Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: 5sFxi3Y6uXf+UuNnXmtNdz2nYKs1FVussasd9ZJcMqg=
Subject key identifier: 1C:8B:AE:1D:4C:29:C3:88:A6:CF:5C:85:13:65:EB:47:93:7D:4F:F8
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 01A187BF70657938D7A4400331354A498DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 1ACD
Signing time: Thu 29 Oct 2026 13:00:32 +0000
Manifest this update: Thu 29 Oct 2026 13:00:32 +0000
Manifest next update: Fri 30 Oct 2026 13:00:32 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: ZzcTqntTHGyHradQQ6cuhROEmFGzgiieBk+e4l/pFgU=)
2: P940wrtoSOiGfXWnPAL7D4ik23s.roa (hash: yBpdClWkxX2SD1Bh3PEyQOlFnyswp6gSM6sQE7NZAI8=)
3: iBC7FwhAoY4sCdG11O7Dv2YEsfI.roa (hash: +CQ9cSlWk2hoJW+Pv1/StWyf8H8JiZBkAeQB6L1HCX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:bf:70:65:79:38:d7:a4:40:03:31:35:4a:49:8d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Oct 29 13:00:32 2026 GMT
Not After : Oct 30 13:00:32 2026 GMT
Subject: CN=1c8bae1d4c29c388a6cf5c851365eb47937d4ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:66:6c:7c:be:33:16:ef:36:60:d9:cb:51:
96:b4:bc:d0:36:9b:b5:01:58:b0:84:e8:60:4e:01:
82:41:2d:8d:58:9c:85:a0:38:41:b7:bf:bb:8a:c9:
4b:8c:35:b9:c5:5d:89:1a:40:e1:76:a0:43:39:d7:
71:f6:24:8b:92:d7:24:1f:b5:d3:1a:62:15:16:0d:
b6:9a:cb:c2:0e:68:d7:3e:4d:0b:ae:4f:a6:21:3e:
a1:36:d2:25:ef:ff:69:a7:88:fa:10:c1:bf:07:31:
a8:98:62:f8:af:42:19:2d:e7:ec:34:34:88:ba:be:
24:16:7b:fa:9f:5a:2d:2e:d5:0c:38:f6:0c:41:22:
56:74:97:bd:41:44:82:29:89:c7:f2:f8:0a:dd:bb:
ca:b7:0f:93:67:d4:e2:55:fb:88:99:fe:a0:35:bf:
4e:83:e4:26:0e:7f:f7:76:21:fa:b2:6b:b4:f5:3e:
d6:cc:43:fe:fc:71:95:0b:6b:5f:b8:8e:09:bd:c0:
b4:e9:c5:52:41:8a:92:75:8d:08:e9:c4:ff:44:55:
01:24:63:11:67:00:db:7a:79:01:fa:0a:47:7f:aa:
9c:36:6a:1c:49:86:02:12:e7:57:fe:f0:c2:59:68:
eb:b2:0f:5f:56:5b:77:2f:e6:fd:60:b1:1e:05:79:
32:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8B:AE:1D:4C:29:C3:88:A6:CF:5C:85:13:65:EB:47:93:7D:4F:F8
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a2:cf:2e:83:3d:b4:6a:61:a8:fa:6c:bb:c2:73:e0:a5:44:
dc:bc:90:ac:85:9a:2b:79:ab:a2:83:d4:f7:6e:19:cb:e9:f4:
9e:61:a3:f0:96:ec:1d:2f:88:bf:91:b4:6d:a9:8f:33:f3:a2:
9d:9a:99:7f:79:1b:98:4f:4c:60:33:b3:40:b6:27:19:d9:58:
83:10:ff:7e:3e:1a:5b:d9:e3:9d:ca:60:b5:93:bc:d8:7d:8b:
1f:56:8f:8f:89:19:99:f4:ff:9b:5a:47:e1:31:46:7e:7b:1c:
59:73:c3:08:65:a3:cf:8c:b6:b8:ae:04:62:b9:77:ec:88:b8:
34:cd:55:03:63:93:0f:5b:1c:39:f7:fa:71:b1:61:98:8d:8b:
26:df:14:60:74:1b:ae:71:ca:7e:5a:e0:97:ff:e6:10:03:f4:
bf:57:14:10:2c:6d:56:bc:30:84:0b:6a:6b:e1:08:8f:c5:c9:
db:00:64:65:51:4e:c8:8d:41:26:ba:f4:1f:c8:02:33:37:e5:
32:0b:5e:94:e1:30:5f:a3:3c:ed:0f:f2:fd:c9:5a:b5:e3:be:
6f:69:75:40:d0:72:35:ee:51:c1:dc:1f:ab:f7:24:bf:32:97:
a9:38:55:55:9d:80:15:c3:25:90:bf:05:4d:a2:f0:87:2c:5d:
ce:01:b3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:04:35 2026 by rpki-client