Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
File: HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft (raw, json)
Hash identifier: DJyzu8/iR8jMPVDEILj/gpTf4uMaJpvkAPPVSku2IuM=
Subject key identifier: 26:0E:30:EA:F8:59:01:15:BF:70:E7:09:3B:73:A8:1B:6B:05:0E:AA
Authority key identifier: 1C:A4:BF:6C:9A:50:C8:1F:04:B0:29:83:6A:42:78:61:AD:72:82:9A
Certificate issuer: /CN=1ca4bf6c9a50c81f04b029836a427861ad72829a
Certificate serial: 019D265F10A6B3909F5EF38A7902D542107F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
Manifest number: 0EF5
Signing time: Wed 25 Mar 2026 19:00:57 +0000
Manifest this update: Wed 25 Mar 2026 19:00:57 +0000
Manifest next update: Thu 26 Mar 2026 19:00:57 +0000
Files and hashes: 1: HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl (hash: LcasIr6zP8OQI9qGysL8zsxV95/GQI9N0ZSW6Ek1OOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:10:a6:b3:90:9f:5e:f3:8a:79:02:d5:42:10:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ca4bf6c9a50c81f04b029836a427861ad72829a
Validity
Not Before: Mar 25 19:00:57 2026 GMT
Not After : Mar 26 19:00:57 2026 GMT
Subject: CN=260e30eaf8590115bf70e7093b73a81b6b050eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:86:69:a3:41:d7:53:1d:42:53:6e:26:41:df:
69:d5:90:a6:53:95:1a:58:df:80:6f:75:2e:58:37:
70:82:ff:d1:81:82:ce:eb:9c:af:0a:dc:ae:a6:b4:
61:5b:ae:a5:61:25:8c:d7:ae:d7:96:53:a5:cf:b1:
2f:60:48:5e:92:2e:2a:d4:d9:cb:40:49:64:3f:bd:
62:b1:8d:20:cf:eb:f8:54:47:fd:31:17:4a:43:54:
46:64:4b:1b:7a:62:87:a1:2c:18:b3:c6:c4:68:6b:
c9:d5:95:f0:77:25:0b:14:49:e4:d4:14:d3:ba:64:
37:30:a0:cc:b4:01:6f:16:5b:03:5c:e1:95:c8:8f:
4a:16:84:fc:c5:51:8a:24:bc:28:32:f1:d5:1a:e4:
fd:f0:3b:27:36:8f:04:8e:f2:f5:43:70:6d:7a:2b:
76:95:82:8c:95:61:db:59:63:1a:ac:65:ce:0c:fd:
cf:44:7b:05:f6:8a:a8:47:69:01:a6:11:ec:39:5c:
46:20:fe:01:0d:ac:ce:de:ff:87:6d:40:a6:15:cf:
97:ac:32:40:70:a6:c3:dd:5b:5f:99:5d:a1:48:f3:
37:c1:70:62:0b:39:1a:58:a9:56:32:3a:6d:10:27:
97:32:17:11:40:8d:41:83:67:b7:f8:16:fa:98:e3:
60:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0E:30:EA:F8:59:01:15:BF:70:E7:09:3B:73:A8:1B:6B:05:0E:AA
X509v3 Authority Key Identifier:
keyid:1C:A4:BF:6C:9A:50:C8:1F:04:B0:29:83:6A:42:78:61:AD:72:82:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:09:57:50:ae:dc:c8:05:ae:d1:c2:dc:7a:bc:7e:3f:71:f0:
47:b7:06:51:c5:f6:1b:08:7a:43:61:76:3f:84:6f:c9:50:5a:
bd:98:37:0f:5b:ef:72:11:fa:f2:42:b9:1b:aa:39:24:3a:8d:
db:a1:01:57:60:70:71:b4:d8:fe:e4:05:17:0c:7d:62:21:96:
5a:06:9c:86:6a:6b:f4:a3:9c:21:ee:01:22:10:e2:a5:69:cf:
df:19:d6:f6:2c:c5:84:53:11:b5:b3:6f:13:d4:bd:78:77:28:
9e:57:df:3c:09:40:1f:16:d9:4a:8c:60:85:b9:4c:db:0a:70:
e5:a9:f9:76:fe:15:92:e2:3d:65:01:d4:cd:db:3a:9a:35:70:
91:52:78:3e:3f:69:a7:44:06:0b:42:e0:56:d1:bd:e6:28:cc:
a8:04:73:c7:b0:aa:48:71:a5:00:f2:0b:6d:df:a7:4a:7a:50:
a0:70:6c:5a:0b:9b:94:04:2c:67:7b:aa:8e:43:9f:eb:2f:e1:
7e:14:b2:4a:09:d6:c2:2f:02:ed:22:9f:38:33:f3:52:6c:9a:
c9:d2:7a:5d:e5:59:d1:38:cd:84:53:f4:9c:5a:14:9f:71:9f:
ae:42:43:05:83:b6:1c:61:62:54:5e:15:aa:73:f6:19:ef:b1:
db:c5:9c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:32 2026 by rpki-client