Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json)
Hash identifier: TY3h4i7MmI6mfjPNFqs5OGercFDLOgx8Fng8g2ta20M=
Subject key identifier: F7:63:E2:0E:57:4E:77:B6:6D:57:24:D8:0A:C0:D2:D6:08:31:90:61
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 019F90C784930CF20BD82F0FA2B0A7EBB1D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
Manifest number: 1A78
Signing time: Thu 23 Jul 2026 21:00:22 +0000
Manifest this update: Thu 23 Jul 2026 21:00:22 +0000
Manifest next update: Fri 24 Jul 2026 21:00:22 +0000
Files and hashes: 1: 7Yt7YHW5_hNd1-7nBpalAtt61w8.roa (hash: Sw5wITefxDXkzEsytQjW7irD74Qb8SCqP1PXR/rp+n4=)
2: 8NBwLg2Jd6z7vXzz5jIrTEs15DE.roa (hash: BkN95demKqt6JdCZ/hfVmo8HPxrz006awTfG+ICNnYE=)
3: DXoYE9h6-cf7b4kJiKRH-fr7tRE.roa (hash: 6BlcLI7rLrM0W5ViObzFw6TFkGBe9ONPKQUf8EQH/Os=)
4: JaTBpeRblrIhygW_gFmMKDRL-xY.roa (hash: XOLrGZWvuFxuajEEcwc2+dK1DU4S8gk1g1IkQdEtpLk=)
5: M7DJ5sQeBaPrW-9SK5kjPY2w4ro.roa (hash: 49VJ22eio/lNKcwB9hzDWcB2B1aMdYReYFHkhobdgRo=)
6: NACXqr5PEhLFNTXPqOr5Jd1WxoE.roa (hash: y7FG6TVce6xsWRwawyAhANAnluoDpcuQi+mltgf7e1w=)
7: X7cs_9cXQnCA-Rr7Px3vNYdFzRE.roa (hash: NJmnnq1FIG8l/hwx+95PtO4bN/7PHxQ5kKMPFnnLBaM=)
8: dZEx9OWUD23x5uuc5D0RvUQs0J0.roa (hash: JOuDISNyvO4jasphChNmyvtme6bkbF6emnrz73RUw1U=)
9: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: Ka5TuYehtK8kvIm9wjUH7hEGViQrJ8cUdyw400bMDNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:84:93:0c:f2:0b:d8:2f:0f:a2:b0:a7:eb:b1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jul 23 21:00:22 2026 GMT
Not After : Jul 24 21:00:22 2026 GMT
Subject: CN=f763e20e574e77b66d5724d80ac0d2d608319061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fe:d2:da:6b:0f:68:35:32:bb:80:9e:b5:05:
52:1b:a7:13:b0:6f:d4:99:24:33:f1:96:d5:66:6c:
9f:8b:e8:3d:c6:a8:37:08:ba:88:01:2d:be:cd:36:
3f:3c:f1:16:50:79:86:68:9b:13:eb:f2:84:05:20:
85:5f:a0:c3:47:f8:77:e0:bf:e1:0a:f8:41:51:ae:
48:14:4e:d2:de:8e:06:2b:ab:bb:ec:2a:6a:9c:52:
87:a4:d0:69:28:f1:4a:46:45:aa:74:ed:94:bb:bc:
c0:ee:50:33:82:98:58:fc:c8:72:c5:4a:e6:2a:5d:
55:c1:2f:81:76:da:af:b3:f3:db:a0:35:bf:bb:fe:
df:0b:87:a1:91:eb:d1:81:ce:f6:05:d8:c3:70:dc:
e2:e9:e3:cd:98:c9:41:fe:fb:77:64:ea:75:6b:e2:
1a:39:dc:93:05:49:1f:bd:2d:6a:59:ff:d6:a2:72:
5f:9f:9a:8c:d7:08:ca:ee:38:e5:67:c6:67:37:19:
64:44:fb:b7:5c:fa:cf:af:59:a8:d1:d1:c7:32:54:
07:45:70:1c:0b:f9:31:65:c4:97:74:91:24:81:00:
ff:4b:f0:d7:d0:2a:bb:b0:e3:b0:83:da:59:a7:74:
95:9a:97:e6:75:52:d8:51:c5:43:3d:d4:0b:5f:39:
09:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:63:E2:0E:57:4E:77:B6:6D:57:24:D8:0A:C0:D2:D6:08:31:90:61
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:04:63:ed:96:e8:87:d2:45:dd:16:7e:41:66:c2:09:f0:e2:
fd:a6:33:b9:dc:08:ed:e3:02:77:c5:24:e9:c1:7b:25:8c:df:
1d:37:6d:78:51:1e:4f:f0:e4:16:8d:8d:26:6e:18:a4:a5:3d:
e7:a9:57:3a:49:0e:bd:c2:8e:88:b2:32:c7:59:d0:d0:6c:a2:
8a:db:70:ee:a2:95:66:7c:7b:29:ac:c0:fe:d5:58:60:bf:6a:
3e:80:dc:48:10:44:c4:b0:f3:56:9c:ec:7e:7f:e5:69:71:a6:
03:9f:15:77:8e:08:2e:25:db:e0:9c:34:7c:5d:0f:c1:d4:23:
ca:29:c1:a9:fb:44:ba:92:92:6e:e9:60:c4:f8:28:6b:f5:cc:
8e:cd:58:01:a0:3e:e3:fc:0b:7e:1c:e3:8d:6f:6a:3e:8c:eb:
84:9e:a3:48:34:1c:a8:56:1c:d1:b9:3e:66:54:c5:2b:17:a0:
b0:38:63:ad:8f:fb:ad:7b:d9:c7:38:24:06:d3:79:cf:11:ff:
d6:76:fb:90:a0:47:df:2d:aa:2c:0c:c9:ba:17:3c:dd:77:ee:
a6:f9:b3:2c:e6:84:40:f7:83:1f:26:59:ca:0d:0c:a6:80:2b:
1e:51:7f:0f:2d:4e:54:2d:47:ba:fc:3f:79:3d:2e:a4:59:c9:
31:12:f9:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx4STDPIL2C8PorCn67HZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk
ZGJkZTUwHhcNMjYwNzIzMjEwMDIyWhcNMjYwNzI0MjEwMDIyWjAzMTEwLwYDVQQD
EyhmNzYzZTIwZTU3NGU3N2I2NmQ1NzI0ZDgwYWMwZDJkNjA4MzE5MDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P7S2msPaDUyu4CetQVSG6cTsG/U
mSQz8ZbVZmyfi+g9xqg3CLqIAS2+zTY/PPEWUHmGaJsT6/KEBSCFX6DDR/h34L/h
CvhBUa5IFE7S3o4GK6u77CpqnFKHpNBpKPFKRkWqdO2Uu7zA7lAzgphY/MhyxUrm
Kl1VwS+Bdtqvs/PboDW/u/7fC4ehkevRgc72BdjDcNzi6ePNmMlB/vt3ZOp1a+Ia
OdyTBUkfvS1qWf/WonJfn5qM1wjK7jjlZ8ZnNxlkRPu3XPrPr1mo0dHHMlQHRXAc
C/kxZcSXdJEkgQD/S/DX0Cq7sOOwg9pZp3SVmpfmdVLYUcVDPdQLXzkJkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdj4g5XTne2bVck2ArA0tYIMZBhMB8GA1UdIwQY
MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt
NDM3Mzk0OTM4YzUyLzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy
LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgRj7Zbo
h9JF3RZ+QWbCCfDi/aYzudwI7eMCd8Uk6cF7JYzfHTdteFEeT/DkFo2NJm4YpKU9
56lXOkkOvcKOiLIyx1nQ0Gyiittw7qKVZnx7KazA/tVYYL9qPoDcSBBExLDzVpzs
fn/laXGmA58Vd44ILiXb4Jw0fF0PwdQjyinBqftEupKSbulgxPgoa/XMjs1YAaA+
4/wLfhzjjW9qPozrhJ6jSDQcqFYc0bk+ZlTFKxegsDhjrY/7rXvZxzgkBtN5zxH/
1nb7kKBH3y2qLAzJuhc83XfupvmzLOaEQPeDHyZZyg0MpoArHlF/Dy1OVC1Huvw/
eT0upFnJMRL5mQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:27 2026 by rpki-client