Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json)
Hash identifier: 4RKj35BAAS9ZPX66y0sB1osclI1hcI7xNBbE2odzROY=
Subject key identifier: B2:75:30:E6:78:F2:79:7C:95:18:D4:C3:84:55:54:E2:1A:CD:D7:5F
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 019EBE47B1825E6C9A2836FDD159DEE3045A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
Manifest number: 1A0B
Signing time: Sat 13 Jun 2026 00:00:29 +0000
Manifest this update: Sat 13 Jun 2026 00:00:29 +0000
Manifest next update: Sun 14 Jun 2026 00:00:29 +0000
Files and hashes: 1: 7Yt7YHW5_hNd1-7nBpalAtt61w8.roa (hash: Sw5wITefxDXkzEsytQjW7irD74Qb8SCqP1PXR/rp+n4=)
2: 8NBwLg2Jd6z7vXzz5jIrTEs15DE.roa (hash: BkN95demKqt6JdCZ/hfVmo8HPxrz006awTfG+ICNnYE=)
3: DXoYE9h6-cf7b4kJiKRH-fr7tRE.roa (hash: 6BlcLI7rLrM0W5ViObzFw6TFkGBe9ONPKQUf8EQH/Os=)
4: JaTBpeRblrIhygW_gFmMKDRL-xY.roa (hash: XOLrGZWvuFxuajEEcwc2+dK1DU4S8gk1g1IkQdEtpLk=)
5: M7DJ5sQeBaPrW-9SK5kjPY2w4ro.roa (hash: 49VJ22eio/lNKcwB9hzDWcB2B1aMdYReYFHkhobdgRo=)
6: NACXqr5PEhLFNTXPqOr5Jd1WxoE.roa (hash: y7FG6TVce6xsWRwawyAhANAnluoDpcuQi+mltgf7e1w=)
7: X7cs_9cXQnCA-Rr7Px3vNYdFzRE.roa (hash: NJmnnq1FIG8l/hwx+95PtO4bN/7PHxQ5kKMPFnnLBaM=)
8: dZEx9OWUD23x5uuc5D0RvUQs0J0.roa (hash: JOuDISNyvO4jasphChNmyvtme6bkbF6emnrz73RUw1U=)
9: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: llbEJnfg/tczQK7Zl0vTD+sVj0rsQKmy8kurnqxbDcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:b1:82:5e:6c:9a:28:36:fd:d1:59:de:e3:04:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jun 13 00:00:29 2026 GMT
Not After : Jun 14 00:00:29 2026 GMT
Subject: CN=b27530e678f2797c9518d4c3845554e21acdd75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3e:ad:a9:5e:af:1f:70:fa:21:7a:6d:16:22:
f1:7d:51:5f:3f:5e:66:30:91:8b:5e:37:7a:23:08:
70:29:82:50:56:38:81:3d:4e:db:4b:da:ab:4f:9e:
03:ca:69:cb:18:dc:7f:7c:0d:13:58:55:d2:d8:53:
76:3c:fc:18:77:80:7e:1a:c6:9d:0f:ef:12:a1:a3:
ea:50:87:9b:63:94:23:23:12:ff:ac:03:49:2c:58:
e6:82:51:6b:06:ee:74:05:fc:d1:c8:be:5b:fa:c2:
7e:14:e9:66:05:52:59:ee:75:ef:2c:2e:fc:e1:53:
04:38:81:d1:e7:2a:bb:51:15:ba:0e:02:5d:87:af:
8a:63:da:2e:3f:84:c4:4b:0c:85:93:8b:25:ce:9d:
8c:2e:93:65:3d:ab:9e:3d:ca:6d:c2:f3:c2:c3:5e:
ce:15:b2:19:b4:ca:1b:5f:1e:9b:55:41:eb:35:04:
30:5e:de:8c:ec:cf:2e:20:c0:09:7e:d1:1c:62:53:
ee:9b:76:a3:1f:9f:97:d1:44:24:5b:22:93:ce:d9:
f3:5c:c9:30:57:06:87:71:95:f6:71:a5:6e:0e:2b:
2e:65:fb:02:e5:cf:26:97:7f:3d:a7:6d:b3:b7:1d:
c4:d1:a5:99:31:f1:15:c4:26:fe:98:0a:ae:2f:52:
b6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:75:30:E6:78:F2:79:7C:95:18:D4:C3:84:55:54:E2:1A:CD:D7:5F
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5b:d3:fc:e0:e3:89:2c:b6:16:85:a5:93:ef:01:1d:27:e1:
fb:78:f4:94:9c:72:0e:22:55:4d:dd:9b:e2:41:51:16:54:97:
ef:4c:44:35:e8:b5:21:eb:3c:92:1e:c0:f4:3e:c0:87:15:51:
ea:0d:fe:ec:3c:da:31:c7:65:c0:6b:33:c7:c0:b3:92:b9:bd:
23:f4:e1:71:d2:70:96:7a:b7:23:db:00:1b:e3:26:aa:e9:51:
38:85:20:5f:33:de:71:42:62:f0:44:25:a0:41:05:2f:8c:f9:
38:98:37:02:0f:1c:08:50:41:28:bc:8e:9a:d2:f6:26:0b:fc:
09:60:32:b8:ae:b6:16:d6:8b:9f:6f:9a:08:09:35:a6:60:eb:
e0:83:00:46:82:4c:c4:0e:39:3b:b8:67:b5:51:71:4b:17:84:
45:09:05:c2:84:5a:5b:ce:4a:00:a7:25:1b:69:2f:50:69:e2:
9b:87:03:74:e8:4b:78:39:2d:e1:a3:9d:40:8d:15:a7:20:5b:
8b:30:eb:da:24:15:46:61:06:33:42:d8:7e:b3:2d:c2:aa:e6:
7e:49:66:ad:af:19:54:4f:1c:54:9c:e1:d8:76:8b:93:a8:1f:
42:e3:63:71:26:98:15:65:2f:03:bf:4a:e9:ef:b0:64:c0:72:
38:b3:86:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+R7GCXmyaKDb90Vne4wRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk
ZGJkZTUwHhcNMjYwNjEzMDAwMDI5WhcNMjYwNjE0MDAwMDI5WjAzMTEwLwYDVQQD
EyhiMjc1MzBlNjc4ZjI3OTdjOTUxOGQ0YzM4NDU1NTRlMjFhY2RkNzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT6tqV6vH3D6IXptFiLxfVFfP15m
MJGLXjd6IwhwKYJQVjiBPU7bS9qrT54DymnLGNx/fA0TWFXS2FN2PPwYd4B+Gsad
D+8SoaPqUIebY5QjIxL/rANJLFjmglFrBu50BfzRyL5b+sJ+FOlmBVJZ7nXvLC78
4VMEOIHR5yq7URW6DgJdh6+KY9ouP4TESwyFk4slzp2MLpNlPauePcptwvPCw17O
FbIZtMobXx6bVUHrNQQwXt6M7M8uIMAJftEcYlPum3ajH5+X0UQkWyKTztnzXMkw
VwaHcZX2caVuDisuZfsC5c8ml389p22ztx3E0aWZMfEVxCb+mAquL1K2UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJ1MOZ48nl8lRjUw4RVVOIazddfMB8GA1UdIwQY
MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt
NDM3Mzk0OTM4YzUyLzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy
LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAelvT/ODj
iSy2FoWlk+8BHSfh+3j0lJxyDiJVTd2b4kFRFlSX70xENei1Ies8kh7A9D7AhxVR
6g3+7DzaMcdlwGszx8Czkrm9I/ThcdJwlnq3I9sAG+MmqulROIUgXzPecUJi8EQl
oEEFL4z5OJg3Ag8cCFBBKLyOmtL2Jgv8CWAyuK62FtaLn2+aCAk1pmDr4IMARoJM
xA45O7hntVFxSxeERQkFwoRaW85KAKclG2kvUGnim4cDdOhLeDkt4aOdQI0VpyBb
izDr2iQVRmEGM0LYfrMtwqrmfklmra8ZVE8cVJzh2HaLk6gfQuNjcSaYFWUvA79K
6e+wZMByOLOGIA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:14:42 2026 by rpki-client