Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
File: hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft (raw, json)
Hash identifier: +KekAvYPMWC/NDUfk6DB5jzkZbuNk50GF3uPh99SuUM=
Subject key identifier: 16:A5:A8:98:74:45:59:71:45:1E:EE:23:4F:0E:7F:38:19:65:BD:52
Authority key identifier: 87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F
Certificate issuer: /CN=8738bf1cc1381678038ef5da67642398e3d9819f
Certificate serial: 01A187F6A50FAA9B25ABD1F358D06C545846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
Manifest number: 0617
Signing time: Thu 29 Oct 2026 14:00:50 +0000
Manifest this update: Thu 29 Oct 2026 14:00:50 +0000
Manifest next update: Fri 30 Oct 2026 14:00:50 +0000
Files and hashes: 1: AK5fjVDhmizgP5N4WwC82qqLCK0.asa (hash: BCGMl7e+HBKREdnhljbA+XbrVyYRzj2jOCrrG862mhg=)
2: hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl (hash: 2bqEqGGiKtoOtNDIIU0Hqwve6aer+muzSxx7ikT7/wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:f6:a5:0f:aa:9b:25:ab:d1:f3:58:d0:6c:54:58:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8738bf1cc1381678038ef5da67642398e3d9819f
Validity
Not Before: Oct 29 14:00:50 2026 GMT
Not After : Oct 30 14:00:50 2026 GMT
Subject: CN=16a5a89874455971451eee234f0e7f381965bd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:3f:d5:b6:cf:fb:e7:23:03:47:8a:9e:25:
2d:96:b8:a4:59:da:b9:3e:f1:60:e9:ff:9c:53:a7:
70:1d:1b:57:01:9d:5f:10:77:43:87:3d:e4:12:20:
c5:51:4b:72:fe:b6:41:ba:b8:02:46:f6:0a:5e:83:
74:ba:0e:e7:0d:67:c4:0c:de:84:7e:51:71:39:7c:
88:8a:96:73:ce:cc:2f:cf:93:9d:43:2c:b7:99:96:
5f:a9:cb:dc:4c:ce:31:0e:ee:bf:2a:53:17:9d:b9:
91:b9:06:53:19:a9:ed:c5:48:7b:df:0a:e9:de:1c:
80:e2:f7:09:11:f0:75:38:04:14:ec:6e:1f:ec:27:
10:3d:e0:fa:3e:a6:8d:84:8b:36:1e:9f:8d:de:fa:
c4:10:b9:f3:1a:2d:f8:ba:ba:9f:0d:6e:4f:80:57:
ef:09:f8:e3:a7:57:bf:18:8c:7e:15:b9:b3:70:f1:
7f:55:a2:d9:b4:84:65:e6:6e:d9:3a:de:57:65:b6:
ae:98:4e:6c:ac:38:08:6d:fb:f8:d4:c5:fb:c9:aa:
24:6f:58:b7:79:fb:94:6a:90:4c:ce:82:ad:02:2c:
35:0a:3f:d7:e5:89:e3:02:16:d8:00:03:98:db:50:
a2:91:cf:11:3c:f6:4b:35:25:0e:45:4a:3c:64:c8:
4d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A5:A8:98:74:45:59:71:45:1E:EE:23:4F:0E:7F:38:19:65:BD:52
X509v3 Authority Key Identifier:
keyid:87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0b:f7:34:58:7f:d3:5c:22:35:59:14:12:c8:55:3f:a5:18:
93:af:7a:a7:df:02:8d:a4:f7:8d:3a:0a:66:7e:fc:6c:5b:fa:
78:cd:d4:c1:05:70:20:14:29:08:8d:01:54:13:ab:f8:8f:bb:
21:75:d7:95:e5:c7:7a:84:eb:75:a5:b2:ce:37:f2:9a:e8:f2:
f0:dc:a0:5f:ce:0e:b0:4c:43:a7:86:38:4d:90:09:70:6f:4f:
9c:aa:bd:75:c8:71:7b:62:ec:e3:dd:4b:de:c0:9f:28:a0:5e:
b4:ad:52:42:ea:ca:62:57:04:8b:98:5a:b4:2d:b8:87:b6:69:
5a:55:d7:6c:d1:0a:65:3f:68:82:fa:ea:7d:33:fa:1e:4c:a4:
4c:fb:33:79:1e:82:c6:67:0b:4e:54:7b:ac:b0:bf:81:b8:3b:
a4:ee:38:84:6e:8d:e7:91:9f:19:78:33:57:b6:60:ba:f4:77:
90:d7:84:82:cf:f8:97:c2:f7:4b:2a:27:e1:3f:73:a0:02:d8:
35:f0:83:71:03:fe:8b:eb:1c:27:07:c9:38:11:06:ee:99:b5:
b7:bc:3e:5f:82:31:20:93:51:15:c7:3f:bd:46:1c:9e:8b:28:
25:af:a3:60:4a:65:2e:47:eb:c3:5b:d0:1e:09:6d:d3:d5:c6:
c2:67:f1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:03:35 2026 by rpki-client