Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: q4Sq1JR9K/R1vVhEj/YjapglQEpIqj3JJzL072VMGHc=
Subject key identifier: C0:2F:61:9F:7C:F3:0C:82:E0:76:74:AC:66:CC:42:C6:E3:97:EB:78
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 019D390A1CD84680AB207AAB613D318E862B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 10:00:57 +0000
Manifest this update: Sun 29 Mar 2026 10:00:57 +0000
Manifest next update: Mon 30 Mar 2026 10:00:57 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: bHKRLjVrhiqtpe5txTeMEMBGpkozGD96pGRxG13OPsQ=)
2: P940wrtoSOiGfXWnPAL7D4ik23s.roa (hash: yBpdClWkxX2SD1Bh3PEyQOlFnyswp6gSM6sQE7NZAI8=)
3: iBC7FwhAoY4sCdG11O7Dv2YEsfI.roa (hash: +CQ9cSlWk2hoJW+Pv1/StWyf8H8JiZBkAeQB6L1HCX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:1c:d8:46:80:ab:20:7a:ab:61:3d:31:8e:86:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Mar 29 10:00:57 2026 GMT
Not After : Mar 30 10:00:57 2026 GMT
Subject: CN=c02f619f7cf30c82e07674ac66cc42c6e397eb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7c:82:cb:55:74:1e:f5:18:20:d3:a9:d6:d5:
34:b9:f1:42:7e:76:e8:00:9d:00:95:23:58:d5:7f:
ba:46:bc:2a:9a:d7:11:86:a0:ef:ca:88:d0:f1:4d:
ed:74:c1:5b:50:9f:91:d5:96:eb:50:9b:c7:5a:40:
ee:76:08:99:fa:e2:3a:e4:f8:fc:03:c4:3c:f9:ab:
99:cd:fa:c2:6d:e0:00:c5:b8:28:cb:6c:b2:6c:d9:
2d:5e:bd:a5:f0:27:17:1c:d4:9d:76:46:6d:3d:e0:
f3:9d:91:5b:ab:51:11:e0:69:27:b0:12:32:84:2b:
e8:6c:3a:f7:3f:b6:43:27:d7:b7:20:54:32:35:0e:
c9:c9:cf:c7:61:04:79:42:83:7b:a8:07:88:86:1b:
3b:35:ca:47:3d:1e:9a:bb:05:15:29:01:ca:15:04:
ae:ca:d7:33:d9:27:74:38:a0:06:17:57:6a:97:c4:
ec:73:e4:50:43:83:07:79:73:9d:f0:e4:6e:70:74:
1c:39:e0:b4:83:09:b5:b0:4b:2d:e6:38:99:ae:f2:
81:aa:52:eb:eb:e5:df:44:b3:75:0d:25:cd:31:92:
70:dc:77:65:3b:ef:ca:fc:f8:9b:8f:bc:9e:2b:ca:
ec:a1:8f:4b:98:39:05:53:59:2a:c5:50:aa:eb:52:
df:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2F:61:9F:7C:F3:0C:82:E0:76:74:AC:66:CC:42:C6:E3:97:EB:78
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f8:9a:0e:cc:5f:7e:a1:b7:88:ba:9b:47:96:83:51:23:81:
d6:89:2a:e6:50:79:0b:9d:e5:fa:0b:dd:c2:61:31:4a:a0:31:
9e:e9:71:92:3c:c5:40:d8:9d:a8:55:3e:0a:c6:c8:34:82:a2:
9c:51:13:e2:91:ff:42:c9:c2:3a:7b:2e:f7:b5:1f:3e:86:50:
d5:2b:c1:01:2f:9f:8b:36:65:ff:1a:a2:bf:13:b1:8b:35:19:
ec:9d:ca:2d:05:cd:5b:5e:1e:eb:4b:54:47:03:31:a9:45:f7:
84:bf:e8:db:24:30:b8:ae:99:b3:f6:cf:9e:ed:13:65:eb:c3:
11:a4:27:8d:40:28:50:16:c3:cb:10:a9:64:02:6b:5d:24:03:
be:9e:a7:55:e5:11:f0:bf:4c:b5:22:f2:b9:cd:f7:65:19:ef:
1e:7c:41:3b:f4:1f:9d:96:0f:1d:4c:72:2b:ab:c2:e6:0d:75:
b3:32:40:4f:76:49:65:ad:a5:18:41:a4:90:b1:76:20:66:86:
48:45:df:cf:a4:7b:05:cc:94:32:00:3d:87:9f:21:4b:b1:c1:
fb:ef:be:88:91:7a:47:d9:f2:d3:b9:6b:57:1f:78:ca:ed:b8:
f3:de:f1:e0:62:87:49:20:ea:3f:c0:53:65:8c:9f:11:9b:3a:
8c:36:71:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:44 2026 by rpki-client