:12:01:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Validity
Not Before: Apr 18 02:01:10 2026 GMT
Not After : Apr 19 02:01:10 2026 GMT
Subject: CN=5824be471e59a85f935c08c05372803d082fcbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:b2:03:72:0d:ac:b2:95:6b:a7:56:c9:32:
f8:97:e5:3e:0e:87:ee:c5:e1:2d:89:23:7b:09:01:
f2:5c:4e:3f:84:e7:1a:46:1c:f3:4a:1d:ba:83:93:
be:e0:31:0e:4e:f9:bb:87:7f:92:db:a5:57:c1:5e:
70:87:06:6e:ad:34:5d:f8:f9:68:0e:1c:45:d5:72:
20:07:40:42:c8:ec:b0:d5:1d:62:97:d3:63:e5:61:
15:d6:d7:d1:c1:4b:5e:dc:b2:a2:40:1f:d4:f7:6f:
ea:cf:ad:d2:a8:70:1e:14:4e:18:c8:58:e7:56:0d:
75:94:bf:ea:ac:ed:28:85:40:d6:40:df:1d:0d:c7:
3f:75:8e:04:6c:27:11:df:48:b5:5d:27:92:8b:42:
35:eb:2e:fe:7e:fa:7c:43:52:2c:f3:d4:e1:89:05:
03:28:03:1b:58:b9:1f:17:f6:29:7d:a0:3b:e8:d5:
e0:54:6b:64:70:26:3a:63:fd:0b:85:55:31:f7:a5:
da:4c:93:b0:cb:61:bc:01:07:4b:09:33:ed:ef:d3:
14:47:ee:86:e5:2c:4f:d6:b7:09:fb:19:f2:0e:e6:
20:f0:76:8b:33:e9:2b:2b:7b:c1:c4:ec:f2:86:9f:
70:60:db:51:1f:12:34:85:7b:6c:cc:e8:b0:59:fd:
e7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:24:BE:47:1E:59:A8:5F:93:5C:08:C0:53:72:80:3D:08:2F:CB:BB
X509v3 Authority Key Identifier:
keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:4d:53:e8:a3:84:a7:2c:37:b6:24:59:28:fc:f2:e4:60:2a:
de:e6:fb:3b:96:16:37:6d:80:a0:b0:be:2d:c3:15:bc:fa:94:
1e:77:4d:10:2c:44:6a:78:e1:4d:a2:70:f7:cb:70:a9:6a:97:
0f:e6:c3:5c:58:b2:30:f1:92:7f:4e:b9:a6:4b:8a:b4:e1:0a:
4f:d0:94:4f:bc:ee:87:f6:26:f9:68:fc:b0:9e:dd:c9:6e:c3:
72:5b:43:e3:ef:1b:07:6d:3a:04:95:03:9c:2f:2b:a7:9a:8e:
37:cd:e4:b4:6d:98:49:c4:19:40:f8:f5:86:79:36:7b:f1:b1:
b7:59:a2:b3:3a:e6:af:87:0f:6d:97:b4:d7:98:d7:66:19:20:
e9:69:b5:fd:11:50:fb:7a:74:9f:36:a6:90:53:c3:99:d4:27:
57:f7:33:b7:50:46:66:a6:9d:d6:5a:fe:64:e8:f6:f5:0b:05:
65:51:c3:a6:19:a5:52:ee:bc:48:61:44:0a:93:4c:24:74:15:
93:2f:ce:bf:25:cb:63:90:d7:47:b0:01:7d:66:30:33:90:d4:
b3:b1:ba:27:15:3e:a4:21:98:39:b3:9a:ac:36:09:b0:cb:60:
88:f8:a0:7b:41:33:bb:1d:55:d9:a7:a5:10:aa:3c:b7:bc:3a:
ac:b8:6c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:40:06 2026 by rpki-client