Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json)
Hash identifier: 40c03ztN98Ams2agMla3GZ+PKBh3qF1gM/wi1T2+GN8=
Subject key identifier: 02:04:31:D3:17:7E:C3:CC:6F:08:9D:63:60:27:A6:70:A8:32:21:BA
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 01A1A5CA833C62A77DC31C35E877129B9A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
Manifest number: 1B98
Signing time: Wed 04 Nov 2026 09:01:14 +0000
Manifest this update: Wed 04 Nov 2026 09:01:14 +0000
Manifest next update: Thu 05 Nov 2026 09:01:14 +0000
Files and hashes: 1: 7Yt7YHW5_hNd1-7nBpalAtt61w8.roa (hash: Sw5wITefxDXkzEsytQjW7irD74Qb8SCqP1PXR/rp+n4=)
2: 8NBwLg2Jd6z7vXzz5jIrTEs15DE.roa (hash: BkN95demKqt6JdCZ/hfVmo8HPxrz006awTfG+ICNnYE=)
3: DXoYE9h6-cf7b4kJiKRH-fr7tRE.roa (hash: 6BlcLI7rLrM0W5ViObzFw6TFkGBe9ONPKQUf8EQH/Os=)
4: JaTBpeRblrIhygW_gFmMKDRL-xY.roa (hash: XOLrGZWvuFxuajEEcwc2+dK1DU4S8gk1g1IkQdEtpLk=)
5: NACXqr5PEhLFNTXPqOr5Jd1WxoE.roa (hash: y7FG6TVce6xsWRwawyAhANAnluoDpcuQi+mltgf7e1w=)
6: X7cs_9cXQnCA-Rr7Px3vNYdFzRE.roa (hash: NJmnnq1FIG8l/hwx+95PtO4bN/7PHxQ5kKMPFnnLBaM=)
7: dZEx9OWUD23x5uuc5D0RvUQs0J0.roa (hash: JOuDISNyvO4jasphChNmyvtme6bkbF6emnrz73RUw1U=)
8: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: mBhmhMxI3PV0oC4lAO0/yB9ai7RxVLfKsw6LWaFLFew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:ca:83:3c:62:a7:7d:c3:1c:35:e8:77:12:9b:9a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Nov 4 09:01:14 2026 GMT
Not After : Nov 5 09:01:14 2026 GMT
Subject: CN=020431d3177ec3cc6f089d636027a670a83221ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:6a:6a:3e:0d:71:44:ea:8a:bf:cb:53:4e:
22:f1:4e:38:27:a1:a1:e8:51:77:07:0b:7b:1c:ea:
77:c5:47:38:03:ba:77:5c:00:9f:18:e8:8b:f3:32:
c7:b2:5b:2b:55:63:18:5d:06:0a:2a:51:48:14:e1:
48:92:be:69:98:18:ae:2d:f1:5b:a6:4b:30:b6:3c:
61:a6:2d:e8:bf:da:fc:61:9e:88:13:46:a4:e0:71:
4b:69:42:74:8d:be:4f:c4:cb:e7:08:dd:9c:88:53:
27:3d:e3:e0:dd:8f:da:ec:53:38:67:3d:20:23:32:
cd:0d:df:ad:84:18:a7:b5:f2:c1:42:19:66:4f:15:
0d:45:cd:6f:76:3d:ba:64:6b:d2:e0:84:e2:49:f4:
c6:16:42:af:78:cd:2a:05:0f:4a:b4:2e:d5:da:03:
4e:04:e0:69:b5:b9:7a:85:10:24:57:9a:bf:6d:96:
1a:3f:ed:03:83:cb:08:18:e3:61:5b:ce:7e:b4:08:
74:8e:ba:89:5d:dd:c5:8d:32:b2:85:5d:a3:a4:b1:
4f:5a:1b:62:51:61:f2:6b:23:b2:c6:c8:0b:a2:15:
27:7f:6f:f9:95:24:6b:19:4d:86:a4:58:ca:ac:a3:
fc:9c:17:2c:3b:ce:53:3b:40:9d:41:b7:71:7d:9f:
fe:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:04:31:D3:17:7E:C3:CC:6F:08:9D:63:60:27:A6:70:A8:32:21:BA
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:66:91:63:38:0f:e4:55:9c:73:69:33:0a:b4:f6:aa:6a:6f:
4e:64:71:4c:e0:ed:d6:20:58:cb:18:2e:c9:6d:63:a9:0e:d9:
85:b0:cc:a5:3c:32:e7:92:42:e8:07:54:c7:02:08:51:c4:c5:
9e:9d:87:69:e8:b2:55:27:00:20:73:a4:65:a5:76:95:74:24:
f0:10:fb:0a:93:47:9f:29:68:a2:d0:cb:74:a5:00:d0:d3:fc:
74:7f:2b:a5:38:b0:b5:86:37:db:f4:72:4a:37:09:41:25:a5:
8f:10:1f:6f:fe:d7:57:f0:3e:5f:dd:93:6c:e6:df:ca:75:2e:
15:34:65:f1:95:02:b3:f4:18:11:ce:ff:2d:b3:35:91:b0:ec:
54:ae:7c:16:de:9d:f7:15:0e:e7:fc:a9:71:fa:f2:29:c4:18:
b3:aa:c7:3d:e9:c6:2d:3e:7a:cd:c2:2c:b1:a5:46:eb:cb:17:
0e:72:08:80:93:78:20:a6:52:22:09:48:de:ad:6b:12:75:27:
5a:ec:3c:e3:f1:19:cf:66:4f:7a:41:0b:33:57:7d:44:00:4f:
81:0a:49:2a:61:d0:83:93:41:ed:2a:16:c1:6e:9e:a9:47:89:
f5:52:6a:dc:66:37:77:d1:04:cc:89:19:a8:46:ae:f1:19:bc:
04:2e:52:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:52:22 2026 by rpki-client