
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json)
Hash identifier: G1GAtHs7z4n3wJS20fvhSIQbGvueqHH+f5/cXxG3u0Y=
Subject key identifier: 99:38:FC:FA:5C:64:6A:B0:B2:2B:C4:B8:42:4F:A6:89:82:DC:6A:EE
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 019FD83C681EB8B2CF621AD99CE7AC7EA67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
Manifest number: 1A09
Signing time: Thu 06 Aug 2026 18:01:05 +0000
Manifest this update: Thu 06 Aug 2026 18:01:05 +0000
Manifest next update: Fri 07 Aug 2026 18:01:05 +0000
Files and hashes: 1: 2SgtXArHa91zHSP62V3VxCstPjQ.roa (hash: V4cGQtg2SBaCI8DVoJaqr+ulcrK5fl4LGupKdqP0XPQ=)
2: 2pWoRlgTXbKVX-Pjg4QmOZkMdQc.roa (hash: JZbkKUO0JB2SSX19jfhYYhBc4c8q+WYE6k6SKK4z740=)
3: Ae57O12AoGSXg6OjRfpvqk40IWY.roa (hash: jqB4zbEQVsVqha6FZMRqBv2gE+Oo/oekXl882sDWeVU=)
4: B-5LpHxABUdZLyscoHErjkqyIKk.roa (hash: O/ISaaNiYJWY/Osy259CyKWIm66WcENOZJ8/yUUM18U=)
5: E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa (hash: AM4W95wMVxmufbKvADXIfhnh/oxXBRJzCA12EQepcN0=)
6: G6LlelllmoaLjy6pGMovpp7eiKE.roa (hash: i0/dkXUXtTkS5bDtqW3KTO/a6C0FHwJWrOLBcdXePK8=)
7: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: 97V5uHrGT7VpMiLCsKhIY2XA+QmjNHBNXtr+vwovyHo=)
8: Ooo27uikwPKyN38Vc6E5PiPp16o.roa (hash: ysIkELBvjUmxilhHd/e1/CduTTEPJwJqPubCz95v0Yk=)
9: Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa (hash: PTOGD+XV9y0QkR0kx84XCCF1nWNGNBQ/AqHfSIRK6JI=)
10: R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa (hash: 926NNVMN0dOUlotEee8GGLB2yhZRvKk278w8BXpKBWc=)
11: SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa (hash: R2Ulh0OWrTfBVFa/oSxJhAwaFvEKQ4zUakZOAQnMxc8=)
12: SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa (hash: IKCVvcTAPNdNWxaMhV5j9dp59UVvAETJogxmpd5B1IE=)
13: UgQXPpoAPzzEY23clmnNXDMzKII.roa (hash: wVgI0/jKoNmP2W8lcpq9i62znX0LDf4x7s4+L/CLD44=)
14: VYgE8-UEudg3YNUfBmaafWIWqbY.roa (hash: JxhGY6dK9SUdetgzpCLPv5EvQwiRqHi3C+Rjc1w+Nx4=)
15: VulRC4nGRSWh634vxQHiExAKf1w.roa (hash: pU+A0lUoH6DQvksFwyWjaM1SkQ2OEMmZ30T/nm+6dqA=)
16: WyhDt_oaTKQN4eZu64NsYbZl4yg.roa (hash: 6ciQpQA0xk5YF/RtEahhFIWkqj1pqFVjXnDAnpgxo9s=)
17: YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa (hash: yFLoxqOVICN4QBajonvWQfdIkbyqD9W6GTNUrK2yjZo=)
18: ap_KBBwMetCUgf_yqig9NPG5GpY.roa (hash: 9v8lmt7h/soP3D+lntkITlcRnDn6phDZu9Zze6nhdUM=)
19: ayw9hP-juqBVUYhL4659BWRbagM.roa (hash: GLutlgyBzkV4tGAVG5CwDMmdYLkbefgbgEpP3APu1Jo=)
20: crm5NGlj9UBvhtdc7rwx7uYgEK4.roa (hash: /WaelaooGSkLECOrVgVomhzyK4ipvEXkWosApEiQHPA=)
21: fCPsVmQYESXsIrFzghBdJCH1miI.roa (hash: w0YUnPbD+SIAOv8xIs4vR52GvWAb785T1PJzGOLTe/A=)
22: ge_qG75CaLMKt1s8rP1tYixjlSM.roa (hash: KgSOhN8VDoDw2ctu7y0Z8Aqh13VkWXvib2gbxMkFp90=)
23: if7HhXNRoDw1TnbTu8jR1pBkTZc.roa (hash: 8a3JrsC30tF9jpJNG+DBi1BkDJl3zSelO4aQKYLFjnI=)
24: kB1VAe7IiWttP305SpTIQdMVrgs.roa (hash: 317W73vQ+ktqI7vunTSNBr39CAMFJ4AGWozNVMt/2j4=)
25: lT10uf8B-zB2W7pPHONV8j5w1EU.roa (hash: YP+nZP9+eePypNGYgLu6JQ6qv1UZQzTSxNte2fmvVXA=)
26: m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa (hash: QoWaAUlMFh1lhiMZuHSFJG4B7Vf6yI8ZyqsNOBMC67Q=)
27: n8NL6vGQtAkm4gMaIcDuJBP2IEE.roa (hash: jjvwqzXmoxW8cyo92Sd5PIndz67V2dJl+O50LnTVHRU=)
28: nzTl8UF3p7e9FvS0wb6zPjc4FHQ.roa (hash: gedwjVpwIHP4TjyyTazQknsPogKpR2m/8Qa6aAsv0F4=)
29: oMXKRKWkDw3BU5VHnmmfZczo3WU.roa (hash: 0w07L0habLvL3NwvX3KWEEL46dhGeHcv8F5gRgN4UD8=)
30: pqPIqfuErD5mbtSplqtkA0QY6aE.roa (hash: 6vvDbqxKmpWsHd5Wn/2ZoKbmAa7IUMY34ZPHLrIESc8=)
31: r__WaOcKmtAx8gXbwxmkYZg93vo.roa (hash: dQVWPRytzEKBIkeOfxLsINoVWiI0jdX6igSClXXnN6o=)
32: sfOxzLZiwEG7r5SeUCMuTrf1tvI.roa (hash: ZUuD5UEFtBeOCS9rptJ0iK7dObQgDw9xm9i0pDpXHUA=)
33: uixetmUNITGIE12MemXK43h0QKQ.roa (hash: LX2K4eqH4TnMxGBuhGigtPQYwuhHnTXNUjj69t8yapQ=)
34: v-ikOphb6e29hpwrNQIcQpcHAak.roa (hash: Pq9zDPP4BdGhk0vZiCEnuLu/9tRKgBub5R+cAWgzevE=)
35: w_A8FIo2-eV1ikzinAoy11bKCzM.roa (hash: LSQro8lyduG8gw0AhNa9mNG1JTNi93nM2iVzU2UVVdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 13:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d8:3c:68:1e:b8:b2:cf:62:1a:d9:9c:e7:ac:7e:a6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Aug 6 18:01:05 2026 GMT
Not After : Aug 7 18:01:05 2026 GMT
Subject: CN=9938fcfa5c646ab0b22bc4b8424fa68982dc6aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:f3:ae:a1:7a:fd:fa:0b:d8:1a:98:8a:82:
a8:fe:0e:d7:88:f5:fb:d3:88:9d:c3:73:f2:1b:c4:
ad:34:44:60:34:54:2f:59:13:f8:36:6a:c4:27:96:
4e:e1:dc:17:78:59:2e:17:ec:82:b1:34:69:e0:e0:
47:e1:16:21:98:04:c5:54:ec:78:22:6a:3e:5f:87:
bb:b7:fa:4d:1c:d4:da:ca:67:ef:26:75:08:45:0d:
35:82:d5:f2:55:5a:03:02:d9:89:2a:f2:6e:82:f8:
f2:e7:6b:45:0b:46:7f:0f:9d:66:9c:8e:92:13:72:
05:95:2f:7b:70:a7:9f:68:55:ea:8b:69:1d:d7:2e:
31:b9:5e:48:c0:06:b5:f7:ed:40:32:3e:db:10:a5:
47:fc:21:ad:59:c0:b2:dc:44:40:7b:d7:43:0f:42:
fb:6d:7c:21:bb:3b:08:cc:d2:b7:ba:02:ab:9b:e3:
2e:a4:b3:19:21:81:a2:2a:3b:46:6e:86:c8:92:e8:
e2:92:66:97:32:92:de:05:34:7a:9a:09:03:ab:2e:
06:27:fb:dc:26:0d:67:28:fc:52:52:6d:55:ee:bb:
83:3b:77:0a:75:33:90:5a:6e:f6:7b:a5:0f:50:f3:
4f:e4:2f:1d:bf:f4:37:42:a0:b3:37:05:fc:35:b3:
41:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:38:FC:FA:5C:64:6A:B0:B2:2B:C4:B8:42:4F:A6:89:82:DC:6A:EE
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:04:06:93:ab:c0:26:d6:6e:51:29:c8:33:7b:b6:09:8c:be:
65:82:c4:de:ee:7a:7b:e4:d5:73:28:f0:b7:39:32:53:08:21:
9a:39:ff:0d:ac:a2:c6:24:c3:ff:33:c7:52:3b:31:bf:72:34:
c2:b5:44:45:76:3e:73:40:f0:64:70:9b:4c:90:06:95:49:03:
4f:f2:13:55:74:7f:72:21:d5:75:3d:33:a5:48:a6:dc:f6:01:
ec:c7:dc:7a:e3:04:cb:e7:0c:3d:4a:76:eb:57:09:b9:1b:d8:
03:f2:ad:33:a9:96:69:f3:e9:ab:4d:0b:e1:4a:83:fe:92:b2:
58:50:7c:4e:01:4c:13:f8:36:56:c6:57:a0:53:1c:97:e7:07:
3d:69:68:c3:af:d8:b9:2e:a3:75:87:82:37:7f:33:b0:09:9f:
92:7e:e5:f4:9a:90:21:49:80:6b:5a:98:85:87:8c:aa:87:d0:
a6:45:fd:80:30:28:0e:96:df:77:03:b0:f1:b5:ad:06:5a:97:
7d:ce:e0:77:81:aa:4f:f5:9d:c4:5f:9d:8e:53:e1:fd:4d:2a:
09:66:ef:00:44:f4:c5:ec:8c:6b:e9:f6:86:14:d9:5a:08:1c:
40:11:85:57:da:97:2f:ae:91:21:5c:12:66:2c:e2:91:a0:a2:
d4:8d:bd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 21:51:09 2026 by rpki-client