Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json)
Hash identifier: 7YJP+9O733dHZnEzgv5PjXFlzY030Qb4eeZ6g51AqWo=
Subject key identifier: 51:A1:3A:AE:46:98:1B:0D:59:10:FC:62:EA:A2:ED:B0:F5:21:66:86
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial: 019EBA6B742998EE46C231C8091892A794A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
Manifest number: 195C
Signing time: Fri 12 Jun 2026 06:01:04 +0000
Manifest this update: Fri 12 Jun 2026 06:01:04 +0000
Manifest next update: Sat 13 Jun 2026 06:01:04 +0000
Files and hashes: 1: PNTwbjg0hElaEm9Zppm7Dl7r-qw.roa (hash: +O0z/YSUkd6JHKZv79DXkMbJM2o6FO1n11oA1lofFBg=)
2: TV9FCFt6e1dnf-iSSWSuDHOypxE.roa (hash: eTnEXv1cjRUFIKzObjOMIk9gL0dgP2p/Hxl6K0g+qZ0=)
3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: DBgMb+3TwXZpeho3q28pVRv3I2buRlATSBpxOGKJevc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:6b:74:29:98:ee:46:c2:31:c8:09:18:92:a7:94:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Validity
Not Before: Jun 12 06:01:04 2026 GMT
Not After : Jun 13 06:01:04 2026 GMT
Subject: CN=51a13aae46981b0d5910fc62eaa2edb0f5216686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:eb:4c:9e:d5:26:ed:1f:ea:33:76:3c:5a:6f:
dc:62:46:4c:6a:5b:46:17:6a:e9:2c:f5:c3:9d:82:
ab:1f:70:1a:ff:1c:40:fa:ee:ec:d3:01:05:c3:aa:
c5:73:e3:c8:68:75:7f:c6:c6:6e:12:ed:c2:82:4c:
0f:e9:57:3e:59:3a:3f:89:64:ec:d0:ce:e6:8d:9d:
fe:86:52:45:18:74:a5:06:82:fd:7b:e3:61:5c:89:
2e:5e:f5:b4:15:4a:f6:a0:d5:f1:01:b7:ec:a3:4e:
9b:9d:89:7d:f9:a8:8a:40:48:bd:ec:49:36:df:f4:
22:0d:ea:b7:33:64:06:d3:97:b8:04:e7:c5:e8:ed:
0f:c9:c4:72:fb:5e:c6:82:51:46:47:7d:95:8e:eb:
73:89:4d:ff:61:0f:cd:5d:0a:71:1e:d1:e9:d4:18:
19:46:50:63:13:4f:01:c3:e8:69:7a:2e:17:75:0e:
54:4f:9e:60:4e:f3:54:8e:f6:83:21:f3:da:b5:86:
31:8f:e4:85:27:ec:66:97:18:55:85:30:af:d1:fb:
09:7c:ac:e1:18:2b:df:47:52:3c:8f:45:4c:7f:72:
a6:d0:fb:7e:39:44:79:94:3d:cb:05:b6:0b:d3:38:
c8:1a:5c:d6:6d:31:94:f9:d3:ab:be:d7:aa:83:34:
2e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A1:3A:AE:46:98:1B:0D:59:10:FC:62:EA:A2:ED:B0:F5:21:66:86
X509v3 Authority Key Identifier:
keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7e:47:d1:eb:4d:e8:ed:a1:f2:92:93:b1:df:77:18:52:07:
56:4b:34:2d:a8:d5:4c:5a:f5:72:b9:60:9e:99:f6:a5:dd:66:
cc:70:a8:3b:8c:be:d3:2e:28:e2:cc:23:55:ca:13:3b:27:6b:
99:ac:1f:71:23:6a:a1:c4:54:73:6b:e8:4c:47:37:7b:57:79:
1f:20:78:67:f6:a0:ee:55:93:ee:45:8c:89:4d:9c:55:a7:4b:
2f:87:7b:34:2b:c5:c3:5a:b0:a5:aa:13:44:f1:d7:4b:ca:99:
0c:13:45:ae:81:58:b2:e9:0e:29:b8:ac:a1:69:92:0e:9a:ab:
bb:fe:a8:17:3d:27:ed:65:c8:6b:0c:1a:67:94:64:4f:b8:f2:
b5:39:60:19:fc:87:d1:73:1b:e6:aa:c8:fb:8e:12:2d:14:ae:
8c:3e:08:88:e7:d7:6f:74:23:b7:37:b9:f1:19:13:3f:27:ef:
e3:45:50:99:38:07:2a:58:36:84:2f:c3:ec:b4:74:b7:09:01:
96:13:c1:d5:0a:c0:6c:85:d3:e8:80:cb:c1:b4:f0:8e:5c:8f:
a5:f3:ff:d0:6e:62:4c:f5:5c:50:cd:ba:d2:62:42:b3:4e:a0:
f7:01:d0:87:78:f0:99:76:55:28:88:da:a8:93:07:37:98:d7:
59:a2:70:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:31:27 2026 by rpki-client