Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: H3eNngNFK9LIl45zItkzW87W0pJ84dqyfz+qFyWRcZc=
Subject key identifier: 96:93:9C:AF:D6:CC:F2:DE:BF:F9:C8:11:33:20:A9:DF:0A:B7:73:C6
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 01A08EA06F7C23B5CAD7448E5B8213392062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 1A4C
Signing time: Fri 11 Sep 2026 04:01:14 +0000
Manifest this update: Fri 11 Sep 2026 04:01:14 +0000
Manifest next update: Sat 12 Sep 2026 04:01:14 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: Bnt4vqpLq6AV44JKHa0hJ3ruw0cwEnkE0hSMkn1dVi8=)
2: P940wrtoSOiGfXWnPAL7D4ik23s.roa (hash: yBpdClWkxX2SD1Bh3PEyQOlFnyswp6gSM6sQE7NZAI8=)
3: iBC7FwhAoY4sCdG11O7Dv2YEsfI.roa (hash: +CQ9cSlWk2hoJW+Pv1/StWyf8H8JiZBkAeQB6L1HCX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:a0:6f:7c:23:b5:ca:d7:44:8e:5b:82:13:39:20:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Sep 11 04:01:14 2026 GMT
Not After : Sep 12 04:01:14 2026 GMT
Subject: CN=96939cafd6ccf2debff9c8113320a9df0ab773c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b4:0e:07:23:44:46:f6:88:1f:fa:c6:97:2e:
96:87:20:27:1a:7a:b4:23:9b:81:23:f6:05:5e:5b:
d3:b6:c6:fc:ff:bd:8c:f8:0d:89:c9:57:52:7e:ba:
dc:33:11:e3:c6:f6:ad:d3:2f:19:64:88:c2:91:04:
26:89:81:78:82:f9:26:96:6b:27:47:fa:84:0b:7b:
73:d7:8b:7b:3d:ea:5b:96:16:f3:a0:9a:48:4f:c3:
08:75:29:47:c2:78:7f:70:63:18:0a:04:36:3c:6b:
f7:10:ab:55:ca:61:58:6a:ae:a0:c7:88:3b:65:b2:
c6:7f:48:61:77:71:34:27:6b:3b:09:99:21:27:f0:
45:2c:3c:41:dd:06:51:79:f9:39:f6:fe:3a:30:48:
05:0a:46:58:33:dc:ed:15:5c:8a:8b:87:76:20:84:
d2:9a:7f:db:c7:f9:0d:b9:f7:a2:d8:86:f9:d1:41:
c3:d6:75:c8:15:b4:4e:d4:58:7a:14:36:f9:10:ce:
5d:82:ad:40:bd:8d:0b:96:33:88:02:9b:98:22:6d:
36:f8:5a:1f:d0:50:f4:70:26:bb:d3:b5:d1:b7:f9:
33:dd:89:12:9a:04:ae:d1:ce:33:bd:e2:9b:e3:d7:
b2:58:c4:51:f0:5b:22:11:36:a5:74:61:94:b6:2a:
25:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:93:9C:AF:D6:CC:F2:DE:BF:F9:C8:11:33:20:A9:DF:0A:B7:73:C6
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4f:0d:f8:7b:a0:14:cb:cc:63:54:58:8c:36:c8:9b:76:b7:
d8:8e:3c:8e:bf:cb:6c:60:0b:90:3c:07:c4:f0:0f:3f:b2:7c:
0e:2c:28:e7:8a:8d:05:57:16:fc:58:d8:87:47:9d:00:77:3f:
8e:06:88:85:4d:67:75:aa:0c:df:31:df:64:58:04:ea:82:72:
fb:30:a8:21:5e:91:1a:4f:a8:82:77:4b:f3:da:1f:77:ea:13:
91:31:ad:f8:b8:81:83:d5:80:1d:7e:fe:c6:0a:d3:19:b1:47:
77:be:79:60:55:76:8a:96:51:82:c0:12:8b:33:28:99:7a:12:
4c:a7:f1:24:6d:27:64:ee:66:61:f7:2e:fd:77:c5:14:49:34:
01:a7:6e:a1:63:be:38:95:0d:3a:7c:f1:ba:9e:a8:8f:75:64:
e0:be:7c:8d:ce:c9:cf:a7:fc:31:08:90:e7:7e:f0:88:0f:fc:
b8:61:cb:33:5a:5e:e5:bc:d9:a3:90:e2:a0:81:38:62:8e:bc:
28:8b:83:02:c9:80:37:cf:ee:ec:a1:bd:7b:81:e3:42:39:a4:
f5:86:ce:27:f0:13:8a:79:ac:bb:40:18:49:25:7a:35:17:0c:
b1:85:c0:98:56:97:42:bf:1f:56:5c:e7:5e:12:d9:12:59:13:
f0:be:3b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:57:46 2026 by rpki-client