Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json)
Hash identifier: e3Mnr36FceRupEry6abjTw4hvFbjAaQJm/v2Mc8ImsY=
Subject key identifier: 46:B8:6E:CC:B4:C4:9B:44:1F:45:3E:8F:D7:50:17:95:F0:FD:B6:EE
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 019CAC46D737E7214C42A4C85A15D32C0E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
Manifest number: 18F8
Signing time: Mon 02 Mar 2026 02:00:49 +0000
Manifest this update: Mon 02 Mar 2026 02:00:49 +0000
Manifest next update: Tue 03 Mar 2026 02:00:49 +0000
Files and hashes: 1: 7Yt7YHW5_hNd1-7nBpalAtt61w8.roa (hash: Sw5wITefxDXkzEsytQjW7irD74Qb8SCqP1PXR/rp+n4=)
2: 8NBwLg2Jd6z7vXzz5jIrTEs15DE.roa (hash: BkN95demKqt6JdCZ/hfVmo8HPxrz006awTfG+ICNnYE=)
3: DXoYE9h6-cf7b4kJiKRH-fr7tRE.roa (hash: 6BlcLI7rLrM0W5ViObzFw6TFkGBe9ONPKQUf8EQH/Os=)
4: JaTBpeRblrIhygW_gFmMKDRL-xY.roa (hash: XOLrGZWvuFxuajEEcwc2+dK1DU4S8gk1g1IkQdEtpLk=)
5: M7DJ5sQeBaPrW-9SK5kjPY2w4ro.roa (hash: 49VJ22eio/lNKcwB9hzDWcB2B1aMdYReYFHkhobdgRo=)
6: X7cs_9cXQnCA-Rr7Px3vNYdFzRE.roa (hash: NJmnnq1FIG8l/hwx+95PtO4bN/7PHxQ5kKMPFnnLBaM=)
7: dGwO4WJpN4KX0BwTJYtIabBzdBU.roa (hash: 9Dq2E6iLV/+UQl6/0txmPEH61p9nmtpYGc0Ymw+CmpA=)
8: dZEx9OWUD23x5uuc5D0RvUQs0J0.roa (hash: JOuDISNyvO4jasphChNmyvtme6bkbF6emnrz73RUw1U=)
9: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: Xwzx5PvbN3yXhzPZdfyOMYfe1/HJ3c5CO5NWUbf6HOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:d7:37:e7:21:4c:42:a4:c8:5a:15:d3:2c:0e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Mar 2 02:00:49 2026 GMT
Not After : Mar 3 02:00:49 2026 GMT
Subject: CN=46b86eccb4c49b441f453e8fd7501795f0fdb6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f1:91:3b:27:82:f7:79:4a:2e:fe:b6:76:bc:
95:4b:a5:b3:5a:14:e4:3d:be:46:6b:5d:1b:45:bb:
f4:8d:64:17:5a:f6:7b:a5:00:2b:2c:95:ca:25:aa:
64:a5:1b:4c:b4:3f:21:08:51:f5:51:85:80:c3:08:
8a:46:0a:a3:d0:e6:b5:46:4c:b2:29:53:a6:aa:18:
10:f4:6b:fc:09:24:46:52:05:52:2d:17:cf:66:0b:
6c:0e:e4:8a:df:c0:e3:ad:4d:0a:c4:2c:d9:2e:18:
a8:a1:33:3a:c2:74:8e:31:06:18:93:10:59:e4:fd:
26:0c:7b:8f:12:3a:98:bf:cf:a0:ae:72:32:a8:72:
32:57:46:10:41:94:b2:53:45:37:ec:00:88:b4:86:
db:21:f3:b2:d0:18:19:fa:29:fd:50:e0:0b:6f:fc:
5d:ea:d8:d0:2f:03:7f:5b:6e:4f:82:55:46:b5:26:
c8:be:f3:f6:8e:73:e5:59:54:89:1b:29:53:11:3a:
68:ed:9d:8c:cd:c5:f1:49:b4:76:53:0c:8d:e5:de:
fd:a1:27:fe:e9:c0:30:17:05:94:29:e0:83:70:1f:
ff:a9:e5:e7:41:1f:b1:ea:e1:41:d1:81:96:46:d7:
9e:7f:df:42:49:89:34:d4:64:be:ac:08:03:9a:7a:
5c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B8:6E:CC:B4:C4:9B:44:1F:45:3E:8F:D7:50:17:95:F0:FD:B6:EE
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e1:8d:1b:4d:6a:02:45:08:82:84:62:0f:03:43:7e:08:46:
86:7d:bc:9e:4d:7f:27:21:fb:05:31:3d:26:2d:aa:0e:1e:93:
d4:24:e1:37:64:e0:a6:b2:ed:67:64:87:f5:dd:7a:c3:32:2d:
e0:39:b8:bb:2b:81:65:d0:83:41:d5:46:21:16:c2:17:14:6d:
68:fb:1f:68:63:b5:a3:67:ba:2d:53:ff:e4:03:24:9c:d8:66:
70:52:05:09:bd:21:6d:fd:d9:1c:40:99:92:b4:e1:dc:95:d9:
f2:94:7c:60:79:c2:47:05:66:77:a8:48:ab:74:e4:4b:13:41:
67:f8:7f:a3:9b:3a:0a:da:37:89:1d:f2:c1:f4:59:5b:e1:ff:
84:44:c8:cc:6b:df:0f:dd:50:76:c4:67:dc:83:97:e6:b1:3f:
7b:91:52:6a:6d:2f:ba:d0:4d:eb:48:85:4e:3e:f9:d4:ea:06:
b7:ca:2a:85:6a:a7:d2:81:e5:39:93:f0:cd:a7:a9:3a:f9:d6:
2e:25:25:a9:6a:80:b1:f4:26:46:74:52:2c:03:61:8a:49:81:
64:82:c8:68:26:e9:0a:70:62:e3:5a:ad:0c:cb:87:3e:70:5e:
39:b1:fe:1e:a0:6b:12:79:04:fa:c4:a7:02:12:3b:0a:43:c0:
20:84:fd:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRtc35yFMQqTIWhXTLA55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk
ZGJkZTUwHhcNMjYwMzAyMDIwMDQ5WhcNMjYwMzAzMDIwMDQ5WjAzMTEwLwYDVQQD
Eyg0NmI4NmVjY2I0YzQ5YjQ0MWY0NTNlOGZkNzUwMTc5NWYwZmRiNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfGROyeC93lKLv62dryVS6WzWhTk
Pb5Ga10bRbv0jWQXWvZ7pQArLJXKJapkpRtMtD8hCFH1UYWAwwiKRgqj0Oa1Rkyy
KVOmqhgQ9Gv8CSRGUgVSLRfPZgtsDuSK38DjrU0KxCzZLhiooTM6wnSOMQYYkxBZ
5P0mDHuPEjqYv8+grnIyqHIyV0YQQZSyU0U37ACItIbbIfOy0BgZ+in9UOALb/xd
6tjQLwN/W25PglVGtSbIvvP2jnPlWVSJGylTETpo7Z2MzcXxSbR2UwyN5d79oSf+
6cAwFwWUKeCDcB//qeXnQR+x6uFB0YGWRteef99CSYk01GS+rAgDmnpclwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEa4bsy0xJtEH0U+j9dQF5Xw/bbuMB8GA1UdIwQY
MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt
NDM3Mzk0OTM4YzUyLzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy
LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmuGNG01q
AkUIgoRiDwNDfghGhn28nk1/JyH7BTE9Ji2qDh6T1CThN2TgprLtZ2SH9d16wzIt
4Dm4uyuBZdCDQdVGIRbCFxRtaPsfaGO1o2e6LVP/5AMknNhmcFIFCb0hbf3ZHECZ
krTh3JXZ8pR8YHnCRwVmd6hIq3TkSxNBZ/h/o5s6Cto3iR3ywfRZW+H/hETIzGvf
D91QdsRn3IOX5rE/e5FSam0vutBN60iFTj751OoGt8oqhWqn0oHlOZPwzaepOvnW
LiUlqWqAsfQmRnRSLANhikmBZILIaCbpCnBi41qtDMuHPnBeObH+HqBrEnkE+sSn
AhI7CkPAIIT9OQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:46 2026 by rpki-client