Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json)
Hash identifier: rKpwotO0anP0c2+qsCzPFfgXWVRynC7XU6+JDAPqJLk=
Subject key identifier: AD:74:2A:82:3D:34:40:10:4D:42:C4:86:C0:91:EB:CF:4D:AF:FE:85
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 01A0B4845813767B45558CE47A9E85844A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
Manifest number: 1B1B
Signing time: Fri 18 Sep 2026 12:36:07 +0000
Manifest this update: Fri 18 Sep 2026 12:36:07 +0000
Manifest next update: Sat 19 Sep 2026 12:36:07 +0000
Files and hashes: 1: 7Yt7YHW5_hNd1-7nBpalAtt61w8.roa (hash: Sw5wITefxDXkzEsytQjW7irD74Qb8SCqP1PXR/rp+n4=)
2: 8NBwLg2Jd6z7vXzz5jIrTEs15DE.roa (hash: BkN95demKqt6JdCZ/hfVmo8HPxrz006awTfG+ICNnYE=)
3: DXoYE9h6-cf7b4kJiKRH-fr7tRE.roa (hash: 6BlcLI7rLrM0W5ViObzFw6TFkGBe9ONPKQUf8EQH/Os=)
4: JaTBpeRblrIhygW_gFmMKDRL-xY.roa (hash: XOLrGZWvuFxuajEEcwc2+dK1DU4S8gk1g1IkQdEtpLk=)
5: NACXqr5PEhLFNTXPqOr5Jd1WxoE.roa (hash: y7FG6TVce6xsWRwawyAhANAnluoDpcuQi+mltgf7e1w=)
6: X7cs_9cXQnCA-Rr7Px3vNYdFzRE.roa (hash: NJmnnq1FIG8l/hwx+95PtO4bN/7PHxQ5kKMPFnnLBaM=)
7: dZEx9OWUD23x5uuc5D0RvUQs0J0.roa (hash: JOuDISNyvO4jasphChNmyvtme6bkbF6emnrz73RUw1U=)
8: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: H0xDlWA3VSZQ1KH/DDapIoVWvQ1qnNZAwdUArfwIb2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 12:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:84:58:13:76:7b:45:55:8c:e4:7a:9e:85:84:4a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Sep 18 12:36:07 2026 GMT
Not After : Sep 19 12:36:07 2026 GMT
Subject: CN=ad742a823d3440104d42c486c091ebcf4daffe85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1c:fc:12:3a:5e:04:a6:29:17:8b:61:16:95:
9e:90:43:e2:9e:81:fe:19:8e:2c:54:df:3a:8d:b3:
30:1f:ff:60:ee:5e:8f:b2:b2:b1:60:94:65:0a:50:
59:c7:cd:fd:79:f8:af:49:f0:ee:1f:d9:16:6f:22:
7d:0b:fb:4c:7a:ae:16:86:fb:70:9f:63:04:a5:f3:
83:8a:3b:94:09:fa:c7:89:52:bc:1a:30:78:c9:6f:
da:67:39:7e:78:3a:d5:13:ae:f3:bd:9c:76:6d:fc:
24:95:7c:bb:b6:97:f7:e5:83:5e:0b:29:96:56:59:
69:46:8f:cb:13:69:f1:04:91:36:4c:97:13:39:08:
95:62:bd:4b:54:6b:f6:d0:90:de:e4:91:f8:50:67:
39:0e:6f:d5:b7:ea:28:af:7a:07:95:d4:3c:db:2c:
8c:35:24:e8:80:95:73:a4:e6:df:b1:4c:33:9e:79:
a1:d6:ec:76:dc:b2:9d:5f:5c:76:3f:c8:87:6e:01:
69:99:f5:12:7b:33:da:9f:47:3f:16:89:39:8d:66:
1b:07:f9:02:ac:8a:6d:f6:ab:bd:db:f7:7b:09:37:
95:bf:03:0d:c4:74:02:72:4f:a3:3f:82:87:69:6c:
63:55:e8:91:25:a9:74:3b:ce:cb:d1:21:da:83:7e:
79:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:74:2A:82:3D:34:40:10:4D:42:C4:86:C0:91:EB:CF:4D:AF:FE:85
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:61:86:64:95:c3:1d:b9:12:3e:84:0e:b2:df:80:28:44:21:
56:7a:12:b2:c7:48:83:6a:fb:8d:90:21:97:46:f5:41:c9:48:
e9:73:4e:5e:5b:ed:c5:b6:af:05:e6:3f:69:fa:38:e7:ee:2f:
d0:7e:1f:e0:62:40:53:0c:72:f6:fc:be:54:d6:cf:bb:2a:2b:
7f:a1:d0:57:ee:ba:1b:76:ab:5b:4b:35:8e:cb:46:92:4d:34:
70:3e:e7:9b:ec:26:f9:eb:ac:96:ee:6a:23:09:45:9c:7c:56:
95:50:c1:a4:b9:70:0b:a5:ff:b0:25:1e:bb:8d:1a:34:63:98:
8a:35:e2:dd:6b:3e:c7:ac:a2:f0:34:ac:d3:59:e0:bf:a0:20:
d6:22:87:6a:52:c5:e2:58:0c:73:14:e7:80:a6:ec:34:45:ed:
79:36:d5:b9:7c:90:fb:1e:b5:c0:5c:d4:c7:a0:87:53:bc:22:
1d:f7:ec:33:71:58:6a:f6:b4:eb:5b:cd:83:58:7f:7f:5d:84:
15:a9:fa:ee:22:08:58:8d:ca:98:0c:78:12:7d:32:cf:9b:87:
86:79:de:dd:ac:e4:4c:18:5b:01:1e:76:ee:e2:48:ae:ab:d1:
bb:fb:9b:50:b4:8b:20:1e:91:50:14:d1:ed:39:95:18:62:8f:
e7:df:5e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:05:24 2026 by rpki-client