Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
File: hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft (raw, json)
Hash identifier: w76Mb3IzLyHxotXuMdi5s/MBmhetgmvEzKsmHjSMuHM=
Subject key identifier: DA:A3:B6:EB:E2:BA:44:C7:EF:56:BE:08:E9:74:E1:C5:DF:1B:A7:9A
Authority key identifier: 87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F
Certificate issuer: /CN=8738bf1cc1381678038ef5da67642398e3d9819f
Certificate serial: 01A08AF9FEE11FFBEA320AC158B47B927E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
Manifest number: 0594
Signing time: Thu 10 Sep 2026 11:00:34 +0000
Manifest this update: Thu 10 Sep 2026 11:00:34 +0000
Manifest next update: Fri 11 Sep 2026 11:00:34 +0000
Files and hashes: 1: AK5fjVDhmizgP5N4WwC82qqLCK0.asa (hash: BCGMl7e+HBKREdnhljbA+XbrVyYRzj2jOCrrG862mhg=)
2: hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl (hash: GZbps6U4omjH4WWubmCTWbb7BaD37SJdqudeiNSCcdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:f9:fe:e1:1f:fb:ea:32:0a:c1:58:b4:7b:92:7e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8738bf1cc1381678038ef5da67642398e3d9819f
Validity
Not Before: Sep 10 11:00:34 2026 GMT
Not After : Sep 11 11:00:34 2026 GMT
Subject: CN=daa3b6ebe2ba44c7ef56be08e974e1c5df1ba79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:ca:10:39:e3:97:9e:7d:98:9f:14:a6:b8:
f8:9e:4b:34:06:fc:e1:bb:4f:5b:56:62:1e:b5:46:
c3:b4:fe:1c:4d:01:49:df:11:33:eb:c3:12:b2:24:
41:8d:b6:00:db:d3:4b:f1:97:57:4d:49:3a:10:ab:
84:e8:48:ee:8d:c0:4b:53:96:90:61:16:0a:45:85:
b7:22:a3:ff:e3:3e:38:7e:3b:6f:ec:4c:9b:b2:4f:
15:ef:45:34:98:16:42:c6:39:e1:71:7f:85:89:ba:
1c:7c:95:6b:3a:ff:e6:ae:f1:78:49:5f:5a:88:5e:
de:44:60:7b:60:80:62:20:ff:75:f3:e0:8b:5b:9e:
78:7c:75:b4:90:e5:f6:f2:ae:52:43:a2:87:1f:df:
d9:cc:7d:83:3f:06:47:c4:8c:5e:98:5f:32:00:e1:
ea:9b:75:fb:6e:c1:30:95:6d:64:4f:53:41:df:c0:
af:b6:b3:fb:5e:e0:98:84:29:52:ef:f7:b2:d4:7b:
36:d0:df:1c:d8:18:95:b1:74:76:c0:e6:11:ad:d0:
48:42:e4:09:dd:d0:61:b7:74:84:c5:9a:51:dc:24:
ba:bd:14:2a:08:24:1b:f8:b9:97:7a:19:f8:a1:71:
7a:06:f8:cb:7e:6e:ff:3f:62:92:bd:f9:b4:a6:1d:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A3:B6:EB:E2:BA:44:C7:EF:56:BE:08:E9:74:E1:C5:DF:1B:A7:9A
X509v3 Authority Key Identifier:
keyid:87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2a:0f:9c:15:af:7f:e3:28:ed:a8:d0:b4:73:2c:10:69:e7:
ea:6c:9f:b6:6a:2f:55:f8:19:42:7f:26:b6:22:e4:8a:bd:c0:
09:7d:38:f4:7d:9c:df:38:be:c9:9a:fb:bb:71:d3:bb:d8:12:
5c:e0:44:ee:d0:4c:8a:98:36:92:2a:56:a3:41:0f:b5:5d:99:
9c:a4:8a:f4:9d:fa:75:c3:08:f9:92:06:ab:19:40:3c:3e:e0:
c5:8f:34:6e:92:4d:c3:18:7e:a8:41:b5:dd:87:08:d8:3c:8c:
77:a2:ec:10:27:2a:70:70:3a:a2:4d:8e:6b:1b:5d:1e:f4:b0:
96:9e:fb:5e:72:0e:8a:23:8d:29:a7:1b:f0:ab:5e:80:58:a1:
ac:bb:78:fd:08:89:7c:2c:ae:3b:4b:10:24:ad:8c:b5:76:b6:
71:37:3c:8a:eb:13:f7:f3:3d:12:d2:54:c5:33:57:28:6c:89:
c4:3e:9d:43:cb:aa:6d:9e:cc:43:3a:eb:57:b2:02:13:f5:3a:
c9:e0:7f:ed:2e:10:b1:25:fe:a8:c8:86:68:b2:9c:77:42:d6:
aa:65:84:b5:ce:6b:8b:5b:9c:b8:ee:ee:fd:5a:ab:73:5b:69:
2e:72:3c:03:da:cc:43:e6:1a:2e:b1:7f:09:9d:f7:1e:03:13:
22:a3:9b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:03:02 2026 by rpki-client