Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: p1JW5pzwuKiNjdUeVWuYcqAISL83ZDwkQlX6ZSrzpZU=
Subject key identifier: 6E:06:F6:F4:0C:DD:09:A5:88:4F:B2:C4:4C:02:52:38:BE:45:8F:9A
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 01A183E32220BA8C5117EB22C298DCAA33FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 1ACB
Signing time: Wed 28 Oct 2026 19:01:03 +0000
Manifest this update: Wed 28 Oct 2026 19:01:03 +0000
Manifest next update: Thu 29 Oct 2026 19:01:03 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: +D9jHJVhpHWY/0ESfXxIdxNmTDH3Of8VjiQ/V9JnDic=)
2: P940wrtoSOiGfXWnPAL7D4ik23s.roa (hash: yBpdClWkxX2SD1Bh3PEyQOlFnyswp6gSM6sQE7NZAI8=)
3: iBC7FwhAoY4sCdG11O7Dv2YEsfI.roa (hash: +CQ9cSlWk2hoJW+Pv1/StWyf8H8JiZBkAeQB6L1HCX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:e3:22:20:ba:8c:51:17:eb:22:c2:98:dc:aa:33:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Oct 28 19:01:03 2026 GMT
Not After : Oct 29 19:01:03 2026 GMT
Subject: CN=6e06f6f40cdd09a5884fb2c44c025238be458f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:37:2e:53:9b:4a:c3:33:a6:32:00:e8:6e:7a:
2c:5a:0d:8c:d3:94:4e:ae:2a:6f:b1:e5:99:27:c3:
13:0a:02:01:c3:d8:c8:09:8e:fa:b1:63:7a:8e:43:
6e:1d:aa:26:8d:6f:ae:e0:bc:2b:40:c8:1b:8e:0d:
9b:92:46:ad:5d:25:ea:d5:ed:1b:c6:37:bf:d6:15:
11:88:38:1f:dd:b8:64:cd:1f:ec:f9:1a:38:de:39:
cd:1b:2e:8a:0c:82:57:01:62:31:3c:e1:98:db:ae:
f9:3e:b6:c7:21:1d:7c:27:88:c6:e8:1a:07:e5:dd:
1f:a4:60:9a:32:b6:8c:27:ca:89:85:5f:cb:64:c6:
8e:16:ab:eb:56:6b:94:5a:7f:50:3b:b1:88:55:ac:
b3:90:88:a7:50:bf:95:ad:84:c0:40:41:b5:46:9e:
3d:52:cf:13:35:9c:79:19:e4:ce:52:9d:d9:e1:59:
4a:e2:c0:3c:60:0b:c5:49:04:51:4f:d8:7f:58:7b:
e4:0a:7f:88:af:1f:42:44:51:68:df:00:39:3b:ec:
32:7a:bf:23:49:ec:7b:7a:2d:65:c1:d0:86:28:c8:
92:30:f8:8d:24:48:b5:77:69:31:92:3d:84:cd:74:
a4:8d:c7:59:08:55:d4:88:26:68:62:44:b6:f4:8a:
2f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:06:F6:F4:0C:DD:09:A5:88:4F:B2:C4:4C:02:52:38:BE:45:8F:9A
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d1:ca:66:d7:cb:14:10:12:d7:79:5b:b3:52:10:06:8c:b5:
c2:54:63:5d:2d:e3:89:4d:20:a1:e4:5d:63:71:53:3a:07:5c:
63:e1:b3:17:84:6e:8e:a9:ee:12:f0:d5:2b:5e:b8:2b:05:4e:
2f:e6:83:28:e5:d3:85:f9:39:a7:da:a9:f9:51:c0:7b:13:7f:
44:7a:a0:22:70:75:24:98:b0:21:86:98:2c:b3:1d:93:7b:71:
bd:b7:4e:7c:a3:06:2a:74:60:82:bd:a4:2d:1b:9d:27:12:a0:
73:32:13:59:0c:20:e3:36:7f:7a:aa:77:00:20:2c:4e:96:21:
9d:fc:7e:89:55:2d:e0:b6:8c:01:cd:0b:2d:87:23:89:0b:4a:
2b:38:e9:f0:01:80:67:7d:c0:a1:5d:a8:27:0f:da:0b:76:66:
eb:c8:52:10:f2:bb:30:8a:8b:b5:ca:67:19:77:71:d6:b4:fe:
d3:6c:03:f9:c7:3c:74:9d:9f:f9:49:60:bf:31:2a:9c:38:1f:
45:6c:6e:d0:5f:5a:2e:12:40:0e:36:82:3d:51:c0:da:89:b5:
b9:74:3c:35:2a:29:37:b8:ab:91:2e:cb:35:fa:c5:e9:2f:1c:
90:2e:09:b5:0b:29:9d:5e:83:07:cb:03:2b:ad:64:1c:b2:64:
64:af:f9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:48:37 2026 by rpki-client