Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
File: hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft (raw, json)
Hash identifier: Am8OpXtKdIrumBPeNxuQi2EMy+vLAa8Sj2PY6kpLmb8=
Subject key identifier: E4:9C:C7:57:E3:B0:09:A1:D4:78:A2:42:42:48:21:ED:03:84:84:CB
Authority key identifier: 87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F
Certificate issuer: /CN=8738bf1cc1381678038ef5da67642398e3d9819f
Certificate serial: 019D371B2855979C8D5FF73577A23FE8A2AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
Manifest number: 03DA
Signing time: Sun 29 Mar 2026 01:00:19 +0000
Manifest this update: Sun 29 Mar 2026 01:00:19 +0000
Manifest next update: Mon 30 Mar 2026 01:00:19 +0000
Files and hashes: 1: hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl (hash: HMQFTSGi2Q5nbFAZLiDrBn9zukAw+TlhyLkN1SqKfK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:28:55:97:9c:8d:5f:f7:35:77:a2:3f:e8:a2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8738bf1cc1381678038ef5da67642398e3d9819f
Validity
Not Before: Mar 29 01:00:19 2026 GMT
Not After : Mar 30 01:00:19 2026 GMT
Subject: CN=e49cc757e3b009a1d478a242424821ed038484cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:df:71:c8:4d:3d:cd:ed:ae:ba:b5:c7:47:de:
1b:10:2f:f7:32:da:11:dd:79:29:49:a7:f2:0a:3a:
fe:de:78:bf:a2:be:4a:a7:6d:0a:d9:41:a1:7c:bd:
d5:7e:56:9f:72:3d:9b:bc:fe:91:c6:05:ea:13:08:
80:0e:6f:85:fa:38:e3:36:21:5e:59:ad:35:f7:e8:
94:83:0f:ee:13:3f:23:42:1c:15:ca:71:5b:c6:5d:
34:17:72:34:44:d3:99:73:f3:08:d5:6e:fc:0a:1a:
ae:29:d3:90:60:2f:4c:4b:fd:2d:97:07:f2:17:12:
37:86:9d:4a:07:f0:18:52:c5:41:86:4c:08:d4:39:
6c:0a:8c:49:23:55:cb:b8:70:e0:d5:a3:65:b5:c0:
3e:e0:5f:ca:a6:81:f6:fa:9f:a5:66:8c:03:c3:2f:
75:b1:40:3c:9f:a2:ca:e0:bc:b3:4b:c8:0f:a8:d3:
26:18:18:e4:95:c7:60:e6:fa:c3:99:ba:b5:94:df:
4b:78:47:fe:c2:07:f6:8a:d7:64:aa:4a:f9:fb:ca:
93:fe:be:00:14:9f:8c:57:1a:07:3c:d3:f4:81:61:
aa:a5:62:80:99:1d:de:d7:a9:b1:7f:ff:44:25:26:
50:a2:94:a2:7c:bc:32:7f:28:fa:d1:15:52:b0:83:
47:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9C:C7:57:E3:B0:09:A1:D4:78:A2:42:42:48:21:ED:03:84:84:CB
X509v3 Authority Key Identifier:
keyid:87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:04:8d:de:07:b8:75:93:6a:1d:af:8f:47:60:7e:32:08:f8:
ae:0f:af:1b:de:c3:2d:cd:fc:48:22:a6:c2:6a:66:bc:01:13:
fe:9a:9d:f3:3e:32:f0:fd:42:de:23:5b:9d:fa:bd:64:8b:07:
66:37:1c:b0:1d:3c:f8:1f:fc:6a:11:b0:90:f4:29:cd:ea:34:
02:63:b5:bb:9b:f5:3b:03:77:1b:b6:d2:38:3d:12:07:91:2b:
bd:93:74:1d:22:7e:fc:0d:f1:7d:dc:10:2e:db:f6:a0:2e:96:
99:6e:32:4a:70:89:08:b2:8f:ab:56:c3:92:e5:76:43:5d:11:
93:65:77:b5:6d:ff:57:6c:48:de:eb:3b:7f:fc:25:2c:bd:ea:
6b:bb:79:00:1f:a6:a9:4f:eb:f0:a2:86:6e:fd:d2:2f:d1:5d:
44:00:2a:34:27:e2:a7:e1:d2:51:45:d1:99:5b:83:f8:32:1b:
b9:30:8a:a6:b4:11:13:43:f3:ae:b7:e9:8f:f6:7a:be:76:c5:
cb:78:24:f4:22:24:be:1d:b1:16:4d:4e:f9:eb:6f:b0:90:b3:
98:48:1f:f5:5d:21:4c:fd:03:8e:47:43:f3:3f:58:f1:cd:43:
c1:4e:50:8d:7e:19:5d:57:02:58:33:fa:c2:d2:47:65:e9:9d:
de:b3:54:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:36 2026 by rpki-client