Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json)
Hash identifier: PE+IPh5+eYFqImfTyMDQASSdUIxGEdQxj/vIIGQ7cRg=
Subject key identifier: BF:F5:CA:C9:18:36:07:71:32:0E:7F:06:3F:ED:3D:14:52:DB:F1:30
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 019D97E2248EBA7345CB19F3E01FA01F8D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
Manifest number: 1972
Signing time: Thu 16 Apr 2026 20:01:13 +0000
Manifest this update: Thu 16 Apr 2026 20:01:13 +0000
Manifest next update: Fri 17 Apr 2026 20:01:13 +0000
Files and hashes: 1: 7Yt7YHW5_hNd1-7nBpalAtt61w8.roa (hash: Sw5wITefxDXkzEsytQjW7irD74Qb8SCqP1PXR/rp+n4=)
2: 8NBwLg2Jd6z7vXzz5jIrTEs15DE.roa (hash: BkN95demKqt6JdCZ/hfVmo8HPxrz006awTfG+ICNnYE=)
3: DXoYE9h6-cf7b4kJiKRH-fr7tRE.roa (hash: 6BlcLI7rLrM0W5ViObzFw6TFkGBe9ONPKQUf8EQH/Os=)
4: JaTBpeRblrIhygW_gFmMKDRL-xY.roa (hash: XOLrGZWvuFxuajEEcwc2+dK1DU4S8gk1g1IkQdEtpLk=)
5: M7DJ5sQeBaPrW-9SK5kjPY2w4ro.roa (hash: 49VJ22eio/lNKcwB9hzDWcB2B1aMdYReYFHkhobdgRo=)
6: X7cs_9cXQnCA-Rr7Px3vNYdFzRE.roa (hash: NJmnnq1FIG8l/hwx+95PtO4bN/7PHxQ5kKMPFnnLBaM=)
7: dGwO4WJpN4KX0BwTJYtIabBzdBU.roa (hash: 9Dq2E6iLV/+UQl6/0txmPEH61p9nmtpYGc0Ymw+CmpA=)
8: dZEx9OWUD23x5uuc5D0RvUQs0J0.roa (hash: JOuDISNyvO4jasphChNmyvtme6bkbF6emnrz73RUw1U=)
9: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: 3XDtR+S0snF9ZZ2VmOew/PD90e8gTboq9mskFfRbnO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:24:8e:ba:73:45:cb:19:f3:e0:1f:a0:1f:8d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Apr 16 20:01:13 2026 GMT
Not After : Apr 17 20:01:13 2026 GMT
Subject: CN=bff5cac918360771320e7f063fed3d1452dbf130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:d0:9f:fa:48:61:11:4d:24:4f:2c:c8:19:
4a:e0:72:66:cc:f3:f2:d3:66:ff:48:89:17:aa:18:
af:7d:6c:48:77:9f:16:4e:48:a3:56:bf:5a:67:f3:
af:29:a9:ef:78:89:5d:ae:f9:fb:86:7c:22:80:2f:
6f:d9:68:c2:e0:7e:49:10:e9:b3:6b:d2:d9:ab:15:
30:d1:43:bb:e8:f2:b4:01:b5:aa:3f:9c:7d:36:34:
c5:54:aa:fb:b2:1f:16:75:66:fc:90:4b:2f:e8:65:
eb:62:0b:84:e3:20:74:81:91:12:98:10:72:e9:04:
d3:0c:67:2b:36:f0:39:33:af:6d:f6:d9:e4:5d:64:
16:bd:be:6b:ae:a3:d6:a0:68:35:b2:35:d2:69:4c:
d6:b6:d4:b0:cf:4c:da:7e:6e:f5:28:7f:6e:53:b0:
c3:97:6f:72:24:44:91:03:33:3c:dc:4c:ec:1b:18:
5f:8d:1d:ef:7f:c2:01:f4:9a:f8:5b:78:df:34:9d:
ce:e7:7a:92:05:0e:12:5d:20:79:93:39:fb:8e:fc:
03:63:d8:fb:69:ea:fe:73:9c:3b:81:d9:ab:88:7e:
d3:e9:52:1d:f0:fe:52:be:93:92:90:3f:64:53:ad:
30:59:c8:ae:5a:58:12:71:f7:3b:bd:20:6f:5f:33:
b0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F5:CA:C9:18:36:07:71:32:0E:7F:06:3F:ED:3D:14:52:DB:F1:30
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:73:53:dc:10:ba:d6:0f:95:8f:30:3a:fb:42:bb:89:f5:68:
15:c8:b2:16:db:46:e7:ba:53:ab:e0:af:e5:fd:b7:3a:d3:93:
f5:ec:0d:d4:6c:7e:4e:ca:3c:d3:51:f5:ca:50:26:3d:32:26:
0f:b8:f8:f1:4b:cd:c0:01:ca:97:c3:ff:a2:9d:82:11:06:68:
46:f6:72:2e:a5:41:4a:d9:c4:5c:31:c9:1c:f4:e4:99:6a:74:
74:78:77:e2:2e:fa:a2:cc:55:fb:07:dc:2c:89:0b:34:93:95:
67:85:d2:66:3f:64:af:19:b6:97:8c:78:82:78:3a:3c:3e:74:
47:17:00:5c:49:09:1f:01:10:5f:30:17:25:55:37:71:73:02:
5e:7c:21:0c:dc:ad:0d:cd:35:c6:51:22:8b:45:9a:6e:a6:88:
72:2d:28:b9:df:71:c9:19:70:0a:fe:42:86:e2:24:ef:b8:ed:
f9:6a:07:8f:0c:14:e6:0e:9e:cd:3b:e3:ec:23:1e:cc:14:96:
96:d9:0c:01:db:e3:87:35:ad:a4:ae:c0:cc:d5:95:6c:ce:df:
aa:e0:7e:dd:ec:81:b4:dc:36:58:72:ae:50:d7:5c:aa:35:7c:
72:8f:46:eb:16:7e:e5:50:57:df:c5:12:5d:f8:80:9a:39:3e:
76:8b:55:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:08 2026 by rpki-client