Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
File: hSC3fQNbkS_6QG393ynjopY-aQQ.mft (raw, json)
Hash identifier: p2nF1VabOtwhDI2HwypzVHP1eO69YAKPnNnRndfy1mY=
Subject key identifier: 38:1C:E7:8B:98:37:25:37:D9:F1:C0:E8:65:76:D4:AC:AF:67:E8:B9
Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Certificate issuer: /CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Certificate serial: 019CACEB8D20199096B5A623F1BF7E77F2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
Manifest number: 0A5B
Signing time: Mon 02 Mar 2026 05:00:44 +0000
Manifest this update: Mon 02 Mar 2026 05:00:44 +0000
Manifest next update: Tue 03 Mar 2026 05:00:44 +0000
Files and hashes: 1: AtB3A-GtrGG7ULQ6X8PKuFu-MDA.roa (hash: XelAFahqgXKc+akh+CQIFVNSjnh+4lCVUJF9Ga/50EI=)
2: Sillb4nEsk9ouNCXzONZ9guaHgo.roa (hash: kbWq0G9OhRAUE6xI4of3xM29A3/8ukL1B/VOzXX1Z7E=)
3: hSC3fQNbkS_6QG393ynjopY-aQQ.crl (hash: YK+0s3HPY+GrNf9YY0gRS6z0Vv3E4pF00kwQEUygVts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:8d:20:19:90:96:b5:a6:23:f1:bf:7e:77:f2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Validity
Not Before: Mar 2 05:00:44 2026 GMT
Not After : Mar 3 05:00:44 2026 GMT
Subject: CN=381ce78b98372537d9f1c0e86576d4acaf67e8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:56:1e:f7:66:20:31:ae:da:8d:ff:a3:57:
2d:0d:2f:ac:85:df:07:1b:8c:c2:36:69:e7:43:91:
fc:64:97:1b:4b:e6:0a:22:55:b4:a2:ab:91:79:6c:
33:ee:6c:4d:b4:a0:62:b3:25:b0:36:46:9a:49:f0:
55:8e:d0:1a:3b:fa:10:06:a0:ca:ec:6d:53:24:5e:
e8:f7:64:ad:f2:09:85:fb:79:1d:55:7e:cd:3e:d3:
8b:e4:72:42:10:8d:d6:3a:c1:b8:42:35:3d:a7:ed:
d2:05:bb:ee:1a:82:00:f4:9b:b0:1c:46:f5:74:32:
5c:60:48:be:a5:8f:a0:d0:06:ae:10:ab:5f:30:7c:
7a:12:fc:32:ac:21:53:a9:34:cd:3e:9a:c6:90:f5:
0b:10:41:0c:5f:2d:a6:8a:1a:34:dd:05:7f:b0:29:
f4:29:44:34:4b:1b:f3:be:4c:b4:cf:40:8e:88:c2:
c9:4f:e4:f2:5c:44:3b:1a:be:76:ff:3b:dc:94:a8:
ea:d5:62:cc:cc:48:9a:14:96:f1:b9:ee:34:ed:31:
0d:48:59:27:91:b0:43:42:c2:0e:2c:ed:9c:0a:33:
6c:d8:6b:3b:dc:b9:c4:3e:c5:28:ed:48:e0:67:07:
09:89:d3:bb:62:c9:c8:2c:21:48:ff:62:50:ad:1c:
ce:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1C:E7:8B:98:37:25:37:D9:F1:C0:E8:65:76:D4:AC:AF:67:E8:B9
X509v3 Authority Key Identifier:
keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d3:65:78:c3:17:84:a4:1c:ab:ce:c0:d3:35:5e:20:6a:0e:
5c:fc:5b:15:fa:a2:07:aa:16:58:bf:25:11:0a:09:12:22:cc:
43:08:2a:24:3d:81:9a:93:68:7c:ab:a1:4d:74:9f:7f:bc:d2:
15:cf:3a:90:13:59:07:92:75:59:8f:ec:97:2f:16:12:91:5b:
27:47:04:a6:82:90:ee:d9:77:a9:55:a3:3c:bb:fe:e2:b7:57:
f6:c6:54:ff:6e:ff:04:f1:91:9c:01:d9:5b:6f:9c:fd:9b:47:
b6:de:ee:73:1e:b8:72:a1:c6:96:a1:ea:61:76:a7:1f:5d:2d:
ff:1f:39:8c:41:6c:17:3b:ac:6f:53:b7:bb:bf:d1:83:fb:7b:
f3:37:34:38:19:9a:da:70:50:55:66:86:de:3b:6a:37:29:f1:
99:0d:0e:b9:56:af:57:19:4a:97:08:6b:5a:1b:fe:b3:53:b1:
5e:c3:36:7d:64:b8:a8:c2:dc:ca:57:13:8b:e7:4e:b1:14:24:
cd:6f:f4:e0:38:23:2d:6e:b5:65:c9:b6:c5:2b:ad:fa:a8:57:
16:5e:97:41:8f:7a:9e:4f:70:ae:d8:4a:75:f3:36:93:97:89:
66:90:bd:dc:ab:65:7b:18:68:ce:6f:e7:99:33:ed:96:a6:59:
fe:be:40:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:43 2026 by rpki-client