Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
File: hSC3fQNbkS_6QG393ynjopY-aQQ.mft (raw, json)
Hash identifier: vE07CxCHKb9si9/McG+3dgzww4xmikE+6MVg5ysJB6c=
Subject key identifier: F9:9B:37:FB:58:CD:26:9C:60:D0:8D:D4:9F:11:E9:37:57:E5:1E:E5
Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Certificate issuer: /CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Certificate serial: 01A03970A784C3612D256BFB45359C56F4A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
Manifest number: 0C34
Signing time: Tue 25 Aug 2026 15:01:19 +0000
Manifest this update: Tue 25 Aug 2026 15:01:19 +0000
Manifest next update: Wed 26 Aug 2026 15:01:19 +0000
Files and hashes: 1: Sillb4nEsk9ouNCXzONZ9guaHgo.roa (hash: kbWq0G9OhRAUE6xI4of3xM29A3/8ukL1B/VOzXX1Z7E=)
2: W1-b2_39t40IJEIlY1fU30KPC7Y.roa (hash: DG8YwHrN9i6MKPRhk3te8aFn4nTPHySMexyk/ryRI0I=)
3: hSC3fQNbkS_6QG393ynjopY-aQQ.crl (hash: /CSOcEV8II8EfkhH9G90fCs3Oi4ghhADf4FkwuYrTuw=)
4: q3L-DLkESBWHiQCDrzrriCchSdo.asa (hash: J3JSTCDpkSsTV/MAnz+RFfxXP4Ryp2u8ZqcS0lN7eB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:70:a7:84:c3:61:2d:25:6b:fb:45:35:9c:56:f4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Validity
Not Before: Aug 25 15:01:19 2026 GMT
Not After : Aug 26 15:01:19 2026 GMT
Subject: CN=f99b37fb58cd269c60d08dd49f11e93757e51ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5d:79:b5:14:69:09:0c:9a:85:75:59:55:af:
33:de:f7:51:97:81:01:d4:97:08:9a:78:7d:7b:d7:
0e:5e:42:3a:93:92:9d:1b:d4:58:4f:9a:ce:9c:80:
bf:a9:93:44:29:08:97:76:77:7c:36:56:cf:99:f5:
15:c9:74:0a:33:82:bd:de:9c:3f:6e:57:ad:cf:42:
28:28:4b:ad:e5:10:15:52:d0:d7:33:57:a2:fa:28:
cd:a8:06:71:08:30:35:5f:fb:fa:5c:62:6d:c2:5d:
d7:7c:8c:ad:7c:46:0a:57:4a:ba:6f:cb:02:87:44:
30:a7:a5:c6:b1:fd:a6:49:e6:d3:88:61:24:c3:70:
29:0a:55:91:40:0d:c3:92:06:c0:53:87:ab:3f:69:
51:03:78:f7:57:6f:31:d0:88:d5:d5:fa:9a:09:2f:
dd:4d:7e:dd:c3:69:8b:e7:5c:24:35:9b:19:fa:7e:
9d:97:40:28:d2:42:ee:cd:55:6e:db:21:b6:93:ce:
c7:85:65:f0:c6:c5:b8:9c:93:e1:f2:5a:5a:eb:6d:
df:5b:4f:c3:da:c0:57:14:5c:17:7a:9f:2e:12:2f:
d0:1d:d4:e2:50:ad:59:00:27:fc:37:2e:96:78:df:
fb:b7:bd:17:b6:7c:83:aa:28:06:90:ca:d3:55:44:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9B:37:FB:58:CD:26:9C:60:D0:8D:D4:9F:11:E9:37:57:E5:1E:E5
X509v3 Authority Key Identifier:
keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ef:92:9f:9d:de:3d:36:d7:a1:a4:10:4f:ec:ad:ff:21:a5:
37:ac:3d:d1:b7:25:5c:24:7a:58:25:8f:14:4d:28:d7:aa:11:
a2:c4:ff:93:c3:34:f5:8c:16:ae:7d:98:69:8e:bb:4b:1f:fa:
00:44:c7:c5:f8:56:c7:bb:14:bf:7f:50:0f:a5:48:44:24:6a:
3e:75:11:7b:46:dc:27:f3:08:74:7a:bf:db:66:d0:c8:72:1f:
8d:09:b7:f9:8e:8f:c8:02:e1:6b:9c:84:50:95:14:fa:3d:1f:
1b:c7:b3:a3:d4:c6:3f:cd:72:fa:08:c0:4e:77:7e:95:35:f6:
22:f1:23:f5:8b:7f:69:08:5b:00:52:31:35:7a:a6:de:3d:dd:
b4:d7:33:05:bb:54:a5:79:dd:49:fd:00:80:fe:27:77:cc:db:
e2:d3:4c:e8:a9:93:93:e4:e8:59:0f:14:42:0c:27:f0:bd:e9:
1f:a6:55:27:58:f0:64:cf:d3:a6:a5:82:94:57:24:f3:db:ca:
86:fe:a3:91:5e:1c:d1:10:2c:ae:43:39:18:b3:13:d3:d1:39:
4d:43:47:70:53:cd:02:46:02:93:c8:b5:48:38:ae:73:97:a2:
33:62:37:8a:e4:98:4d:c4:b5:e7:c9:7f:af:c1:6c:96:5f:a4:
9f:20:16:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA5cKeEw2EtJWv7RTWcVvSkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MjBiNzdkMDM1YjkxMmZmYTQwNmRmZGRmMjllM2EyOTYz
ZTY5MDQwHhcNMjYwODI1MTUwMTE5WhcNMjYwODI2MTUwMTE5WjAzMTEwLwYDVQQD
EyhmOTliMzdmYjU4Y2QyNjljNjBkMDhkZDQ5ZjExZTkzNzU3ZTUxZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3F15tRRpCQyahXVZVa8z3vdRl4EB
1JcImnh9e9cOXkI6k5KdG9RYT5rOnIC/qZNEKQiXdnd8NlbPmfUVyXQKM4K93pw/
bletz0IoKEut5RAVUtDXM1ei+ijNqAZxCDA1X/v6XGJtwl3XfIytfEYKV0q6b8sC
h0Qwp6XGsf2mSebTiGEkw3ApClWRQA3DkgbAU4erP2lRA3j3V28x0IjV1fqaCS/d
TX7dw2mL51wkNZsZ+n6dl0Ao0kLuzVVu2yG2k87HhWXwxsW4nJPh8lpa623fW0/D
2sBXFFwXep8uEi/QHdTiUK1ZACf8Ny6WeN/7t70XtnyDqigGkMrTVUT36QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmbN/tYzSacYNCN1J8R6TdX5R7lMB8GA1UdIwQY
MBaAFIUgt30DW5Ev+kBt/d8p46KWPmkEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFNDM2ZRTmJrU182UUczOTN5bmpvcFktYVFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mMDQ2ODYtMzU5Yi00NzQ0LWI5MzAt
MWFmMjc5NjI1ZmQwLzEvaFNDM2ZRTmJrU182UUczOTN5bmpvcFktYVFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9mMDQ2ODYtMzU5Yi00NzQ0LWI5MzAtMWFmMjc5NjI1ZmQw
LzEvaFNDM2ZRTmJrU182UUczOTN5bmpvcFktYVFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiu+Sn53e
PTbXoaQQT+yt/yGlN6w90bclXCR6WCWPFE0o16oRosT/k8M09YwWrn2YaY67Sx/6
AETHxfhWx7sUv39QD6VIRCRqPnURe0bcJ/MIdHq/22bQyHIfjQm3+Y6PyALha5yE
UJUU+j0fG8ezo9TGP81y+gjATnd+lTX2IvEj9Yt/aQhbAFIxNXqm3j3dtNczBbtU
pXndSf0AgP4nd8zb4tNM6KmTk+ToWQ8UQgwn8L3pH6ZVJ1jwZM/TpqWClFck89vK
hv6jkV4c0RAsrkM5GLMT09E5TUNHcFPNAkYCk8i1SDiuc5eiM2I3iuSYTcS158l/
r8Fsll+knyAWwg==
-----END CERTIFICATE-----
Generated at Wed Aug 26 02:20:54 2026 by rpki-client