Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json)
Hash identifier: AcgWmIw2LXsxdcSX0oab1a8bwXAvk5sQ1Zmx7rDdfJg=
Subject key identifier: 16:C6:9E:CA:38:3C:02:AD:ED:EE:D3:90:13:57:E8:DF:35:89:43:E9
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 019FCAB84D7312C69FB8FEF5F83023C041FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
Manifest number: 1A96
Signing time: Tue 04 Aug 2026 03:01:43 +0000
Manifest this update: Tue 04 Aug 2026 03:01:43 +0000
Manifest next update: Wed 05 Aug 2026 03:01:43 +0000
Files and hashes: 1: 7Yt7YHW5_hNd1-7nBpalAtt61w8.roa (hash: Sw5wITefxDXkzEsytQjW7irD74Qb8SCqP1PXR/rp+n4=)
2: 8NBwLg2Jd6z7vXzz5jIrTEs15DE.roa (hash: BkN95demKqt6JdCZ/hfVmo8HPxrz006awTfG+ICNnYE=)
3: DXoYE9h6-cf7b4kJiKRH-fr7tRE.roa (hash: 6BlcLI7rLrM0W5ViObzFw6TFkGBe9ONPKQUf8EQH/Os=)
4: JaTBpeRblrIhygW_gFmMKDRL-xY.roa (hash: XOLrGZWvuFxuajEEcwc2+dK1DU4S8gk1g1IkQdEtpLk=)
5: M7DJ5sQeBaPrW-9SK5kjPY2w4ro.roa (hash: 49VJ22eio/lNKcwB9hzDWcB2B1aMdYReYFHkhobdgRo=)
6: NACXqr5PEhLFNTXPqOr5Jd1WxoE.roa (hash: y7FG6TVce6xsWRwawyAhANAnluoDpcuQi+mltgf7e1w=)
7: X7cs_9cXQnCA-Rr7Px3vNYdFzRE.roa (hash: NJmnnq1FIG8l/hwx+95PtO4bN/7PHxQ5kKMPFnnLBaM=)
8: dZEx9OWUD23x5uuc5D0RvUQs0J0.roa (hash: JOuDISNyvO4jasphChNmyvtme6bkbF6emnrz73RUw1U=)
9: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: nDk7f8o4yULk6brfJDXJohdmEJWNYlo8plU+OuHAHR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ca:b8:4d:73:12:c6:9f:b8:fe:f5:f8:30:23:c0:41:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Aug 4 03:01:43 2026 GMT
Not After : Aug 5 03:01:43 2026 GMT
Subject: CN=16c69eca383c02adedeed3901357e8df358943e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:73:bc:10:ad:d0:7f:21:3a:28:db:87:24:
f5:d3:d6:e6:9e:6c:6e:c7:7d:a4:78:89:a2:23:fd:
84:44:c3:d4:e1:95:c4:c3:f6:99:43:da:2a:f6:4b:
f9:7d:7c:ea:ab:da:51:6b:aa:41:45:20:10:a4:73:
d1:8a:5f:d2:c9:de:fe:26:ab:bb:fc:7e:fa:bd:08:
3d:f5:00:35:7f:50:f0:8c:cb:02:0b:9b:a7:68:0b:
37:47:13:9c:55:b4:8a:b7:8d:e1:e0:7e:7a:1c:44:
97:87:f0:46:ee:94:5c:f9:96:b6:26:d6:7e:a4:97:
a1:ac:da:2a:c8:e0:f0:60:e1:a3:0c:41:9a:90:6c:
07:59:c8:54:e1:87:99:ec:17:b4:7e:d6:87:8d:46:
e0:2c:fa:a6:70:18:fd:cf:c9:5a:ef:b1:35:28:8a:
73:61:b8:2c:46:24:1d:81:e8:65:df:9d:0a:87:64:
14:c2:a7:39:54:e2:67:f0:5d:02:93:30:dc:0c:6b:
fb:39:3b:1e:f2:eb:b9:a6:d9:e7:98:de:8e:f2:e8:
e7:61:a6:c8:f4:dc:35:01:99:ee:64:c8:06:b6:1f:
b1:57:89:4a:63:b5:26:82:23:b7:16:61:56:54:3d:
53:0f:16:65:9b:e7:14:19:ba:01:e0:af:f0:4e:38:
31:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C6:9E:CA:38:3C:02:AD:ED:EE:D3:90:13:57:E8:DF:35:89:43:E9
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:6c:5b:25:6a:d0:4b:1b:a3:7d:53:b9:25:a8:94:81:b4:a8:
bb:ad:a9:39:d7:21:30:7d:d6:84:5d:c1:38:73:8d:0e:f7:65:
a7:af:53:1d:1e:47:74:a8:1a:de:75:4e:d9:b5:88:6d:01:5e:
3e:f8:75:9d:f6:82:7e:8f:a9:ee:d7:51:3d:7e:71:ba:55:b9:
57:b8:4f:a1:62:f5:ec:58:2e:74:84:2a:01:06:1d:a7:2f:45:
1b:75:8e:60:4f:58:28:48:53:06:ab:be:1f:15:ad:5d:40:50:
d8:79:37:bd:17:65:2c:bd:99:a3:6a:b3:cd:2b:d4:fa:e4:7e:
0b:54:be:43:ff:ae:0f:22:c6:1a:cb:fd:c2:f9:08:45:ef:f5:
d2:3d:70:a6:1b:2e:9c:9e:1e:45:59:14:f3:7b:89:aa:25:ce:
30:5b:14:e4:69:b9:37:be:29:5b:a3:9b:6f:a5:11:9f:b7:4f:
48:4b:5e:6c:97:f4:61:9f:78:22:46:5f:d5:de:a0:b5:b7:81:
b0:64:04:4d:9a:3f:91:a9:6c:eb:86:c9:3f:65:0d:fb:dd:0a:
92:05:8e:02:f5:86:b9:2f:2f:85:b9:56:8f:c6:d6:7a:43:f1:
5f:ac:dd:c8:19:a4:d6:a1:05:86:02:62:9b:c8:33:2d:59:d0:
b7:39:1a:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/KuE1zEsafuP71+DAjwEH7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk
ZGJkZTUwHhcNMjYwODA0MDMwMTQzWhcNMjYwODA1MDMwMTQzWjAzMTEwLwYDVQQD
EygxNmM2OWVjYTM4M2MwMmFkZWRlZWQzOTAxMzU3ZThkZjM1ODk0M2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkpzvBCt0H8hOijbhyT109bmnmxu
x32keImiI/2ERMPU4ZXEw/aZQ9oq9kv5fXzqq9pRa6pBRSAQpHPRil/Syd7+Jqu7
/H76vQg99QA1f1DwjMsCC5unaAs3RxOcVbSKt43h4H56HESXh/BG7pRc+Za2JtZ+
pJehrNoqyODwYOGjDEGakGwHWchU4YeZ7Be0ftaHjUbgLPqmcBj9z8la77E1KIpz
YbgsRiQdgehl350Kh2QUwqc5VOJn8F0CkzDcDGv7OTse8uu5ptnnmN6O8ujnYabI
9Nw1AZnuZMgGth+xV4lKY7UmgiO3FmFWVD1TDxZlm+cUGboB4K/wTjgxxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbGnso4PAKt7e7TkBNX6N81iUPpMB8GA1UdIwQY
MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt
NDM3Mzk0OTM4YzUyLzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy
LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr2xbJWrQ
SxujfVO5JaiUgbSou62pOdchMH3WhF3BOHONDvdlp69THR5HdKga3nVO2bWIbQFe
Pvh1nfaCfo+p7tdRPX5xulW5V7hPoWL17FgudIQqAQYdpy9FG3WOYE9YKEhTBqu+
HxWtXUBQ2Hk3vRdlLL2Zo2qzzSvU+uR+C1S+Q/+uDyLGGsv9wvkIRe/10j1wphsu
nJ4eRVkU83uJqiXOMFsU5Gm5N74pW6Obb6URn7dPSEtebJf0YZ94IkZf1d6gtbeB
sGQETZo/kals64bJP2UN+90KkgWOAvWGuS8vhblWj8bWekPxX6zdyBmk1qEFhgJi
m8gzLVnQtzkaaQ==
-----END CERTIFICATE-----
Generated at Tue Aug 4 08:52:25 2026 by rpki-client