Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json)
Hash identifier: +zrRklzTHYdYOiGnE2N30F9PgynCVyj++P8Uvyg1mxk=
Subject key identifier: A6:C5:F4:AE:AF:ED:CF:62:E8:FA:E9:08:2F:B3:D5:91:E7:E8:6B:5C
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial: 019D9C9A68AD4357CD526CB7CE6795DB2A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 18:00:58 +0000
Manifest this update: Fri 17 Apr 2026 18:00:58 +0000
Manifest next update: Sat 18 Apr 2026 18:00:58 +0000
Files and hashes: 1: PNTwbjg0hElaEm9Zppm7Dl7r-qw.roa (hash: +O0z/YSUkd6JHKZv79DXkMbJM2o6FO1n11oA1lofFBg=)
2: TV9FCFt6e1dnf-iSSWSuDHOypxE.roa (hash: eTnEXv1cjRUFIKzObjOMIk9gL0dgP2p/Hxl6K0g+qZ0=)
3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: qfLRrmaapFDINe9chQhqiwGG9bmXqXlVX5kuOBpqxnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:68:ad:43:57:cd:52:6c:b7:ce:67:95:db:2a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Validity
Not Before: Apr 17 18:00:58 2026 GMT
Not After : Apr 18 18:00:58 2026 GMT
Subject: CN=a6c5f4aeafedcf62e8fae9082fb3d591e7e86b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:71:4d:3b:d3:0a:00:a2:aa:8d:37:99:39:
36:16:e7:48:a9:42:20:7d:7b:4e:d3:9e:9e:37:f6:
24:e1:83:ce:7e:73:39:60:c5:44:2d:9d:a6:80:c7:
3e:be:d5:02:a7:3a:40:6f:a5:0f:5f:d2:d4:b8:d7:
0d:b0:c7:45:8d:14:36:9c:a7:6a:81:93:3d:e1:33:
81:c1:bd:8b:e8:74:1f:a2:1f:aa:b0:d4:b5:c3:21:
6b:da:b9:53:49:eb:c1:b4:5e:19:cd:f6:ff:7d:47:
84:43:3f:ab:b2:65:85:78:62:64:05:0d:35:ed:25:
15:6f:1c:19:71:c6:e7:85:67:7b:b1:e4:9a:1a:3b:
99:66:77:c1:af:5b:00:21:2f:f6:9b:20:14:ce:e1:
0a:b9:b8:fe:7f:61:5d:4d:8e:16:9b:ab:b9:a7:0e:
b3:7d:af:a1:36:dc:a5:10:58:49:e5:a2:ed:ce:47:
97:5a:d9:49:dd:b3:cc:bd:1f:40:0d:ad:92:8c:57:
91:61:2a:7c:49:e1:41:32:83:1e:fe:19:a0:70:cf:
48:66:45:f9:10:89:7c:a4:af:7b:f0:73:22:0e:3e:
80:3f:a3:30:69:0d:f9:05:d4:3d:68:39:aa:26:01:
42:1a:03:23:40:d3:52:ac:25:9b:ee:f7:4c:fd:89:
1e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C5:F4:AE:AF:ED:CF:62:E8:FA:E9:08:2F:B3:D5:91:E7:E8:6B:5C
X509v3 Authority Key Identifier:
keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2a:e3:ed:22:1d:ae:6c:2f:aa:c3:cf:87:a8:7e:ec:22:7f:
8e:30:1c:25:87:e7:44:a5:f0:ac:5c:c7:ac:80:16:90:62:a1:
08:64:19:1c:f9:71:3a:de:64:47:16:c8:fa:2f:b4:bd:02:e5:
22:48:5e:fc:75:6a:c2:8f:cc:53:ad:bd:0d:5e:94:47:2b:94:
3b:53:21:d3:90:80:bd:a9:66:6a:dd:13:23:12:43:f5:dd:98:
53:d1:08:02:61:45:9a:9e:79:db:a6:13:c3:65:10:ff:82:57:
f1:47:58:2b:9c:7d:00:67:1c:6c:92:b7:4f:2b:15:a5:0e:8c:
b5:c8:6f:d7:a2:7a:bf:44:a5:e6:4e:4d:40:b8:89:2a:19:46:
6b:20:9e:d7:dd:a9:cd:aa:f2:3b:94:9e:d4:91:af:83:65:f4:
9e:a3:9d:c1:08:09:f1:48:06:e0:53:e0:a7:ef:94:aa:21:2e:
60:6f:b0:16:a6:5e:c0:95:6d:7a:08:da:a7:56:66:97:9b:da:
b3:cb:7e:4b:3d:46:10:f1:e4:60:ef:6a:d4:8d:76:85:fd:83:
cf:e8:83:be:d0:22:c9:2d:ea:bc:01:e0:9f:9e:ba:84:c2:0a:
2e:ce:8c:d4:c2:51:96:0c:92:61:df:1e:a4:bd:e8:cd:1c:1f:
84:80:ed:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:45:07 2026 by rpki-client