Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json)
Hash identifier: hIg0oN1Cd3RRALJ1nkzsLywpx0VbtAJfkLQtEV0vS5M=
Subject key identifier: 58:43:EE:08:AE:00:CC:CB:82:06:D0:BE:E2:87:7E:C4:00:60:F2:29
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial: 019DCED0C30891FAB0ED172A0DAC9D8B0730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
Manifest number: 18E2
Signing time: Mon 27 Apr 2026 12:01:21 +0000
Manifest this update: Mon 27 Apr 2026 12:01:21 +0000
Manifest next update: Tue 28 Apr 2026 12:01:21 +0000
Files and hashes: 1: PNTwbjg0hElaEm9Zppm7Dl7r-qw.roa (hash: +O0z/YSUkd6JHKZv79DXkMbJM2o6FO1n11oA1lofFBg=)
2: TV9FCFt6e1dnf-iSSWSuDHOypxE.roa (hash: eTnEXv1cjRUFIKzObjOMIk9gL0dgP2p/Hxl6K0g+qZ0=)
3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: SbgLFUibBFR4mvFf1ZAjDYWeYV2dtFdh6JTSRQQK9ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:c3:08:91:fa:b0:ed:17:2a:0d:ac:9d:8b:07:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Validity
Not Before: Apr 27 12:01:21 2026 GMT
Not After : Apr 28 12:01:21 2026 GMT
Subject: CN=5843ee08ae00cccb8206d0bee2877ec40060f229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b8:a9:ba:8a:93:19:67:d0:ad:b0:7b:59:6d:
63:c4:48:44:4e:ee:a6:81:94:2c:ff:71:7d:09:82:
06:90:ff:05:e6:d6:82:f2:90:e1:d0:25:f0:cc:34:
20:26:f2:64:0d:61:b2:1b:9c:6a:d3:f8:e9:d9:bd:
f6:be:7f:45:f5:9c:3a:67:1a:12:05:c8:09:a8:bb:
7a:3c:98:c2:32:b9:c8:4d:9e:5d:d2:fd:6b:fc:c9:
99:7a:cf:a7:6d:0f:49:8f:e3:fd:26:97:c1:8c:f3:
a7:54:3c:53:f1:aa:e5:01:da:60:f4:3f:e3:17:10:
2e:ad:c8:3c:5e:51:c1:71:6c:65:1b:9e:c7:14:0e:
97:4c:fe:1b:f8:6e:96:62:f7:f2:6d:4e:1c:11:f2:
64:cb:04:80:29:22:e6:ef:f7:70:bf:dd:7a:a0:35:
3e:e5:5a:a1:2f:aa:ef:cc:36:7c:27:10:95:d4:cf:
ea:3c:e4:5d:c0:d3:f5:4f:ff:76:f4:f9:0e:62:0a:
8a:00:5f:b6:98:aa:56:e6:b6:a0:b4:fd:ea:46:f7:
98:d5:7b:e8:91:ed:57:f0:9f:e2:56:e8:15:0a:d3:
37:b8:3e:f6:61:b0:2e:ca:31:26:11:06:be:f7:78:
b1:5d:97:f1:33:08:67:d3:d2:53:e9:bf:fb:42:4a:
2a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:43:EE:08:AE:00:CC:CB:82:06:D0:BE:E2:87:7E:C4:00:60:F2:29
X509v3 Authority Key Identifier:
keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:75:7b:65:a0:56:f6:aa:88:7d:33:84:ab:26:b7:78:c4:43:
71:55:f9:48:a1:c0:ff:8a:e1:4f:ee:04:b4:7e:7a:2c:3d:ba:
ed:fb:14:6c:fb:c8:b8:29:11:0e:11:bd:37:da:92:bf:9c:c6:
25:9e:8f:8d:2b:59:ae:e7:ca:70:3a:6b:56:57:58:14:00:fd:
c0:69:77:ab:86:e5:0a:33:15:4b:21:60:55:7e:e2:07:75:ae:
a9:2c:ce:fd:49:ff:ec:88:6a:df:36:98:de:a6:bf:b2:d9:c4:
86:ca:02:f9:d6:b3:b1:3a:9a:14:ca:bb:0d:95:ff:2d:c3:91:
1f:1c:79:48:22:dd:1a:73:e0:e4:f2:66:85:c6:77:d7:84:6e:
18:18:b5:dd:68:92:49:ac:45:53:f5:7c:75:61:0f:b2:70:5d:
ac:0d:1b:fa:c7:91:b3:be:93:bb:72:a4:e9:ac:ec:ea:c9:98:
d6:47:17:e8:9b:94:c3:23:69:11:42:19:c8:d8:88:d0:fa:de:
73:70:47:41:59:d9:d1:6d:1e:71:fc:db:46:7b:9c:50:50:b9:
68:af:d1:7d:7f:66:a7:e9:b5:2d:7b:96:e7:8c:9f:de:8e:8e:
8e:31:ea:ae:ad:0e:14:ae:f9:1e:ae:61:27:09:4c:8b:e2:eb:
0d:99:99:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:31:44 2026 by rpki-client