Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json)
Hash identifier: AL/u7/UBKRvYB4Vost7ZMrNRiosNnkWOZsp3I49yHfU=
Subject key identifier: 66:19:57:98:5D:FC:C6:F8:9C:A6:7A:B9:C1:33:6B:62:5E:FE:D2:07
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 01A1DDCC365F5A3F1E588DCF314B9D81BDB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
Manifest number: 1BB5
Signing time: Sun 15 Nov 2026 06:01:50 +0000
Manifest this update: Sun 15 Nov 2026 06:01:50 +0000
Manifest next update: Mon 16 Nov 2026 06:01:50 +0000
Files and hashes: 1: 7Yt7YHW5_hNd1-7nBpalAtt61w8.roa (hash: Sw5wITefxDXkzEsytQjW7irD74Qb8SCqP1PXR/rp+n4=)
2: 8NBwLg2Jd6z7vXzz5jIrTEs15DE.roa (hash: BkN95demKqt6JdCZ/hfVmo8HPxrz006awTfG+ICNnYE=)
3: DXoYE9h6-cf7b4kJiKRH-fr7tRE.roa (hash: 6BlcLI7rLrM0W5ViObzFw6TFkGBe9ONPKQUf8EQH/Os=)
4: JaTBpeRblrIhygW_gFmMKDRL-xY.roa (hash: XOLrGZWvuFxuajEEcwc2+dK1DU4S8gk1g1IkQdEtpLk=)
5: NACXqr5PEhLFNTXPqOr5Jd1WxoE.roa (hash: y7FG6TVce6xsWRwawyAhANAnluoDpcuQi+mltgf7e1w=)
6: X7cs_9cXQnCA-Rr7Px3vNYdFzRE.roa (hash: NJmnnq1FIG8l/hwx+95PtO4bN/7PHxQ5kKMPFnnLBaM=)
7: dZEx9OWUD23x5uuc5D0RvUQs0J0.roa (hash: JOuDISNyvO4jasphChNmyvtme6bkbF6emnrz73RUw1U=)
8: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: ebgOI527jRcL5Id91HxViC3PaB8+wqGA2qJIXfCjqEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:36:5f:5a:3f:1e:58:8d:cf:31:4b:9d:81:bd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Nov 15 06:01:50 2026 GMT
Not After : Nov 16 06:01:50 2026 GMT
Subject: CN=661957985dfcc6f89ca67ab9c1336b625efed207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:b5:04:5e:4f:49:91:f9:6a:f6:f0:62:2c:46:
17:1f:9c:29:fe:3d:a1:15:81:2e:8a:04:04:a6:aa:
44:d7:3c:51:9a:cd:be:c3:f9:fb:37:a5:38:ab:2a:
62:7a:cc:15:b3:69:3d:44:fa:e5:ba:93:16:86:6a:
52:92:92:5a:22:e6:a8:23:1e:ef:f3:54:23:fe:28:
94:6d:19:cf:c4:5d:94:ce:22:ad:ce:26:cc:45:d8:
8c:88:01:69:b1:fd:ea:48:3b:7f:a7:b2:45:18:ff:
5b:57:a0:f7:85:75:62:09:9d:2d:6c:5a:4a:c4:16:
69:39:9c:f5:08:a9:1d:24:a2:b7:68:6b:08:24:9c:
ff:92:04:10:e3:b8:41:70:99:36:8f:e2:ee:a8:9d:
8d:e0:de:1a:1b:a0:c8:3e:16:8e:e1:18:ed:4e:66:
52:a2:78:6c:6a:4a:05:42:f8:13:0d:30:37:5e:d1:
43:0b:3b:89:b9:02:6c:6b:1d:c8:48:cc:5c:9d:09:
5c:91:c8:86:a3:e2:4a:8f:cc:52:a5:ac:9f:02:87:
e7:17:fd:47:7a:ea:bb:c8:dd:96:ad:77:06:26:17:
73:a2:f3:52:f9:c2:4c:73:43:d1:ad:aa:e2:40:92:
ae:c1:10:a9:f8:d9:4c:34:87:8a:e3:60:61:63:c4:
87:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:19:57:98:5D:FC:C6:F8:9C:A6:7A:B9:C1:33:6B:62:5E:FE:D2:07
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a2:42:95:ec:f8:d4:bb:50:7b:93:46:d9:38:ab:72:89:46:
61:ec:91:65:2c:c6:d0:6c:07:90:30:18:dd:a9:bb:f9:7a:b6:
fa:2c:86:05:d3:cc:66:f2:fc:ac:f9:f0:9d:22:91:89:1a:fb:
de:91:52:c1:c3:e1:b1:93:45:40:a5:a9:f5:63:99:66:53:c9:
da:53:47:cf:db:2a:3d:90:b3:1b:87:25:27:f6:3e:e4:28:94:
b1:40:f5:ce:79:6e:4d:1a:2c:5c:50:41:ed:12:c8:19:9b:a2:
35:29:e7:20:a5:e4:bf:68:6f:04:c8:19:61:f3:49:b6:7d:85:
6f:c1:fb:69:d7:4c:eb:ea:27:ea:d3:04:54:1b:1e:98:5b:07:
96:b6:de:e9:a2:aa:5c:1a:ca:0b:33:34:00:1b:19:07:de:65:
f1:0e:a1:8b:58:dc:34:dc:fe:93:4e:ab:35:b1:aa:28:60:af:
3d:74:5f:19:5e:d5:11:8c:e5:4c:88:f3:92:86:1a:71:55:4f:
2a:92:ce:c3:92:84:a2:74:0b:11:94:49:91:b8:ab:e6:98:91:
f6:1d:db:b7:8f:94:62:24:5f:b2:a4:cf:f4:58:02:31:5c:9a:
25:07:5b:fe:02:2a:a5:50:ad:f4:5c:10:0d:47:70:f1:de:5c:
2f:ab:e0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:05:45 2026 by rpki-client