Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json)
Hash identifier: M89h7Vp1aMr8ZAb759rhzmrLGWTxXXpCHGDJvhxlZzI=
Subject key identifier: 36:AC:03:BA:4C:E2:5B:47:77:76:F1:E7:C6:D8:BF:C9:30:EE:98:0C
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial: 01A08BD5BC595EB760AFD3FFC37DD7541138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
Manifest number: 1A4D
Signing time: Thu 10 Sep 2026 15:00:35 +0000
Manifest this update: Thu 10 Sep 2026 15:00:35 +0000
Manifest next update: Fri 11 Sep 2026 15:00:35 +0000
Files and hashes: 1: PNTwbjg0hElaEm9Zppm7Dl7r-qw.roa (hash: +O0z/YSUkd6JHKZv79DXkMbJM2o6FO1n11oA1lofFBg=)
2: TV9FCFt6e1dnf-iSSWSuDHOypxE.roa (hash: eTnEXv1cjRUFIKzObjOMIk9gL0dgP2p/Hxl6K0g+qZ0=)
3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: F2iT6QQYzUB1l22ep/WNIfrEISYc3qHf4JNxOlKEtTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:bc:59:5e:b7:60:af:d3:ff:c3:7d:d7:54:11:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Validity
Not Before: Sep 10 15:00:35 2026 GMT
Not After : Sep 11 15:00:35 2026 GMT
Subject: CN=36ac03ba4ce25b477776f1e7c6d8bfc930ee980c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:ec:71:cf:06:d4:93:9b:d7:49:f4:30:63:
6e:dd:58:d5:50:c5:b3:21:f0:9d:6f:9a:79:60:04:
32:44:0d:eb:ec:c4:00:c7:d4:61:16:0f:ed:d7:08:
14:13:3b:07:31:d3:da:77:e2:e9:35:c4:0d:90:30:
65:d4:71:19:91:da:26:3a:58:67:7c:c5:4b:19:e9:
e7:8a:b2:f9:b7:b1:a4:76:e6:b7:9a:76:22:de:f9:
4c:f9:67:85:99:5a:ac:40:4b:a7:f9:05:c8:78:50:
a5:4d:f6:b2:f4:f8:2d:20:4b:11:c7:59:be:34:98:
3b:37:fa:10:c9:9b:89:3f:31:bc:1e:28:ad:07:e3:
4b:2b:c8:43:95:6f:eb:c2:66:cc:de:a6:99:9f:49:
c0:48:e6:dc:91:da:e4:be:52:fd:55:eb:e1:81:a3:
9a:c3:79:5d:d0:8a:0b:14:82:74:12:9d:85:90:a0:
1c:cf:40:6e:6e:e2:71:f7:db:c6:28:26:5e:29:20:
7f:b4:67:aa:e4:4b:31:54:76:ce:31:51:3f:55:b8:
15:b9:20:be:3a:8f:a1:6d:58:50:71:cf:f5:cd:fd:
4e:4d:76:23:15:9e:b9:f8:0b:8b:e3:5c:0d:5e:e7:
f0:54:b3:92:41:c1:98:30:a1:19:5c:c6:d2:d4:97:
f5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AC:03:BA:4C:E2:5B:47:77:76:F1:E7:C6:D8:BF:C9:30:EE:98:0C
X509v3 Authority Key Identifier:
keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:90:85:61:88:90:72:2c:c0:82:f6:3f:36:9d:94:81:0c:8b:
a9:24:dc:2f:f3:bb:4c:83:a7:63:e9:bb:f5:9d:74:cb:6b:c8:
5a:aa:0a:0b:32:f2:da:aa:ee:b2:09:ac:aa:37:c1:4a:b2:7a:
c1:8f:79:e7:9c:64:81:c6:ff:c8:13:28:f2:a6:2f:91:6f:a5:
88:b0:b0:09:98:d3:33:ac:dc:49:fd:5a:d2:2b:83:0a:e0:39:
2b:e6:ec:b0:30:15:84:2d:17:35:e5:fb:98:a4:05:e0:2f:73:
0b:85:86:37:1c:4d:e2:2e:6e:e2:53:78:ed:6b:cf:8e:30:dd:
6a:3c:4d:df:1a:de:36:20:8c:94:f0:e9:ef:ae:fe:33:46:a7:
16:d7:fc:b1:0f:5a:5b:37:9e:75:15:6d:d0:63:e4:f8:b9:9c:
eb:71:fc:48:b1:b8:c8:60:d9:09:68:4e:90:58:11:0e:29:cb:
35:66:59:ce:ab:55:f0:5d:eb:cc:40:eb:28:7b:33:f9:7e:09:
e9:e1:5a:d0:be:2b:3e:aa:37:19:2b:a3:02:43:28:d4:2c:5d:
4c:33:1e:bd:a2:a3:bb:9b:b0:5a:93:68:c6:02:e1:06:e8:51:
39:bf:07:7d:bf:7e:c3:20:8a:77:b5:60:6f:66:f4:ae:a2:ef:
04:72:20:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:17:24 2026 by rpki-client