Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json)
Hash identifier: 2X3gQ7p8mTqeB9m/GQ7l3kpgoxBOq5fjw/z5zqOFBV4=
Subject key identifier: 3E:77:D6:D2:F6:62:03:A8:24:6F:BE:06:75:42:01:EC:0F:68:54:D6
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 019EE10B35CD764560086CDF68D64D299F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
Manifest number: 1A1D
Signing time: Fri 19 Jun 2026 18:01:08 +0000
Manifest this update: Fri 19 Jun 2026 18:01:08 +0000
Manifest next update: Sat 20 Jun 2026 18:01:08 +0000
Files and hashes: 1: 7Yt7YHW5_hNd1-7nBpalAtt61w8.roa (hash: Sw5wITefxDXkzEsytQjW7irD74Qb8SCqP1PXR/rp+n4=)
2: 8NBwLg2Jd6z7vXzz5jIrTEs15DE.roa (hash: BkN95demKqt6JdCZ/hfVmo8HPxrz006awTfG+ICNnYE=)
3: DXoYE9h6-cf7b4kJiKRH-fr7tRE.roa (hash: 6BlcLI7rLrM0W5ViObzFw6TFkGBe9ONPKQUf8EQH/Os=)
4: JaTBpeRblrIhygW_gFmMKDRL-xY.roa (hash: XOLrGZWvuFxuajEEcwc2+dK1DU4S8gk1g1IkQdEtpLk=)
5: M7DJ5sQeBaPrW-9SK5kjPY2w4ro.roa (hash: 49VJ22eio/lNKcwB9hzDWcB2B1aMdYReYFHkhobdgRo=)
6: NACXqr5PEhLFNTXPqOr5Jd1WxoE.roa (hash: y7FG6TVce6xsWRwawyAhANAnluoDpcuQi+mltgf7e1w=)
7: X7cs_9cXQnCA-Rr7Px3vNYdFzRE.roa (hash: NJmnnq1FIG8l/hwx+95PtO4bN/7PHxQ5kKMPFnnLBaM=)
8: dZEx9OWUD23x5uuc5D0RvUQs0J0.roa (hash: JOuDISNyvO4jasphChNmyvtme6bkbF6emnrz73RUw1U=)
9: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: QIlemX8l6Ej/xjvrm+WQRS7dlb5oFJUgP2EJmszoyPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:0b:35:cd:76:45:60:08:6c:df:68:d6:4d:29:9f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jun 19 18:01:08 2026 GMT
Not After : Jun 20 18:01:08 2026 GMT
Subject: CN=3e77d6d2f66203a8246fbe06754201ec0f6854d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fb:e2:a6:03:0d:b6:65:12:15:40:4f:46:af:
f5:ba:7a:88:57:52:c1:5a:c6:86:43:51:0c:73:86:
c9:76:6d:54:ab:f5:f8:c7:a1:eb:e2:97:fa:cf:8f:
56:bd:60:bd:bb:61:78:72:be:37:d3:63:3f:2d:73:
c2:25:e0:98:1d:f5:c3:1f:6b:e7:3c:a8:aa:97:41:
10:cf:87:9f:a7:4b:75:3c:33:13:6c:20:f5:47:0e:
bf:e8:6a:15:29:b0:7b:fa:ff:e9:e1:19:68:41:8a:
98:7f:29:3f:66:e8:e8:06:1d:17:16:ae:22:d3:29:
a7:82:3d:50:54:18:dc:ca:d7:fc:10:e2:84:d2:46:
ec:db:3b:cf:54:fc:ba:39:2a:ed:d2:e6:17:3a:41:
07:5e:ee:3a:78:28:69:9d:81:74:c6:36:f4:1a:74:
5f:32:c1:7f:a3:fc:99:cb:42:3f:65:cf:f4:53:8c:
51:cb:39:86:4b:e0:d2:6f:9f:13:bf:23:9c:92:4b:
0b:86:0d:5e:5a:bf:7a:0d:5d:6e:ec:5e:03:5f:3b:
cf:54:02:d0:29:31:28:f4:6e:66:9d:7f:c7:fc:8b:
53:58:2c:1c:a1:a2:40:e2:99:43:71:5e:8e:16:c0:
fe:53:8b:9f:68:e1:4d:f7:9c:0e:9b:6c:38:72:f0:
3c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:77:D6:D2:F6:62:03:A8:24:6F:BE:06:75:42:01:EC:0F:68:54:D6
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2c:bd:67:34:f7:56:6a:84:cf:2e:67:9a:d0:f6:b0:0a:bd:
23:45:47:33:5e:ae:1f:5f:c6:cb:60:c1:d2:25:c9:e7:6a:d1:
41:10:fd:33:7c:b3:e6:27:fe:ec:8e:17:b7:70:e4:c7:4c:e3:
a8:6c:7d:c5:d3:1d:d5:f3:eb:c3:23:3e:3d:91:24:22:65:66:
89:8f:f1:f3:15:bf:ec:f2:13:98:09:9b:b1:a2:e3:8e:1f:c6:
bf:8d:ab:50:9f:eb:e2:37:cd:27:91:24:7d:f5:d5:bd:69:c4:
c2:48:e9:bd:22:a2:66:5a:55:e6:20:39:6e:34:be:54:af:7c:
75:22:b1:34:b6:c3:2a:de:19:b6:9d:14:a8:12:6f:db:d9:1d:
4c:b8:0e:bb:89:09:8c:68:98:80:c0:2f:c8:ff:48:48:11:7e:
fe:d1:aa:97:e5:b3:52:b5:d5:8a:8e:51:a6:a5:09:d8:6c:53:
94:e8:c2:47:2f:c8:df:01:ac:58:15:c0:4b:ec:a1:3e:fe:f5:
fb:4a:d4:5e:1b:1b:28:1f:03:ae:2b:f1:a9:f1:18:9c:03:e3:
89:d6:12:ba:c8:9c:56:66:c3:0d:11:a3:95:e5:4a:e1:9a:47:
b0:6c:55:ac:8d:75:50:1b:ea:85:56:e6:e1:5c:3a:f5:3a:b6:
e4:b8:50:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 03:26:05 2026 by rpki-client