Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json)
Hash identifier: V4rHIdv4ETOEQLDF3lq/Du4Y2rENqGVRiU8Z84ItTPs=
Subject key identifier: 7F:49:7F:00:41:59:5F:B5:68:C0:9D:D7:05:AD:7C:F2:BA:B2:E5:44
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial: 01A19FFEF023856431C9D3D46CA2FB41E35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
Manifest number: 1ADC
Signing time: Tue 03 Nov 2026 06:00:47 +0000
Manifest this update: Tue 03 Nov 2026 06:00:47 +0000
Manifest next update: Wed 04 Nov 2026 06:00:47 +0000
Files and hashes: 1: PNTwbjg0hElaEm9Zppm7Dl7r-qw.roa (hash: +O0z/YSUkd6JHKZv79DXkMbJM2o6FO1n11oA1lofFBg=)
2: TV9FCFt6e1dnf-iSSWSuDHOypxE.roa (hash: eTnEXv1cjRUFIKzObjOMIk9gL0dgP2p/Hxl6K0g+qZ0=)
3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: mmiVT8EwpIH/qpBAtXe/JepT4iKpZkXE5J9jrTn0oo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9f:fe:f0:23:85:64:31:c9:d3:d4:6c:a2:fb:41:e3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Validity
Not Before: Nov 3 06:00:47 2026 GMT
Not After : Nov 4 06:00:47 2026 GMT
Subject: CN=7f497f0041595fb568c09dd705ad7cf2bab2e544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:c3:d8:51:2e:ec:b5:67:47:7d:b2:8d:2d:
29:b4:64:58:68:19:d9:c0:ef:69:da:b2:cd:a6:49:
17:52:fe:0a:a3:56:7c:8f:58:f0:69:47:9e:18:fe:
29:e7:3e:7e:f6:ec:1d:30:87:05:23:3b:49:92:05:
a2:42:9b:80:0a:f6:96:d7:1b:af:39:52:77:1f:ec:
22:10:d7:48:f6:7d:a1:78:bb:91:ce:ff:48:ef:d0:
5a:49:c2:6d:4f:1c:94:b2:a6:69:0a:f6:00:c0:77:
97:df:41:34:00:b9:40:74:cd:d0:c1:5f:77:9d:97:
9a:cf:f1:1c:b7:8b:48:b8:e3:e9:38:13:7b:e9:27:
94:a6:ed:10:1d:0a:cb:55:aa:c2:42:b9:9c:0d:47:
90:69:1f:06:75:55:0f:d9:f7:ee:f3:79:5b:41:c6:
36:92:5c:f1:56:39:f6:07:d5:06:8a:c2:12:4e:6d:
9c:10:3b:19:96:39:11:14:4c:09:a5:8f:53:7c:6f:
92:02:11:e1:26:77:8f:99:72:a1:64:3b:39:1d:1c:
84:29:bb:32:9b:45:3c:0c:96:11:51:87:17:f4:20:
e2:0b:29:a3:f5:b3:c8:d8:22:e8:09:0d:5e:55:36:
ce:90:76:d2:9b:c8:7e:3c:47:e1:d1:a7:8f:90:b4:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:49:7F:00:41:59:5F:B5:68:C0:9D:D7:05:AD:7C:F2:BA:B2:E5:44
X509v3 Authority Key Identifier:
keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b6:47:e9:84:8f:1e:4a:e3:12:e6:7b:17:ad:de:96:15:c0:
ae:18:94:86:2d:9f:75:a4:7d:40:9a:10:d7:08:d5:1a:4d:b4:
d4:83:dc:34:9d:07:a5:a2:51:ea:a4:dd:81:d8:6e:cf:f6:a3:
88:e0:98:55:de:30:6f:81:be:a0:7d:c0:73:8b:94:f0:88:7e:
c7:ca:f1:f3:d0:98:0d:01:ee:48:15:02:f0:2d:d1:58:87:93:
c4:38:ec:8b:f5:cd:67:0f:88:55:b1:54:1f:af:1b:39:7b:1a:
80:65:12:a9:cb:2f:a7:f4:c5:39:7c:73:52:ad:7e:d2:bd:93:
42:1f:37:cb:17:a8:68:8f:c0:8c:02:bc:75:92:0b:09:be:04:
a8:b8:ad:2a:fb:d0:06:72:d1:18:6f:d4:d4:2f:26:bc:79:2c:
9f:d7:db:c9:e2:88:57:47:8d:82:ea:2e:71:0d:bb:6c:1b:44:
5b:6d:a4:36:ec:ff:d6:a9:56:9b:61:de:15:cc:56:a7:4d:6e:
6e:04:f6:e2:85:c4:86:67:e4:e6:64:c6:98:7a:12:5a:c9:c3:
af:5d:c8:ec:35:24:d4:69:30:80:fd:06:8b:21:8e:e6:fa:38:
ac:5e:67:4f:7e:5e:9f:fb:59:c2:22:79:83:98:9c:71:ec:f5:
d9:05:4a:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGf/vAjhWQxydPUbKL7QeNaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NGIwZTEzY2YyN2FmZjY2YmU3MzBiZWNlOThlMDRiMDBm
ZGZiOWUwHhcNMjYxMTAzMDYwMDQ3WhcNMjYxMTA0MDYwMDQ3WjAzMTEwLwYDVQQD
Eyg3ZjQ5N2YwMDQxNTk1ZmI1NjhjMDlkZDcwNWFkN2NmMmJhYjJlNTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn7D2FEu7LVnR32yjS0ptGRYaBnZ
wO9p2rLNpkkXUv4Ko1Z8j1jwaUeeGP4p5z5+9uwdMIcFIztJkgWiQpuACvaW1xuv
OVJ3H+wiENdI9n2heLuRzv9I79BaScJtTxyUsqZpCvYAwHeX30E0ALlAdM3QwV93
nZeaz/Ect4tIuOPpOBN76SeUpu0QHQrLVarCQrmcDUeQaR8GdVUP2ffu83lbQcY2
klzxVjn2B9UGisISTm2cEDsZljkRFEwJpY9TfG+SAhHhJnePmXKhZDs5HRyEKbsy
m0U8DJYRUYcX9CDiCymj9bPI2CLoCQ1eVTbOkHbSm8h+PEfh0aePkLQWLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9JfwBBWV+1aMCd1wWtfPK6suVEMB8GA1UdIwQY
MBaAFIZLDhPPJ6/2a+cwvs6Y4EsA/fueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8zMDI4NjMtNTY4OS00M2ZjLTg3MmYt
ZmM0NGE4YWNlMzcwLzEvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8zMDI4NjMtNTY4OS00M2ZjLTg3MmYtZmM0NGE4YWNlMzcw
LzEvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObZH6YSP
HkrjEuZ7F63elhXArhiUhi2fdaR9QJoQ1wjVGk201IPcNJ0HpaJR6qTdgdhuz/aj
iOCYVd4wb4G+oH3Ac4uU8Ih+x8rx89CYDQHuSBUC8C3RWIeTxDjsi/XNZw+IVbFU
H68bOXsagGUSqcsvp/TFOXxzUq1+0r2TQh83yxeoaI/AjAK8dZILCb4EqLitKvvQ
BnLRGG/U1C8mvHksn9fbyeKIV0eNguoucQ27bBtEW22kNuz/1qlWm2HeFcxWp01u
bgT24oXEhmfk5mTGmHoSWsnDr13I7DUk1GkwgP0GiyGO5vo4rF5nT35en/tZwiJ5
g5iccez12QVKpw==
-----END CERTIFICATE-----
Generated at Tue Nov 3 16:00:27 2026 by rpki-client