Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json)
Hash identifier: JZWa8CkU78/vLG4YlJK5+wIR9sFyg/8zXEgA+yZNXq0=
Subject key identifier: EC:EA:8B:4B:A3:AD:7F:A6:CF:30:7B:53:E7:73:15:95:7A:BC:BB:F0
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial: 019F94A454A276CBDDE112157ECB4B9D58AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 15:00:25 +0000
Manifest this update: Fri 24 Jul 2026 15:00:25 +0000
Manifest next update: Sat 25 Jul 2026 15:00:25 +0000
Files and hashes: 1: PNTwbjg0hElaEm9Zppm7Dl7r-qw.roa (hash: +O0z/YSUkd6JHKZv79DXkMbJM2o6FO1n11oA1lofFBg=)
2: TV9FCFt6e1dnf-iSSWSuDHOypxE.roa (hash: eTnEXv1cjRUFIKzObjOMIk9gL0dgP2p/Hxl6K0g+qZ0=)
3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: RXSsp7/1InU403DAVRgjR5lzwp1O85CvAHirfHm+7do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:54:a2:76:cb:dd:e1:12:15:7e:cb:4b:9d:58:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Validity
Not Before: Jul 24 15:00:25 2026 GMT
Not After : Jul 25 15:00:25 2026 GMT
Subject: CN=ecea8b4ba3ad7fa6cf307b53e77315957abcbbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b2:a2:bb:15:36:0d:03:dd:1f:47:09:55:af:
1d:f4:6d:40:51:c5:4a:53:12:a8:6e:50:a2:f9:ae:
14:a9:88:cd:6e:ab:bd:18:bf:ee:5a:ac:8b:03:cd:
aa:d9:c1:96:2e:d4:d5:5c:43:a7:8a:fe:9e:27:e6:
16:8e:da:b0:62:71:5d:e4:74:83:b5:2a:6e:0a:cf:
63:c6:f1:4d:34:17:09:83:dd:ef:96:62:58:d8:1b:
1b:1f:aa:44:a9:e2:c5:56:30:c1:85:63:22:8d:25:
21:58:2c:cb:e7:b2:69:b2:84:27:a8:76:58:c8:b7:
0a:ac:76:48:bb:08:1a:d3:40:ad:10:7b:e4:58:db:
7b:be:cb:56:c8:3a:e4:29:29:07:9d:eb:5c:ca:ad:
18:9b:e1:43:f8:3a:db:4e:e5:45:46:e1:23:ec:6e:
8e:cd:77:13:c1:f6:20:7a:5d:fd:d3:d8:20:05:c6:
54:be:a2:f8:dd:17:98:8a:0f:16:f6:be:9a:a8:1d:
aa:a4:55:89:e5:a1:5f:ac:84:cd:05:45:9e:86:ad:
f7:6c:58:5d:9b:0a:f0:0c:42:2a:c2:53:7d:5d:49:
88:3d:10:46:ac:ee:62:fc:9a:28:07:f4:ff:38:5a:
60:f8:f8:95:e7:f4:b4:11:9c:06:9b:c0:3c:a9:c9:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EA:8B:4B:A3:AD:7F:A6:CF:30:7B:53:E7:73:15:95:7A:BC:BB:F0
X509v3 Authority Key Identifier:
keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:34:1e:9e:77:71:0c:58:5a:72:83:c8:a2:2a:b2:eb:79:ed:
24:8a:2e:07:cd:28:b0:87:44:0e:31:bc:8a:89:5f:37:8a:54:
f7:b3:99:3e:b2:65:0b:d2:c7:86:4e:69:3c:ad:77:2b:ae:73:
05:ed:8c:6c:bc:10:a6:a2:ac:a0:11:07:ef:25:57:61:b4:16:
8f:35:50:5a:f7:53:0b:6e:9d:cb:74:88:43:d6:56:c8:1c:0b:
93:1e:62:9f:c6:38:fa:15:72:0e:fc:26:2d:74:4f:01:a2:e7:
ab:2d:85:e4:88:59:6b:50:ed:34:cb:29:56:63:fe:38:65:64:
cc:22:e7:8d:b1:be:b3:9e:dc:a0:ae:0b:a6:95:7f:a0:7f:9f:
f2:fd:ae:9d:f3:e6:f7:45:0b:e1:2d:30:88:c9:60:44:9f:8e:
e0:50:04:c4:05:b7:51:fe:bc:17:61:46:04:0d:57:b3:55:38:
28:62:70:2b:13:1b:a6:06:f7:a8:27:64:c7:76:a2:51:9a:48:
27:64:63:39:01:54:e0:ff:8e:d4:75:63:1c:1e:eb:69:3f:2f:
61:2d:3a:94:41:20:66:be:9d:76:35:d6:4d:65:7b:ae:d0:40:
b9:f5:24:b1:f1:69:a8:4b:9d:b5:6b:8e:74:63:44:87:88:b7:
e1:87:4f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:50:59 2026 by rpki-client