Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: jV/BdMQMUFokNGdpRybJId3wDox3m1L1+Xm1JFbHS4c=
Subject key identifier: 6A:33:0D:0D:87:94:AA:65:6B:85:80:9A:8B:5B:37:29:C0:75:D5:48
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 019EB76A1AC57833D99ED1D5B5718836E8E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 16:00:44 +0000
Manifest this update: Thu 11 Jun 2026 16:00:44 +0000
Manifest next update: Fri 12 Jun 2026 16:00:44 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: LebmUZ1UWMIy3XBG5dAafvCRo098DNHVbRn84X2iaDs=)
2: P940wrtoSOiGfXWnPAL7D4ik23s.roa (hash: yBpdClWkxX2SD1Bh3PEyQOlFnyswp6gSM6sQE7NZAI8=)
3: iBC7FwhAoY4sCdG11O7Dv2YEsfI.roa (hash: +CQ9cSlWk2hoJW+Pv1/StWyf8H8JiZBkAeQB6L1HCX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:1a:c5:78:33:d9:9e:d1:d5:b5:71:88:36:e8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Jun 11 16:00:44 2026 GMT
Not After : Jun 12 16:00:44 2026 GMT
Subject: CN=6a330d0d8794aa656b85809a8b5b3729c075d548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:d5:be:e4:f9:3b:95:2a:1a:ab:d3:f3:91:
0a:db:df:9d:50:d3:db:6c:e4:d8:46:c4:81:b6:13:
54:b7:9b:1a:27:cd:6a:21:76:90:26:a9:a6:0f:aa:
bf:0e:ac:72:74:84:56:e9:21:04:cb:90:7e:38:75:
35:fa:d8:eb:bd:a8:85:86:8a:0d:03:6c:58:ec:95:
a7:27:9a:89:03:e3:46:c0:d5:a3:d2:03:4a:ae:13:
df:47:61:16:6b:f8:0d:0a:20:df:83:bc:e6:f9:b7:
84:03:94:39:a1:98:41:46:2f:35:de:df:95:cb:16:
19:46:ef:94:e1:34:f2:dd:28:15:8e:eb:4f:a9:93:
13:54:bb:26:1b:00:9b:64:ff:93:32:65:82:ca:a0:
25:ce:81:0f:a0:49:21:71:73:3d:5c:65:f0:20:81:
18:84:c5:18:2c:7a:13:fd:c7:6f:4c:a8:3b:43:9e:
98:a2:92:3f:74:0d:ec:6e:56:28:ac:58:70:6f:4f:
6d:a3:0d:f3:a9:15:82:d4:46:d8:22:d3:8d:85:f3:
15:45:81:ef:15:84:41:64:b1:2e:10:12:bb:ff:2c:
ea:90:f7:db:ac:b5:f8:17:24:e8:29:0d:05:ed:74:
78:92:ea:e9:cb:87:46:47:14:3c:7e:7a:0f:62:59:
ac:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:33:0D:0D:87:94:AA:65:6B:85:80:9A:8B:5B:37:29:C0:75:D5:48
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:34:e7:0f:39:52:c6:0d:3d:a7:45:2b:da:b8:e8:ff:53:32:
36:81:49:34:1c:f2:ea:b0:c8:61:d8:15:e3:7e:01:0c:41:a9:
82:18:6d:d9:81:3e:64:73:01:f8:dc:8b:d3:12:da:a0:62:7c:
3f:62:29:16:ab:53:4a:41:22:5d:42:25:ba:10:2a:05:ce:b6:
21:e1:5b:d6:03:9b:a8:8f:6f:94:7a:7f:9b:07:2f:93:16:65:
45:af:ec:59:fa:c9:e0:c7:87:5e:1c:56:fc:62:02:7a:27:ce:
b1:a8:6d:56:ef:d8:b4:6a:a9:f8:24:42:59:83:bc:0a:c4:69:
07:b5:81:35:78:08:72:23:f3:68:c8:f3:2b:a9:7e:82:2a:60:
24:4f:23:b6:75:19:7d:6d:89:12:d3:e4:96:35:72:0e:de:63:
8f:60:88:33:d5:8c:7e:1f:79:9a:2c:0e:48:38:25:f2:ff:a3:
fa:4f:fb:01:e8:ae:69:e6:4a:e9:83:9d:26:ab:15:2c:99:62:
f5:99:7b:cc:20:9c:cc:63:3f:a9:13:ab:c6:6f:d4:2c:c0:93:
a6:dc:9e:93:1f:15:c7:dc:d5:4d:3a:61:92:5d:da:27:30:17:
2c:61:1a:69:25:ab:05:6d:88:f2:bd:f9:57:f1:c8:2c:88:37:
63:17:05:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:49:40 2026 by rpki-client