Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json)
Hash identifier: NFgWn3Lm/DSSNWg9Hv3WdIat9wuaaARGXDrvzRlM5RE=
Subject key identifier: B4:C6:07:3A:DF:00:F5:E1:14:9B:83:4E:1B:E3:A2:6D:4E:A4:75:F8
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 01A0CD7E93F1218BDFFFA12A65FF772456B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
Manifest number: 1B28
Signing time: Wed 23 Sep 2026 09:00:19 +0000
Manifest this update: Wed 23 Sep 2026 09:00:19 +0000
Manifest next update: Thu 24 Sep 2026 09:00:19 +0000
Files and hashes: 1: 7Yt7YHW5_hNd1-7nBpalAtt61w8.roa (hash: Sw5wITefxDXkzEsytQjW7irD74Qb8SCqP1PXR/rp+n4=)
2: 8NBwLg2Jd6z7vXzz5jIrTEs15DE.roa (hash: BkN95demKqt6JdCZ/hfVmo8HPxrz006awTfG+ICNnYE=)
3: DXoYE9h6-cf7b4kJiKRH-fr7tRE.roa (hash: 6BlcLI7rLrM0W5ViObzFw6TFkGBe9ONPKQUf8EQH/Os=)
4: JaTBpeRblrIhygW_gFmMKDRL-xY.roa (hash: XOLrGZWvuFxuajEEcwc2+dK1DU4S8gk1g1IkQdEtpLk=)
5: NACXqr5PEhLFNTXPqOr5Jd1WxoE.roa (hash: y7FG6TVce6xsWRwawyAhANAnluoDpcuQi+mltgf7e1w=)
6: X7cs_9cXQnCA-Rr7Px3vNYdFzRE.roa (hash: NJmnnq1FIG8l/hwx+95PtO4bN/7PHxQ5kKMPFnnLBaM=)
7: dZEx9OWUD23x5uuc5D0RvUQs0J0.roa (hash: JOuDISNyvO4jasphChNmyvtme6bkbF6emnrz73RUw1U=)
8: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: qTATNn1Op5wd9FxD82czSNbAihZbTNNsGkKGjG1i1x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:93:f1:21:8b:df:ff:a1:2a:65:ff:77:24:56:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Sep 23 09:00:19 2026 GMT
Not After : Sep 24 09:00:19 2026 GMT
Subject: CN=b4c6073adf00f5e1149b834e1be3a26d4ea475f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4b:d8:2a:cb:74:57:68:94:4f:3a:d5:a0:59:
1f:ff:dc:93:d6:29:53:af:3e:1d:89:96:f7:68:31:
4e:2a:3a:ba:ed:84:41:2b:cf:c8:fa:8f:36:95:48:
80:52:82:88:b8:61:8b:6b:a6:46:a4:01:a0:9c:ee:
4b:13:73:08:45:e9:c7:5b:ab:6a:ae:26:2b:25:a8:
a9:5b:7d:db:b3:6e:e4:dd:3a:05:70:52:a4:9c:bd:
0c:a2:5c:d3:e6:2e:3b:5e:9a:d1:ec:b7:d4:ac:a9:
8a:b2:ab:93:93:fe:53:f7:0e:cd:4c:c7:d3:a2:ee:
09:50:71:d2:ef:ac:e7:38:70:96:cb:d8:41:1a:e4:
91:7e:09:05:ce:9d:9c:3b:6a:fd:dd:96:44:fa:69:
91:74:ec:4d:76:ba:dc:58:47:e3:84:7f:f3:6e:34:
4e:85:ae:4e:82:62:ce:aa:0e:9b:c6:29:23:29:0c:
5d:3c:50:7e:e3:b1:74:18:2c:ab:40:0f:24:01:5f:
fa:85:d7:26:80:77:99:4f:ba:19:a2:74:ae:00:64:
07:11:94:86:4a:76:c7:15:ed:00:30:79:42:de:49:
29:6e:c6:37:25:61:3a:1f:31:73:e7:52:d6:f2:8e:
69:62:e4:18:d2:55:e4:ad:1c:f3:c0:bf:bd:22:a0:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C6:07:3A:DF:00:F5:E1:14:9B:83:4E:1B:E3:A2:6D:4E:A4:75:F8
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ed:fd:a9:a0:77:ae:66:d2:18:36:fd:11:5f:c8:04:11:85:
53:b0:56:db:11:af:05:99:f4:62:22:f1:0d:47:a3:18:0a:66:
b1:8d:fb:c3:45:e1:51:95:31:66:60:15:c1:8d:25:24:22:19:
6d:f8:9e:49:97:84:f2:b9:a0:94:8b:3f:77:16:40:e3:0d:ae:
19:d5:34:6c:3e:9e:0d:6e:73:09:d2:e0:4d:09:e3:4a:b0:17:
38:69:e3:6b:46:5b:f8:16:d5:e1:8f:c8:93:64:fe:91:cb:8e:
48:5a:12:c1:01:96:a3:e6:dc:e0:b2:57:cd:f4:72:88:1a:09:
48:eb:b0:86:6c:a4:d6:1c:9d:f2:da:4d:3c:a6:84:4f:7b:a0:
39:9d:ee:e7:b4:e1:51:32:a4:19:d9:0b:16:53:79:73:c9:ce:
d7:1e:ef:6f:9a:fc:62:2e:fe:36:00:51:bb:21:2c:d8:ce:70:
f4:ca:94:7d:50:3d:61:ff:db:6f:74:42:d4:f5:9a:55:1d:5e:
1b:b6:81:c7:8e:72:8a:48:a0:e4:e0:94:ef:a3:5b:09:2e:17:
0d:f1:47:9a:3d:5d:8a:23:bb:82:d4:51:18:21:26:27:56:9b:
e1:54:5b:15:c5:2a:89:88:e1:cc:23:79:af:7c:d9:0f:d8:1a:
64:69:0b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:28:46 2026 by rpki-client