Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
File: hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft (raw, json)
Hash identifier: CrEYbmQ9O5jNKViHLRbrot7LkMxuwPK6ggjp/Y+z4mw=
Subject key identifier: 3B:27:73:2C:E3:43:D9:AE:A4:5B:D2:30:A9:81:E3:FE:BC:06:55:4E
Authority key identifier: 87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F
Certificate issuer: /CN=8738bf1cc1381678038ef5da67642398e3d9819f
Certificate serial: 01A0BD305BCA501ACEC72F958E1D6BCAC86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
Manifest number: 05AE
Signing time: Sun 20 Sep 2026 05:00:57 +0000
Manifest this update: Sun 20 Sep 2026 05:00:57 +0000
Manifest next update: Mon 21 Sep 2026 05:00:57 +0000
Files and hashes: 1: AK5fjVDhmizgP5N4WwC82qqLCK0.asa (hash: BCGMl7e+HBKREdnhljbA+XbrVyYRzj2jOCrrG862mhg=)
2: hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl (hash: 9+k0KZ15j42V2xBJ7f+08j8BEf6ArXnDIabnNN75nVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:30:5b:ca:50:1a:ce:c7:2f:95:8e:1d:6b:ca:c8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8738bf1cc1381678038ef5da67642398e3d9819f
Validity
Not Before: Sep 20 05:00:57 2026 GMT
Not After : Sep 21 05:00:57 2026 GMT
Subject: CN=3b27732ce343d9aea45bd230a981e3febc06554e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0a:67:7a:d1:84:74:a9:e8:6e:21:ce:6c:1e:
47:5d:83:87:6f:5a:e8:28:53:26:d0:3f:23:3e:a3:
29:9d:b6:c5:27:00:2e:22:0c:72:21:9c:a3:e2:dd:
00:12:5b:9d:63:fc:9c:f2:07:53:98:8c:f1:78:ef:
c8:81:09:a5:a5:6a:60:ba:e0:c4:a6:36:a6:8a:f3:
ea:74:0f:58:2a:2e:7a:2a:a1:4f:7c:1c:21:5a:53:
84:5d:8f:da:aa:59:13:a1:90:8f:5d:14:8a:e0:4e:
1f:2d:e2:d2:67:97:c6:b4:bf:34:aa:35:ef:4d:ab:
52:b7:d4:d0:79:a9:85:ab:fa:37:80:6e:7f:3d:19:
3c:c5:00:cf:c4:0f:80:45:de:07:e9:f6:c5:84:92:
b8:5a:b0:8a:e3:ad:47:90:4d:a7:36:77:41:01:56:
8e:36:ea:9a:2e:e2:4f:d5:85:4d:d8:ba:32:53:41:
8c:35:7d:7c:eb:b4:4d:16:1f:9d:99:07:85:34:d8:
87:7b:ca:7b:26:6d:a1:38:33:69:0c:f5:f3:cb:3e:
f8:c3:d3:aa:46:11:1e:c0:49:a3:ac:99:d9:84:ee:
d6:ce:90:6e:a6:db:8d:85:b9:76:84:58:d7:28:f6:
ed:06:ee:bf:20:bd:5a:98:d9:a8:9e:51:e4:68:14:
8a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:27:73:2C:E3:43:D9:AE:A4:5B:D2:30:A9:81:E3:FE:BC:06:55:4E
X509v3 Authority Key Identifier:
keyid:87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:48:2c:3b:5f:02:f3:d5:bb:c1:ce:ef:e0:33:a2:bf:73:ee:
7e:47:23:0c:9c:81:da:5b:c6:63:11:2c:07:5c:8b:8a:c4:51:
88:c6:d8:35:05:36:9f:6f:54:92:04:9c:ce:71:af:43:d4:34:
e7:20:a8:97:f3:a7:32:1a:c1:ab:a4:26:2d:7e:5a:0c:03:24:
3b:c0:c9:cb:e2:df:f9:21:c0:97:89:29:1d:1d:dc:ef:5d:51:
95:f2:d9:f1:81:82:86:e3:90:47:cf:2a:e5:4a:0d:9a:6a:3e:
98:c1:bd:31:75:8e:37:fe:74:62:c1:2f:bd:1e:9f:8d:22:0c:
6a:4c:9f:c0:93:53:ee:5f:55:18:ee:a5:8a:b6:39:9c:a0:49:
f8:15:4a:c4:3e:23:4a:09:46:39:59:7d:33:ae:7b:b1:cc:b7:
26:89:6b:95:3b:11:72:f8:1c:b9:0a:49:bf:3f:41:bf:62:1a:
f3:e2:7e:03:5c:bb:48:34:ee:a3:af:83:26:5b:3a:cf:a1:b3:
1d:96:c0:b2:57:08:12:c7:3e:ec:d5:1c:a5:e4:f8:d6:17:ed:
44:bd:3d:30:b5:a4:16:b2:52:41:1d:3c:c0:be:0d:e4:80:71:
05:a8:74:8e:1d:34:2a:ab:96:12:c8:d6:07:24:19:a4:80:42:
da:70:90:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC9MFvKUBrOxy+Vjh1ryshrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MzhiZjFjYzEzODE2NzgwMzhlZjVkYTY3NjQyMzk4ZTNk
OTgxOWYwHhcNMjYwOTIwMDUwMDU3WhcNMjYwOTIxMDUwMDU3WjAzMTEwLwYDVQQD
EygzYjI3NzMyY2UzNDNkOWFlYTQ1YmQyMzBhOTgxZTNmZWJjMDY1NTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gpnetGEdKnobiHObB5HXYOHb1ro
KFMm0D8jPqMpnbbFJwAuIgxyIZyj4t0AEludY/yc8gdTmIzxeO/IgQmlpWpguuDE
pjamivPqdA9YKi56KqFPfBwhWlOEXY/aqlkToZCPXRSK4E4fLeLSZ5fGtL80qjXv
TatSt9TQeamFq/o3gG5/PRk8xQDPxA+ARd4H6fbFhJK4WrCK461HkE2nNndBAVaO
NuqaLuJP1YVN2LoyU0GMNX1867RNFh+dmQeFNNiHe8p7Jm2hODNpDPXzyz74w9Oq
RhEewEmjrJnZhO7WzpBuptuNhbl2hFjXKPbtBu6/IL1amNmonlHkaBSKcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsncyzjQ9mupFvSMKmB4/68BlVOMB8GA1UdIwQY
MBaAFIc4vxzBOBZ4A4712mdkI5jj2YGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHppX0hNRTRGbmdEanZYYVoyUWptT1BaZ1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xYjI4ZWItYjVhYy00NmZjLTg5NmIt
NTFmNzNjZDEyNWJmLzEvaHppX0hNRTRGbmdEanZYYVoyUWptT1BaZ1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xYjI4ZWItYjVhYy00NmZjLTg5NmItNTFmNzNjZDEyNWJm
LzEvaHppX0hNRTRGbmdEanZYYVoyUWptT1BaZ1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0gsO18C
89W7wc7v4DOiv3PufkcjDJyB2lvGYxEsB1yLisRRiMbYNQU2n29UkgScznGvQ9Q0
5yCol/OnMhrBq6QmLX5aDAMkO8DJy+Lf+SHAl4kpHR3c711RlfLZ8YGChuOQR88q
5UoNmmo+mMG9MXWON/50YsEvvR6fjSIMakyfwJNT7l9VGO6lirY5nKBJ+BVKxD4j
SglGOVl9M657scy3JolrlTsRcvgcuQpJvz9Bv2Ia8+J+A1y7SDTuo6+DJls6z6Gz
HZbAslcIEsc+7NUcpeT41hftRL09MLWkFrJSQR08wL4N5IBxBah0jh00KquWEsjW
ByQZpIBC2nCQUA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 11:05:33 2026 by rpki-client