Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json)
Hash identifier: zsb+dcBQp1NYaH+VrdgdbRvC8ZIZMUJn10Yd5PtxlaU=
Subject key identifier: 4A:D7:AB:38:D5:F8:49:D8:DE:98:26:03:F2:FA:A1:13:40:5D:7D:81
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 019D0EC48D26A570B419378CBE70A684D21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
Manifest number: 192B
Signing time: Sat 21 Mar 2026 05:00:55 +0000
Manifest this update: Sat 21 Mar 2026 05:00:55 +0000
Manifest next update: Sun 22 Mar 2026 05:00:55 +0000
Files and hashes: 1: 7Yt7YHW5_hNd1-7nBpalAtt61w8.roa (hash: Sw5wITefxDXkzEsytQjW7irD74Qb8SCqP1PXR/rp+n4=)
2: 8NBwLg2Jd6z7vXzz5jIrTEs15DE.roa (hash: BkN95demKqt6JdCZ/hfVmo8HPxrz006awTfG+ICNnYE=)
3: DXoYE9h6-cf7b4kJiKRH-fr7tRE.roa (hash: 6BlcLI7rLrM0W5ViObzFw6TFkGBe9ONPKQUf8EQH/Os=)
4: JaTBpeRblrIhygW_gFmMKDRL-xY.roa (hash: XOLrGZWvuFxuajEEcwc2+dK1DU4S8gk1g1IkQdEtpLk=)
5: M7DJ5sQeBaPrW-9SK5kjPY2w4ro.roa (hash: 49VJ22eio/lNKcwB9hzDWcB2B1aMdYReYFHkhobdgRo=)
6: X7cs_9cXQnCA-Rr7Px3vNYdFzRE.roa (hash: NJmnnq1FIG8l/hwx+95PtO4bN/7PHxQ5kKMPFnnLBaM=)
7: dGwO4WJpN4KX0BwTJYtIabBzdBU.roa (hash: 9Dq2E6iLV/+UQl6/0txmPEH61p9nmtpYGc0Ymw+CmpA=)
8: dZEx9OWUD23x5uuc5D0RvUQs0J0.roa (hash: JOuDISNyvO4jasphChNmyvtme6bkbF6emnrz73RUw1U=)
9: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: 343uAKLB9zNUN2oUuqQxoPYJMh4eV53pdNpDu6O2XfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0e:c4:8d:26:a5:70:b4:19:37:8c:be:70:a6:84:d2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Mar 21 05:00:55 2026 GMT
Not After : Mar 22 05:00:55 2026 GMT
Subject: CN=4ad7ab38d5f849d8de982603f2faa113405d7d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a2:47:76:31:eb:71:55:8d:b6:c8:4e:06:b6:
21:60:ae:8e:b1:8e:86:b8:ef:8a:6b:29:25:3a:a2:
05:8f:bb:bc:06:d2:74:42:f0:f6:9e:af:3f:a9:ec:
e6:34:a0:44:b0:46:4a:44:77:eb:c4:e3:ae:a4:54:
4b:97:e8:64:bf:89:2e:34:3b:db:d3:4f:44:18:4b:
18:64:8c:bf:71:da:ae:58:63:a2:a4:35:33:51:ee:
ce:ff:a7:ab:1a:5b:bb:9a:ea:26:94:2c:09:c9:44:
6b:b5:58:67:74:c0:d5:17:9a:73:59:44:bb:3e:26:
74:d3:23:20:f5:d2:b1:5a:42:1a:60:48:62:a2:7c:
b4:19:9a:2d:e5:d4:e6:84:a0:dd:cd:7e:e2:e0:2e:
6b:02:5c:fd:c0:77:5a:af:1a:98:88:4e:76:f3:4a:
e8:d1:c5:dc:db:84:7c:5d:52:b6:d8:e3:6f:1a:d4:
f9:89:31:81:8b:55:9b:ec:3b:da:a8:cc:6c:c8:e1:
b0:c4:3e:a5:e5:eb:03:ad:0c:a2:a9:b0:cf:e0:8b:
0c:9f:79:0e:aa:35:56:4a:c3:5c:9b:0f:bc:bf:5b:
51:26:24:c7:11:f0:05:49:27:f1:16:d7:ec:0c:9e:
4b:c5:d8:b0:e3:db:de:1d:fc:46:49:39:43:6b:ad:
7c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D7:AB:38:D5:F8:49:D8:DE:98:26:03:F2:FA:A1:13:40:5D:7D:81
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:16:b2:69:03:c9:3a:d2:90:5c:31:6b:0b:b6:16:3b:4f:06:
3b:9e:b6:03:97:ba:f7:24:c5:f0:a0:74:ee:01:ee:c2:ae:07:
4e:59:8c:2e:4b:15:93:f9:ef:a5:f7:24:fe:08:47:4d:32:f2:
ee:25:04:dd:1a:2a:06:51:ad:ea:25:72:18:a0:aa:1e:02:09:
f3:79:e6:df:6b:c3:94:f9:c1:93:08:b4:71:d5:0d:e2:9e:c2:
03:09:99:6a:2e:9f:00:69:ac:5d:30:f7:42:30:92:21:89:9b:
bb:55:80:f4:ce:bf:8a:61:02:66:f8:9a:40:77:86:a8:7d:cf:
c5:33:7c:81:63:c4:74:9a:3f:54:6e:8e:94:bf:c9:cd:6e:43:
ff:25:c5:05:f6:3b:33:c9:18:ab:4c:19:6b:e0:a2:c5:4e:4b:
5a:a9:9d:11:ff:fa:51:ad:bb:5d:94:c7:e8:7c:6c:fc:33:2c:
93:f2:f6:f1:0c:41:3f:9e:f2:f5:20:1c:97:de:e0:22:a5:6f:
41:d4:23:5a:07:bb:a2:00:98:7b:87:69:0c:0e:59:46:9e:04:
5e:54:ac:4c:35:a3:3f:31:0f:1f:8d:8d:4f:ba:e6:8f:8a:a6:
5b:40:35:dc:15:7f:2d:33:d8:b4:ff:f6:a0:f5:32:a6:34:eb:
e5:fd:df:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:12:21 2026 by rpki-client