Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json)
Hash identifier: b3b/LaB8n+H08wXQWlAXJ2EQ1vOMZol4oh8JKtf7I9U=
Subject key identifier: 4F:4F:F1:12:D3:58:70:3B:DD:86:99:D3:64:81:F4:D0:17:76:EA:13
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 019CAA58A04B18CC990B80C3C5681BECB452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
Manifest number: 18F7
Signing time: Sun 01 Mar 2026 17:01:00 +0000
Manifest this update: Sun 01 Mar 2026 17:01:00 +0000
Manifest next update: Mon 02 Mar 2026 17:01:00 +0000
Files and hashes: 1: 7Yt7YHW5_hNd1-7nBpalAtt61w8.roa (hash: Sw5wITefxDXkzEsytQjW7irD74Qb8SCqP1PXR/rp+n4=)
2: 8NBwLg2Jd6z7vXzz5jIrTEs15DE.roa (hash: BkN95demKqt6JdCZ/hfVmo8HPxrz006awTfG+ICNnYE=)
3: DXoYE9h6-cf7b4kJiKRH-fr7tRE.roa (hash: 6BlcLI7rLrM0W5ViObzFw6TFkGBe9ONPKQUf8EQH/Os=)
4: JaTBpeRblrIhygW_gFmMKDRL-xY.roa (hash: XOLrGZWvuFxuajEEcwc2+dK1DU4S8gk1g1IkQdEtpLk=)
5: M7DJ5sQeBaPrW-9SK5kjPY2w4ro.roa (hash: 49VJ22eio/lNKcwB9hzDWcB2B1aMdYReYFHkhobdgRo=)
6: X7cs_9cXQnCA-Rr7Px3vNYdFzRE.roa (hash: NJmnnq1FIG8l/hwx+95PtO4bN/7PHxQ5kKMPFnnLBaM=)
7: dGwO4WJpN4KX0BwTJYtIabBzdBU.roa (hash: 9Dq2E6iLV/+UQl6/0txmPEH61p9nmtpYGc0Ymw+CmpA=)
8: dZEx9OWUD23x5uuc5D0RvUQs0J0.roa (hash: JOuDISNyvO4jasphChNmyvtme6bkbF6emnrz73RUw1U=)
9: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: Yb02W+SHEyJninZruX8wMQSi+NoBeae8orQWgO6c5M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:a0:4b:18:cc:99:0b:80:c3:c5:68:1b:ec:b4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Mar 1 17:01:00 2026 GMT
Not After : Mar 2 17:01:00 2026 GMT
Subject: CN=4f4ff112d358703bdd8699d36481f4d01776ea13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:30:b6:5e:70:be:ac:ec:2d:11:24:bc:9c:
65:2c:ab:c6:04:ac:ea:bd:e4:94:cc:05:b9:b0:93:
fb:32:f1:28:20:43:be:5b:b8:73:16:6a:35:63:43:
76:72:f5:e0:6f:19:65:45:82:ee:ce:e9:0c:51:9a:
49:6c:f1:a2:67:11:2b:b1:a3:c3:c0:6c:e7:af:c7:
64:80:97:7c:c1:d3:85:ff:dd:4a:dc:a0:75:14:31:
4e:34:3f:12:e1:9c:ba:c0:0d:67:72:8f:d9:5f:9f:
d7:77:ec:dc:f2:75:38:64:c8:44:08:0a:7c:a9:13:
99:6a:39:d2:6d:bb:0b:96:2a:18:b6:e4:52:9c:a5:
a3:00:ed:7b:1b:3d:5b:b1:92:ae:81:b4:76:6a:20:
85:d6:4c:c8:98:c5:46:fb:cc:22:6a:ea:1b:7d:6d:
ef:73:60:c9:9e:97:1f:85:fe:d8:6d:e1:83:a0:d7:
b9:20:b0:0b:85:04:5b:e3:ac:06:f3:0d:fe:c3:6e:
f5:c3:c3:3e:cd:73:93:97:b8:47:4b:d3:0c:6b:53:
13:51:fd:8b:50:8e:cb:7c:9b:8d:63:34:00:b6:ed:
1b:6c:8c:8a:f3:dc:ee:26:0e:35:c5:76:df:7c:00:
e0:a3:eb:51:98:fc:b9:ac:7d:91:64:40:51:c2:c1:
dd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4F:F1:12:D3:58:70:3B:DD:86:99:D3:64:81:F4:D0:17:76:EA:13
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:99:0c:43:07:af:13:d8:62:c4:19:ea:0a:7e:31:9b:56:34:
a3:84:16:92:f3:e2:d9:6f:88:69:7a:30:02:6a:e1:cb:68:9a:
33:e0:d8:e3:e5:ad:fe:05:1a:92:12:55:30:c0:68:de:36:95:
49:89:78:35:80:9c:fa:94:d9:79:44:45:e0:f9:32:bf:20:ac:
91:ca:d9:ae:6c:bf:f5:9f:67:38:92:c5:78:d4:af:63:1c:57:
62:f1:a1:61:8c:bb:c9:2e:74:7b:a1:8f:20:4e:fb:da:23:1e:
53:d9:0b:e1:7e:22:18:7b:93:51:bd:aa:39:0e:b7:5b:fb:51:
5f:f9:6b:ac:89:1e:87:22:c0:14:ee:25:9b:84:aa:26:66:b3:
95:e4:d5:a8:0c:3c:57:90:c9:c2:63:28:15:af:1d:f9:a0:99:
89:00:b5:0d:60:65:4a:58:ec:00:3b:21:31:61:85:26:8d:a4:
17:6a:f0:eb:5c:1b:3e:12:60:44:bd:83:a7:57:c1:cb:ec:d9:
67:f6:2f:8e:95:43:15:1e:2a:11:96:6f:fd:0e:4d:d7:0d:60:
78:1a:b4:96:d4:73:67:37:2f:77:fc:6c:33:e4:8b:64:2c:da:
41:f9:1c:53:76:a3:7a:c0:b0:9f:c9:c7:4f:06:5e:b1:be:3c:
92:0b:e0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:52 2026 by rpki-client