Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json)
Hash identifier: vi3H55NSI64ZE3iWbJWvpmTqWyIr8VXP2Y8rgUZZlvs=
Subject key identifier: 1A:13:07:41:18:CC:20:31:D8:B1:B7:2F:E8:DB:30:9B:F6:D1:21:5A
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 019DF8719F046239BF04181A630EC8995705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
Manifest number: 19A4
Signing time: Tue 05 May 2026 14:01:28 +0000
Manifest this update: Tue 05 May 2026 14:01:28 +0000
Manifest next update: Wed 06 May 2026 14:01:28 +0000
Files and hashes: 1: 7Yt7YHW5_hNd1-7nBpalAtt61w8.roa (hash: Sw5wITefxDXkzEsytQjW7irD74Qb8SCqP1PXR/rp+n4=)
2: 8NBwLg2Jd6z7vXzz5jIrTEs15DE.roa (hash: BkN95demKqt6JdCZ/hfVmo8HPxrz006awTfG+ICNnYE=)
3: DXoYE9h6-cf7b4kJiKRH-fr7tRE.roa (hash: 6BlcLI7rLrM0W5ViObzFw6TFkGBe9ONPKQUf8EQH/Os=)
4: JaTBpeRblrIhygW_gFmMKDRL-xY.roa (hash: XOLrGZWvuFxuajEEcwc2+dK1DU4S8gk1g1IkQdEtpLk=)
5: M7DJ5sQeBaPrW-9SK5kjPY2w4ro.roa (hash: 49VJ22eio/lNKcwB9hzDWcB2B1aMdYReYFHkhobdgRo=)
6: X7cs_9cXQnCA-Rr7Px3vNYdFzRE.roa (hash: NJmnnq1FIG8l/hwx+95PtO4bN/7PHxQ5kKMPFnnLBaM=)
7: dGwO4WJpN4KX0BwTJYtIabBzdBU.roa (hash: 9Dq2E6iLV/+UQl6/0txmPEH61p9nmtpYGc0Ymw+CmpA=)
8: dZEx9OWUD23x5uuc5D0RvUQs0J0.roa (hash: JOuDISNyvO4jasphChNmyvtme6bkbF6emnrz73RUw1U=)
9: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: Ue4PGuDAgXwYAMCbL2S9Hptw5uZPe76PL67ycLeHSVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:71:9f:04:62:39:bf:04:18:1a:63:0e:c8:99:57:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: May 5 14:01:28 2026 GMT
Not After : May 6 14:01:28 2026 GMT
Subject: CN=1a13074118cc2031d8b1b72fe8db309bf6d1215a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:1d:1a:ae:2f:8e:7a:e7:71:49:72:64:56:
e3:ff:74:9f:dd:76:f0:14:6c:a4:1b:cc:5e:c1:d2:
f3:2d:9a:4f:88:bd:f8:5a:0e:2f:6f:b8:c4:4d:84:
98:ec:32:dd:38:b1:db:a3:0d:90:eb:f9:ff:72:2d:
4a:3a:82:90:de:32:bc:44:15:01:6a:a6:67:ac:2a:
8e:06:23:bf:42:aa:67:1b:61:d3:36:ac:cb:51:eb:
fb:63:32:6f:31:e2:de:dc:09:8d:80:8c:68:ca:b2:
d3:e4:9b:9e:97:e5:c6:0a:72:2d:f5:ab:0e:9e:d9:
05:d6:7a:82:d7:79:0c:21:37:00:27:bf:fe:5e:07:
e7:c2:fb:7b:d7:99:72:09:df:f7:c7:62:31:e0:7b:
48:e6:97:33:ed:36:fd:09:6d:8d:57:10:b5:23:77:
d6:bc:51:0b:ab:fe:67:f6:86:39:f3:2a:4b:cb:9a:
84:f5:5f:27:a3:95:ae:ef:42:92:6f:ee:2d:71:81:
9a:2d:4c:b6:3d:80:14:fe:cc:f5:0b:ad:c2:26:f8:
d4:b6:82:95:57:18:4d:1a:d8:61:ee:66:2e:80:45:
a1:49:e0:e2:a5:70:cf:ba:78:9f:5e:b0:f1:57:54:
d6:f1:ad:61:ae:e1:02:20:d8:e0:18:0b:ac:5f:fe:
a1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:13:07:41:18:CC:20:31:D8:B1:B7:2F:E8:DB:30:9B:F6:D1:21:5A
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:eb:25:50:93:38:ed:ea:00:db:86:ef:66:91:58:04:6e:1a:
84:7d:62:01:79:48:90:e8:47:fb:4f:1f:66:c6:7a:10:54:c1:
90:da:8f:24:a0:e8:45:7e:f4:c8:b2:bc:86:ab:b2:93:4d:3c:
64:8f:4a:0a:08:cd:27:0f:a9:c2:f8:9c:6a:bd:6d:5d:46:64:
19:d7:81:70:ea:37:19:46:5b:81:fd:a5:98:19:df:5c:64:d5:
37:0d:24:20:d3:4b:dc:9b:c1:37:b2:bb:37:91:7a:85:4a:7a:
70:d5:6d:39:ac:96:96:5a:48:32:e4:fc:a7:eb:b7:9d:b5:b0:
2f:4c:d0:ce:97:3d:fd:28:9b:e6:e7:f1:c5:4a:00:6b:5a:6a:
49:a0:aa:7d:d1:dd:d1:9b:78:f7:db:f4:68:28:ed:b8:23:1f:
78:f5:20:95:42:4c:32:e7:e0:c1:8e:3b:0d:ff:09:55:02:a7:
a8:3d:6b:65:a3:7f:b0:dc:ea:5b:eb:d4:8b:3b:94:fa:25:2c:
f7:0a:68:ed:1c:52:5b:dc:e2:77:dc:e5:12:85:74:c8:c9:bf:
13:f5:a1:d8:94:6e:82:25:3c:ed:9b:c8:09:13:04:de:a3:19:
e7:76:43:f3:a6:5d:7d:de:d9:40:21:cf:28:3c:11:55:4c:cc:
20:bb:3e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:20:07 2026 by rpki-client