Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json)
Hash identifier: t5+vmZ0kSYPuK9Gnw0uMRqr9EpDo1diogAwx6aSKEkc=
Subject key identifier: 7C:49:76:A8:48:1C:8F:0C:58:8D:CF:A7:C6:53:D4:93:70:34:C9:42
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial: 019CE7126AD2F40F7D8950A9DF35DF6CAA61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
Manifest number: 186A
Signing time: Fri 13 Mar 2026 12:01:09 +0000
Manifest this update: Fri 13 Mar 2026 12:01:09 +0000
Manifest next update: Sat 14 Mar 2026 12:01:09 +0000
Files and hashes: 1: PNTwbjg0hElaEm9Zppm7Dl7r-qw.roa (hash: +O0z/YSUkd6JHKZv79DXkMbJM2o6FO1n11oA1lofFBg=)
2: TV9FCFt6e1dnf-iSSWSuDHOypxE.roa (hash: eTnEXv1cjRUFIKzObjOMIk9gL0dgP2p/Hxl6K0g+qZ0=)
3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: jeZAMp2HYsNp2jPfFb0AZ2c/nG7rfUBIIPLAKnRjb7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:12:6a:d2:f4:0f:7d:89:50:a9:df:35:df:6c:aa:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Validity
Not Before: Mar 13 12:01:09 2026 GMT
Not After : Mar 14 12:01:09 2026 GMT
Subject: CN=7c4976a8481c8f0c588dcfa7c653d4937034c942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:42:83:6d:f4:31:93:bb:de:27:51:36:59:
9a:64:05:b8:40:b5:de:50:51:31:c2:86:dd:2f:13:
89:8f:71:62:90:f6:9b:95:f5:6a:d9:90:a3:98:42:
aa:d6:69:6f:59:11:47:fb:23:8a:b5:e6:9b:9d:9d:
e1:02:29:6e:09:6a:57:05:fa:c8:31:f8:c4:a0:94:
be:f9:99:50:66:64:55:2b:1f:65:f4:4e:84:f3:23:
ed:94:0f:93:7c:98:0a:5a:b5:14:5d:8b:fd:8f:ae:
18:2c:68:9a:95:da:6b:ab:e8:3b:4e:18:e8:02:99:
22:31:81:08:ef:f1:11:e7:33:09:f3:97:4f:ff:b0:
7b:70:77:fd:e1:c1:fa:d0:d8:c3:09:9c:b7:41:41:
00:ea:31:ba:ae:59:c2:fd:2c:19:3b:6a:fe:1e:d2:
da:60:4c:90:1c:3e:22:30:6e:f9:02:6c:3d:e2:ad:
fc:3d:a2:e2:f8:55:42:57:14:f5:e4:4e:ea:09:83:
59:fc:88:59:64:02:25:4c:1e:95:b0:5b:9d:38:9b:
ed:c8:dc:fc:9f:30:df:f7:e1:60:41:aa:b5:53:7c:
e2:c0:0f:16:f8:65:de:ef:bb:ca:19:1e:62:80:70:
16:47:77:5f:1f:4a:29:86:24:8f:80:e5:5b:f8:2a:
9d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:49:76:A8:48:1C:8F:0C:58:8D:CF:A7:C6:53:D4:93:70:34:C9:42
X509v3 Authority Key Identifier:
keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b9:12:0a:2f:ca:57:dd:d3:ce:58:03:fa:96:06:19:ed:d7:
7d:8d:08:82:51:31:b0:69:67:59:c8:bd:64:46:81:b8:9e:b9:
65:20:58:c0:4e:9d:bf:34:d1:f6:fe:35:0d:10:02:d6:5f:90:
f3:b0:6c:d0:34:bd:11:06:a3:4d:f9:da:1a:8c:cb:e3:65:46:
da:d2:70:fa:34:e7:88:a8:9a:5b:1a:6e:2c:ef:e7:88:25:c6:
17:b0:69:5d:7d:5f:ce:7a:a2:bd:9b:d2:c6:f9:53:0b:9a:82:
b4:f9:cb:c6:47:9b:62:80:ea:f1:61:8e:2b:fa:4a:1d:7b:7e:
5c:a8:d9:7d:b6:99:df:a3:d7:51:7a:70:e1:65:85:9d:e3:3f:
65:7c:70:15:f8:ec:12:95:46:b0:91:48:b8:ec:59:c4:c0:4c:
8f:59:2b:40:14:12:89:73:fe:d4:45:ee:a7:d9:fd:2d:4e:c1:
0e:1d:5f:f6:7e:28:3a:b1:29:2f:6c:7b:26:cd:a6:75:92:c5:
d6:9f:7a:93:94:8e:58:04:82:60:c3:2b:9b:d2:a9:24:12:1f:
f6:4f:aa:df:3b:32:a0:69:5b:b5:ea:e9:ea:8c:f1:a4:e5:22:
8e:72:58:1c:54:c9:08:10:1c:f2:df:25:fc:d9:cf:7e:2f:b8:
4e:fd:45:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZznEmrS9A99iVCp3zXfbKphMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NGIwZTEzY2YyN2FmZjY2YmU3MzBiZWNlOThlMDRiMDBm
ZGZiOWUwHhcNMjYwMzEzMTIwMTA5WhcNMjYwMzE0MTIwMTA5WjAzMTEwLwYDVQQD
Eyg3YzQ5NzZhODQ4MWM4ZjBjNTg4ZGNmYTdjNjUzZDQ5MzcwMzRjOTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEZCg230MZO73idRNlmaZAW4QLXe
UFExwobdLxOJj3FikPablfVq2ZCjmEKq1mlvWRFH+yOKteabnZ3hAiluCWpXBfrI
MfjEoJS++ZlQZmRVKx9l9E6E8yPtlA+TfJgKWrUUXYv9j64YLGialdprq+g7Thjo
ApkiMYEI7/ER5zMJ85dP/7B7cHf94cH60NjDCZy3QUEA6jG6rlnC/SwZO2r+HtLa
YEyQHD4iMG75Amw94q38PaLi+FVCVxT15E7qCYNZ/IhZZAIlTB6VsFudOJvtyNz8
nzDf9+FgQaq1U3ziwA8W+GXe77vKGR5igHAWR3dfH0ophiSPgOVb+CqdxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxJdqhIHI8MWI3Pp8ZT1JNwNMlCMB8GA1UdIwQY
MBaAFIZLDhPPJ6/2a+cwvs6Y4EsA/fueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8zMDI4NjMtNTY4OS00M2ZjLTg3MmYt
ZmM0NGE4YWNlMzcwLzEvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8zMDI4NjMtNTY4OS00M2ZjLTg3MmYtZmM0NGE4YWNlMzcw
LzEvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbkSCi/K
V93TzlgD+pYGGe3XfY0IglExsGlnWci9ZEaBuJ65ZSBYwE6dvzTR9v41DRAC1l+Q
87Bs0DS9EQajTfnaGozL42VG2tJw+jTniKiaWxpuLO/niCXGF7BpXX1fznqivZvS
xvlTC5qCtPnLxkebYoDq8WGOK/pKHXt+XKjZfbaZ36PXUXpw4WWFneM/ZXxwFfjs
EpVGsJFIuOxZxMBMj1krQBQSiXP+1EXup9n9LU7BDh1f9n4oOrEpL2x7Js2mdZLF
1p96k5SOWASCYMMrm9KpJBIf9k+q3zsyoGlbterp6ozxpOUijnJYHFTJCBAc8t8l
/NnPfi+4Tv1F2w==
-----END CERTIFICATE-----
Generated at Fri Mar 13 14:33:16 2026 by rpki-client