Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json)
Hash identifier: yIFpALinVWJXA7Aw2yDEZV7G8E0YCuTD9VUllulO7kQ=
Subject key identifier: 2B:DD:24:D4:BD:45:F2:20:18:4B:5B:E3:15:C8:8C:0B:12:EE:B3:92
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial: 019E21DB494AB679802DEED231A3A94F7860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
Manifest number: 190D
Signing time: Wed 13 May 2026 15:01:19 +0000
Manifest this update: Wed 13 May 2026 15:01:19 +0000
Manifest next update: Thu 14 May 2026 15:01:19 +0000
Files and hashes: 1: PNTwbjg0hElaEm9Zppm7Dl7r-qw.roa (hash: +O0z/YSUkd6JHKZv79DXkMbJM2o6FO1n11oA1lofFBg=)
2: TV9FCFt6e1dnf-iSSWSuDHOypxE.roa (hash: eTnEXv1cjRUFIKzObjOMIk9gL0dgP2p/Hxl6K0g+qZ0=)
3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: JptSA9QxIXzUess5ZQ+zL2YbBzHM5oktlsf0A+LReFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:db:49:4a:b6:79:80:2d:ee:d2:31:a3:a9:4f:78:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Validity
Not Before: May 13 15:01:19 2026 GMT
Not After : May 14 15:01:19 2026 GMT
Subject: CN=2bdd24d4bd45f220184b5be315c88c0b12eeb392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:4b:85:27:a5:8f:5b:9e:c0:0a:34:59:5c:
f4:0b:38:e6:13:74:3e:f7:8f:f2:3e:3d:3f:f2:a5:
15:61:21:f4:7a:3a:a1:c6:8c:37:65:81:5a:0c:c2:
5e:a8:e4:31:b9:e6:01:ae:7a:0c:70:0f:bb:66:86:
e7:dd:3c:ff:ca:9d:ca:9b:42:e8:72:01:a2:42:62:
8a:16:52:85:6c:85:99:42:5f:ee:49:58:9f:9f:64:
a6:f5:7c:1a:f8:4b:a0:06:10:b9:9d:d2:eb:f7:be:
ef:62:f9:03:c3:f6:59:9e:32:91:0e:21:3f:01:df:
0b:e3:2f:1e:43:05:ec:42:c6:2a:72:26:e3:6e:01:
84:e4:97:35:36:0d:ba:2a:07:f4:a6:46:c3:7b:87:
8c:3e:03:cf:24:9c:a1:44:3e:c6:ea:76:5e:34:b7:
28:da:f9:b8:57:08:e5:83:c9:86:18:3b:66:f3:d0:
9f:f7:10:ed:0f:b2:69:83:eb:28:aa:ca:91:98:ba:
cf:3f:dd:52:70:4a:71:91:a0:a6:6b:5b:49:0a:fb:
e5:ee:34:48:5a:80:8c:03:08:3f:0a:84:53:37:d2:
70:a4:22:66:97:30:d7:32:cc:ff:6c:b6:f8:ff:1f:
6c:05:10:6b:97:49:29:ba:ad:aa:b8:0b:60:a7:5a:
59:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DD:24:D4:BD:45:F2:20:18:4B:5B:E3:15:C8:8C:0B:12:EE:B3:92
X509v3 Authority Key Identifier:
keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8e:16:fe:11:bb:bf:cf:60:dc:a5:b1:ce:1b:c3:a9:e0:c2:
5f:cd:e2:eb:e5:6a:03:05:aa:13:10:61:6b:10:e1:a6:32:f8:
eb:78:d0:8d:a5:d5:b3:95:2c:b2:bf:99:c4:a3:37:7b:4a:e5:
a3:60:44:b6:42:20:f4:c4:0d:18:93:28:26:ff:64:62:14:fb:
cf:fb:e4:ff:8e:61:52:a7:6c:18:47:cd:2e:ec:13:24:60:96:
37:fc:75:2a:4e:3a:18:92:2f:86:48:10:e6:44:7c:fe:6e:29:
cd:be:3e:c1:f5:1e:f3:a7:6c:29:65:0f:4b:62:49:eb:ea:dd:
88:e3:98:98:40:41:0f:30:6c:26:b6:31:38:1b:61:26:76:e7:
c0:37:e2:14:a2:7c:ec:b2:c4:4f:fd:b7:30:21:0c:f4:c4:ba:
89:79:66:ee:cb:70:e0:38:81:db:5c:d4:47:d4:2a:fe:cd:63:
0e:71:74:56:9d:18:9f:84:55:a3:bb:99:30:fe:d3:ed:b1:2e:
e0:13:3a:59:3a:85:27:e6:ed:de:df:58:70:f6:07:95:70:d0:
77:45:cb:61:3d:f4:88:0a:fd:9b:df:24:68:be:97:06:3f:0e:
02:55:ee:87:b1:a2:ca:c0:00:c6:ea:36:87:aa:4a:a4:81:e8:
80:4e:4d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:19:05 2026 by rpki-client