Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json)
Hash identifier: myDkdBumInP25sqmk9PTM9X1c0rlwCmWPLj0qNcROYw=
Subject key identifier: 5F:74:2E:B2:7D:E1:98:06:D6:E0:D0:B3:40:9A:4A:63:1C:12:A7:E9
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial: 019EB87D0E36C10BED7F370ADCCB8C7BAB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
Manifest number: 195B
Signing time: Thu 11 Jun 2026 21:01:03 +0000
Manifest this update: Thu 11 Jun 2026 21:01:03 +0000
Manifest next update: Fri 12 Jun 2026 21:01:03 +0000
Files and hashes: 1: PNTwbjg0hElaEm9Zppm7Dl7r-qw.roa (hash: +O0z/YSUkd6JHKZv79DXkMbJM2o6FO1n11oA1lofFBg=)
2: TV9FCFt6e1dnf-iSSWSuDHOypxE.roa (hash: eTnEXv1cjRUFIKzObjOMIk9gL0dgP2p/Hxl6K0g+qZ0=)
3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: /7R52zVkCZFoRImuXaHC9aDnfo8swFlgap0ChSpQrXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7d:0e:36:c1:0b:ed:7f:37:0a:dc:cb:8c:7b:ab:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Validity
Not Before: Jun 11 21:01:03 2026 GMT
Not After : Jun 12 21:01:03 2026 GMT
Subject: CN=5f742eb27de19806d6e0d0b3409a4a631c12a7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:50:ad:e2:2a:91:cb:85:3c:f0:62:f8:00:
9d:b4:de:07:4d:18:68:94:e0:2a:6a:32:7e:34:80:
a3:92:ae:8e:9e:9a:1c:ae:fb:41:c1:4c:7a:4e:99:
52:8e:76:66:f7:e9:89:7d:1e:be:65:18:ca:18:cf:
f6:30:ab:47:f0:28:83:59:40:d7:d8:16:88:da:a1:
e4:d3:c2:6b:c4:bc:fe:ac:42:4e:2a:11:32:41:49:
d7:21:a2:a4:b9:64:82:94:cb:05:d3:09:6b:b9:ef:
a5:1a:df:14:2d:a8:45:ba:aa:82:58:e2:02:de:bf:
6c:76:df:c9:07:5c:ea:5d:70:fc:79:9a:bc:22:12:
17:b7:e3:48:5e:35:ce:e7:3d:ea:5d:1d:bf:88:a3:
52:7a:74:9b:d7:50:86:d9:fc:ff:41:aa:53:5e:d2:
65:47:89:28:dc:21:9d:6d:c9:31:9f:24:00:5a:c5:
1c:42:e6:8c:8a:db:79:ad:e0:a8:9f:23:a9:81:fa:
73:4d:27:05:1c:08:38:69:51:8f:57:45:80:a4:e6:
4f:82:2c:5c:96:df:21:f2:3e:b5:6c:5d:a0:38:3d:
1c:ad:21:0e:34:05:89:40:be:08:f2:d4:1e:af:2a:
6f:e5:c2:ae:0f:f2:77:c4:ca:39:7c:8c:72:32:eb:
d6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:74:2E:B2:7D:E1:98:06:D6:E0:D0:B3:40:9A:4A:63:1C:12:A7:E9
X509v3 Authority Key Identifier:
keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:88:1f:0a:ff:4b:33:2d:ae:2f:4d:ed:58:3f:77:bf:65:a7:
1e:95:e5:96:9a:c3:58:3b:c0:97:64:2e:94:7b:7f:b4:d0:93:
e5:64:4f:dd:e0:f5:14:cd:ad:3b:14:d5:30:d3:48:94:4c:d2:
50:db:57:63:7d:23:d6:8f:17:e0:9f:a0:6b:68:e0:95:44:93:
57:f8:68:3b:ed:e3:c9:7c:c9:b9:89:f1:23:5d:49:02:f7:b1:
fa:73:71:15:63:58:df:59:06:ca:78:bb:28:5c:f9:0e:13:6b:
03:40:dd:35:11:4f:c7:bf:5e:4e:be:58:fc:46:3d:4d:0a:0b:
52:20:79:72:cc:68:f4:54:c1:c6:23:97:08:c2:f4:b7:d5:f8:
41:05:0d:44:ee:73:21:6f:08:02:37:71:6d:5a:43:8d:8d:9e:
1a:8f:b8:70:f9:d1:21:ab:47:c1:33:63:f2:a1:6c:6b:ad:b0:
a8:3c:ec:3d:c9:3a:91:8d:e6:03:16:9b:0d:22:23:66:ee:42:
d2:c4:3d:14:aa:ac:03:14:9b:a7:14:e1:af:07:44:3f:b0:a0:
9d:bb:f2:7e:88:b9:d8:95:56:ed:10:67:81:bf:f3:e7:a4:45:
78:fc:56:82:e4:15:15:a2:95:00:08:98:c6:7a:ee:df:d7:73:
1f:5f:b7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:11:48 2026 by rpki-client