Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: OCPcs+P+70YNOZYp85q/mBQxkRkk37SNRGqFiMztsRw=
Subject key identifier: 30:06:B6:83:DD:93:14:26:9B:D7:B0:1A:FC:67:C7:49:97:53:33:7B
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 019F9F2804E0602E3EA1EE3BAE403DD78903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 19D0
Signing time: Sun 26 Jul 2026 16:00:27 +0000
Manifest this update: Sun 26 Jul 2026 16:00:27 +0000
Manifest next update: Mon 27 Jul 2026 16:00:27 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: P5g5K0aHcqB7bRAWH9LtIo2LULaaK0ZCL//JEMLLkTs=)
2: P940wrtoSOiGfXWnPAL7D4ik23s.roa (hash: yBpdClWkxX2SD1Bh3PEyQOlFnyswp6gSM6sQE7NZAI8=)
3: iBC7FwhAoY4sCdG11O7Dv2YEsfI.roa (hash: +CQ9cSlWk2hoJW+Pv1/StWyf8H8JiZBkAeQB6L1HCX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:04:e0:60:2e:3e:a1:ee:3b:ae:40:3d:d7:89:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Jul 26 16:00:27 2026 GMT
Not After : Jul 27 16:00:27 2026 GMT
Subject: CN=3006b683dd9314269bd7b01afc67c7499753337b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:95:08:cd:fb:c8:ad:5c:4a:a6:b3:49:4c:
d3:e9:7c:ff:e8:95:93:8b:db:34:bc:fa:c5:1c:3d:
93:94:49:54:96:94:e2:b0:48:b3:8d:52:17:ff:24:
09:87:ae:f7:4c:69:b8:e3:48:05:25:53:cb:4b:4d:
4b:01:a7:7e:e9:a2:21:06:72:be:6b:ef:e5:76:bc:
19:a2:8e:a3:a2:9e:21:3a:33:43:e3:16:73:c8:c4:
2a:c7:e9:ec:91:81:13:aa:81:f7:ef:08:8a:e9:f7:
87:c7:1f:b7:fb:ca:88:71:95:b0:e6:f8:f4:a0:b8:
71:a5:1f:6b:e6:30:35:c6:f4:47:c7:38:92:86:5f:
88:95:87:7d:c2:1d:46:00:e3:66:0f:eb:86:33:de:
76:4d:d3:57:b1:44:3a:5d:ad:b0:b5:d2:01:f4:58:
ce:6c:48:fb:f2:a2:71:d8:38:d0:aa:cd:2b:d0:5e:
19:33:35:b7:5e:dd:8a:4c:44:ab:af:4d:34:15:06:
0e:05:2d:97:79:fc:c4:00:b1:1a:58:40:e6:0d:b3:
48:30:19:ae:ee:32:66:4b:78:0b:99:55:27:16:7c:
91:82:61:dd:28:50:9f:3c:38:4f:75:ca:d9:77:a5:
94:b6:e8:1c:a8:ee:0a:cc:78:4f:1e:1f:cb:37:00:
d5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:06:B6:83:DD:93:14:26:9B:D7:B0:1A:FC:67:C7:49:97:53:33:7B
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7b:db:e6:db:36:0f:d5:43:12:cb:3b:6d:5b:4a:0f:ed:16:
0c:fb:bf:6d:2a:a5:3c:59:01:27:97:9d:7f:e4:a6:2b:04:1d:
97:c4:24:09:08:c1:6e:e1:09:e4:1e:37:a1:05:fe:af:20:1a:
f1:3c:f9:35:13:91:87:87:86:ef:50:25:ff:ae:aa:da:26:03:
04:8c:7b:7d:5c:85:94:f2:24:54:18:34:ff:76:ea:c8:58:cd:
15:1f:30:9a:ef:31:5e:f2:f4:1c:a6:ae:ff:39:04:a5:01:4d:
b6:4e:4c:1c:fa:c4:a3:a0:e5:5d:da:74:7e:ad:e7:49:75:26:
36:ce:22:d2:e9:b8:72:9d:db:56:50:6e:42:cb:bd:01:d0:98:
c2:8e:74:4d:90:57:95:2c:d3:81:6e:2f:50:2c:c6:85:10:22:
ed:09:f1:8c:95:c4:6a:f6:1e:31:39:72:1a:7b:e2:d8:76:34:
3f:ed:d5:ad:8e:8b:42:de:a1:d8:ae:1a:b9:67:45:40:70:9b:
88:fc:71:63:61:39:4f:41:d8:61:44:bc:98:45:8c:8a:0e:d0:
3b:7f:42:7d:d4:6e:c7:7a:8f:bf:a0:0c:44:31:6e:5c:30:7e:
ae:1b:05:4a:a5:d9:aa:10:a1:f3:4c:60:90:1a:4f:9f:ab:e1:
86:28:4d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:52:33 2026 by rpki-client