Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
File: HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft (raw, json)
Hash identifier: 69MECkOYwjJEvbOoASSgrazATbQafDRluSBE0OFcKQs=
Subject key identifier: 97:0A:8B:A2:DE:52:1D:CD:BB:65:61:75:B1:E2:73:73:7F:3C:76:BD
Authority key identifier: 1C:A4:BF:6C:9A:50:C8:1F:04:B0:29:83:6A:42:78:61:AD:72:82:9A
Certificate issuer: /CN=1ca4bf6c9a50c81f04b029836a427861ad72829a
Certificate serial: 019D37C07AA3544429A9ACCDC1A4C3A46314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
Manifest number: 0EFE
Signing time: Sun 29 Mar 2026 04:00:54 +0000
Manifest this update: Sun 29 Mar 2026 04:00:54 +0000
Manifest next update: Mon 30 Mar 2026 04:00:54 +0000
Files and hashes: 1: HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl (hash: E6CO5OT5N+aoRNNH8rSofDzcIJW9KkuJ4Nzb7UHdXHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:7a:a3:54:44:29:a9:ac:cd:c1:a4:c3:a4:63:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ca4bf6c9a50c81f04b029836a427861ad72829a
Validity
Not Before: Mar 29 04:00:54 2026 GMT
Not After : Mar 30 04:00:54 2026 GMT
Subject: CN=970a8ba2de521dcdbb656175b1e273737f3c76bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:d2:05:87:5d:05:73:26:4c:a1:db:fa:6a:
72:17:bb:93:69:61:85:f5:3c:0c:5d:33:37:3f:e5:
b4:ed:7b:86:02:cb:76:99:93:a9:50:f4:b5:26:0c:
2d:dc:d1:2b:d8:49:86:5a:5d:2c:11:92:ce:33:56:
6d:d1:be:47:e6:43:f3:b1:59:41:80:26:e0:d1:12:
ec:3a:ad:76:ee:e7:dc:c5:89:ab:c7:86:b3:23:f7:
59:12:9e:e2:c5:3a:20:13:8e:b8:24:83:da:b4:ca:
e4:a4:08:71:83:1e:29:a7:18:4e:02:d4:80:6f:71:
90:36:1e:76:63:7e:f9:b0:02:be:13:4c:f3:69:7a:
53:61:62:42:0a:42:a9:d8:57:fa:50:c0:b0:ac:1c:
60:7f:00:ac:4a:6b:44:c6:6a:a5:b8:1d:42:3f:45:
d4:b6:0d:88:86:de:0d:fc:d9:28:03:aa:6f:db:7a:
36:6d:af:ea:89:f0:78:3c:85:47:1d:1d:e3:ab:47:
1a:47:64:1a:fd:01:7f:42:4d:96:48:75:7d:34:89:
5f:3c:b5:58:a4:2c:56:d4:a8:13:14:92:db:75:c6:
32:d1:05:3d:32:5e:93:12:6a:73:0e:12:b3:e8:b2:
a7:a6:d1:63:56:bd:71:4e:4b:c8:fe:b9:1f:c6:e6:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0A:8B:A2:DE:52:1D:CD:BB:65:61:75:B1:E2:73:73:7F:3C:76:BD
X509v3 Authority Key Identifier:
keyid:1C:A4:BF:6C:9A:50:C8:1F:04:B0:29:83:6A:42:78:61:AD:72:82:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:96:d5:44:b5:83:17:67:e0:43:1e:82:22:8d:c7:fe:c9:bc:
4c:48:1c:61:7f:95:99:64:e6:ea:cd:19:43:dc:ff:a3:ae:98:
7e:a7:18:b5:b9:9e:71:02:1a:6d:d5:c6:32:15:8f:05:bd:f7:
2f:ef:81:40:48:31:a0:3b:57:97:bb:ec:69:ac:47:ad:88:72:
92:27:a1:3b:60:de:81:66:36:18:c4:8f:92:1a:15:14:c3:d8:
2f:36:e1:3e:ff:3d:ae:36:c8:78:21:82:64:7c:b2:93:ab:fa:
ab:ff:73:f4:c0:8e:12:99:e7:42:4a:0d:73:66:e5:d2:81:2c:
71:d0:da:c9:04:cf:7b:cd:a2:64:d7:be:48:29:1a:98:be:a1:
e0:7a:29:71:c7:71:1d:32:3b:18:b9:e0:a6:67:aa:9d:f4:e6:
2e:b6:4a:48:56:0d:d0:14:73:55:37:5a:d0:d5:27:08:95:cd:
ad:3b:aa:09:97:35:67:e0:62:68:7b:2e:29:f4:15:c5:57:6b:
12:56:c5:ce:a1:d1:04:ba:26:55:ef:8d:bb:7f:da:50:17:4b:
58:b5:28:19:10:45:e2:b3:c0:db:2f:be:93:eb:e4:21:ff:2c:
90:1c:2a:26:b7:84:a6:bd:e7:7d:9b:93:64:29:0f:fd:70:ac:
ee:25:63:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:51 2026 by rpki-client