Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json)
Hash identifier: 1IcCl8y7Gg8ulpq5UBx3rGl3XhnJo0fpT9VLG4heOGs=
Subject key identifier: 6F:FD:F3:8C:F2:B3:DE:09:1E:2F:3A:87:5C:59:6E:F4:12:0A:C3:1C
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 019E1D2248B24D755CB39717C797E972C90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
Manifest number: 19B7
Signing time: Tue 12 May 2026 17:00:46 +0000
Manifest this update: Tue 12 May 2026 17:00:46 +0000
Manifest next update: Wed 13 May 2026 17:00:46 +0000
Files and hashes: 1: 7Yt7YHW5_hNd1-7nBpalAtt61w8.roa (hash: Sw5wITefxDXkzEsytQjW7irD74Qb8SCqP1PXR/rp+n4=)
2: 8NBwLg2Jd6z7vXzz5jIrTEs15DE.roa (hash: BkN95demKqt6JdCZ/hfVmo8HPxrz006awTfG+ICNnYE=)
3: DXoYE9h6-cf7b4kJiKRH-fr7tRE.roa (hash: 6BlcLI7rLrM0W5ViObzFw6TFkGBe9ONPKQUf8EQH/Os=)
4: JaTBpeRblrIhygW_gFmMKDRL-xY.roa (hash: XOLrGZWvuFxuajEEcwc2+dK1DU4S8gk1g1IkQdEtpLk=)
5: M7DJ5sQeBaPrW-9SK5kjPY2w4ro.roa (hash: 49VJ22eio/lNKcwB9hzDWcB2B1aMdYReYFHkhobdgRo=)
6: X7cs_9cXQnCA-Rr7Px3vNYdFzRE.roa (hash: NJmnnq1FIG8l/hwx+95PtO4bN/7PHxQ5kKMPFnnLBaM=)
7: dGwO4WJpN4KX0BwTJYtIabBzdBU.roa (hash: 9Dq2E6iLV/+UQl6/0txmPEH61p9nmtpYGc0Ymw+CmpA=)
8: dZEx9OWUD23x5uuc5D0RvUQs0J0.roa (hash: JOuDISNyvO4jasphChNmyvtme6bkbF6emnrz73RUw1U=)
9: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: c54R3B1FEg88mb4f8OjoQ2IJOw2oiS5mba6FSOpc2tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:48:b2:4d:75:5c:b3:97:17:c7:97:e9:72:c9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: May 12 17:00:46 2026 GMT
Not After : May 13 17:00:46 2026 GMT
Subject: CN=6ffdf38cf2b3de091e2f3a875c596ef4120ac31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:85:3e:f9:dd:43:6a:cc:1c:e6:21:b6:2d:01:
8b:90:62:3b:8d:81:66:9f:7e:43:4e:98:38:d8:e0:
bd:4d:42:6e:02:00:a0:56:9b:3a:35:46:0f:55:eb:
1d:6d:4c:4b:cf:f4:70:fc:ea:b5:7b:b4:d5:16:be:
dc:17:25:3f:da:a2:3a:de:43:57:9f:44:35:96:c3:
1b:47:0b:07:15:77:b9:1e:d9:14:71:71:dd:6b:79:
67:ae:b6:d7:d2:eb:a6:84:c0:29:30:61:9a:85:66:
84:88:df:70:b3:4f:44:1e:91:d7:22:26:35:8b:4b:
a3:43:1c:9c:76:64:cd:bf:0d:20:60:f6:a8:e5:ce:
d2:74:20:57:b7:0a:f6:76:15:a6:a6:59:06:6d:ed:
bd:1a:58:ac:c7:ea:2b:2d:8b:59:5e:f1:62:d0:74:
e0:07:0d:ee:5a:1d:fa:0b:3b:c2:9c:10:dd:00:46:
16:63:30:c2:59:67:19:ce:d2:6b:95:9e:bf:c4:48:
82:cc:a9:c8:1e:0f:17:a0:1b:cb:a9:88:14:0b:7e:
17:93:c1:77:95:e5:e5:af:9f:af:bb:e5:bb:67:5e:
42:8f:dc:d2:0b:54:ff:14:c8:be:c6:97:98:b0:9a:
d6:38:31:99:1d:9e:9f:39:6c:4f:23:78:87:d7:6d:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FD:F3:8C:F2:B3:DE:09:1E:2F:3A:87:5C:59:6E:F4:12:0A:C3:1C
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ee:7e:35:c4:ea:f5:b6:b0:97:70:cd:03:5a:05:e8:15:65:
9b:c0:c4:aa:3d:8b:25:e5:3c:c3:c6:cc:59:61:c5:a5:47:74:
34:6b:68:ac:2e:f8:b9:e9:c2:80:33:50:57:5a:3b:51:08:98:
79:f5:c8:12:c0:3f:f1:83:6d:59:06:d1:74:df:d3:38:89:dd:
4f:33:7b:ed:d5:6f:79:32:68:37:4d:64:43:5a:d5:d2:e7:35:
85:d4:ac:3d:63:b5:46:8b:23:74:7e:d7:4f:3b:52:62:92:be:
39:54:58:44:15:5c:37:de:13:59:03:14:93:d4:d4:43:b2:56:
91:45:f3:ab:bd:c0:c6:c0:d4:0e:e8:3a:54:13:f3:9a:ea:62:
6c:b3:84:e3:03:8d:02:5c:47:7a:7c:c7:c6:db:39:09:56:54:
0c:c1:ab:18:a4:a6:46:af:9b:e7:d4:3e:18:01:95:ad:22:d2:
7d:18:cd:df:4f:64:c1:43:c6:62:30:03:63:75:96:78:71:07:
77:3b:a7:6e:46:8d:71:15:76:08:a0:d9:49:42:2a:ca:fe:dd:
32:44:c7:55:5c:07:d7:f4:4f:71:2d:9e:e2:07:fa:54:bd:4e:
ca:d2:6b:99:3c:e6:b4:99:c7:29:76:5c:8d:38:8f:f1:db:7e:
8c:17:a7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:14:31 2026 by rpki-client