Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
File: hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft (raw, json)
Hash identifier: MT6a/IpkC8w/u8GdB5+JH4rdSa9pkAetjnt1HWfsWzg=
Subject key identifier: 82:76:63:F6:A4:EC:37:F7:FD:8C:47:47:B6:D0:B3:01:3E:B8:85:23
Authority key identifier: 87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F
Certificate issuer: /CN=8738bf1cc1381678038ef5da67642398e3d9819f
Certificate serial: 01A1A8CC0159B089EB86DEFA65F73949F5E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
Manifest number: 0628
Signing time: Wed 04 Nov 2026 23:01:44 +0000
Manifest this update: Wed 04 Nov 2026 23:01:44 +0000
Manifest next update: Thu 05 Nov 2026 23:01:44 +0000
Files and hashes: 1: AK5fjVDhmizgP5N4WwC82qqLCK0.asa (hash: BCGMl7e+HBKREdnhljbA+XbrVyYRzj2jOCrrG862mhg=)
2: hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl (hash: ipIoNYL0FQfnw95rxRAY0xppm+hjAnIow2pnxKaxGwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:cc:01:59:b0:89:eb:86:de:fa:65:f7:39:49:f5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8738bf1cc1381678038ef5da67642398e3d9819f
Validity
Not Before: Nov 4 23:01:44 2026 GMT
Not After : Nov 5 23:01:44 2026 GMT
Subject: CN=827663f6a4ec37f7fd8c4747b6d0b3013eb88523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:37:38:5b:39:90:56:52:6e:c9:40:96:bc:e1:
10:24:58:85:d5:b1:34:9d:3c:e4:33:12:4c:43:dd:
a2:1f:fd:26:ad:0b:70:be:fe:9a:ea:1c:f0:06:aa:
f8:6d:9a:a6:6c:71:b7:84:0b:c7:be:03:91:8c:47:
55:7a:b0:10:26:45:a4:ae:7b:f3:67:dc:66:01:7c:
3c:9e:57:19:3e:c1:19:1c:20:2e:99:6d:a2:da:4a:
1f:f2:23:3c:a1:81:e9:02:bb:de:0f:22:ec:68:64:
f6:bd:d4:e0:1a:87:61:b7:c5:bb:66:04:02:b8:4c:
42:21:0b:00:8d:19:86:de:20:f1:a5:a9:b8:39:8e:
43:49:7c:cb:1f:df:d4:6c:70:fc:13:b6:f4:85:3a:
56:ce:53:73:f5:d9:3b:b6:87:80:5f:fa:56:96:c0:
d8:2e:99:ea:b4:6a:f6:40:1d:cb:5d:d4:71:34:c8:
98:a4:84:dd:66:e9:5e:9f:59:c7:0b:af:81:e7:27:
08:b5:fe:5d:ee:ac:92:63:3f:37:ab:65:d4:a2:54:
4a:2f:26:8e:24:a9:7e:75:db:5c:3f:55:96:a4:85:
d9:e8:52:95:89:a0:5c:99:cb:94:34:18:7b:a3:29:
ff:49:54:da:ba:ff:22:9e:03:a2:bd:7c:54:e1:7c:
da:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:76:63:F6:A4:EC:37:F7:FD:8C:47:47:B6:D0:B3:01:3E:B8:85:23
X509v3 Authority Key Identifier:
keyid:87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:70:5c:bd:8d:11:25:c4:23:47:6c:43:f1:a0:93:b2:d4:9a:
9c:fe:26:d6:6a:8e:97:81:9b:f1:cf:5e:07:8d:ed:26:e6:8a:
12:ca:2e:44:22:c8:72:f1:21:59:3e:ed:f9:56:ec:b8:0d:4f:
ce:6e:08:a2:e3:a5:0c:ce:d9:3f:6d:d7:35:98:96:b0:60:45:
27:07:07:73:06:49:1b:51:68:a7:95:f5:7d:9f:70:32:7d:15:
e2:f6:c2:f5:70:43:49:ef:1f:93:17:ef:71:d5:11:e7:b4:0a:
88:05:fe:b1:dd:0c:50:16:8d:31:90:09:b4:af:3c:bb:12:6c:
1e:4c:9e:6a:ca:f5:46:40:6e:f4:2b:53:1e:cc:91:bf:ff:9e:
a9:5b:c2:92:89:9b:30:83:3e:6e:c4:f0:7a:f1:16:1c:75:36:
18:6c:b0:f9:df:cf:5d:72:14:60:67:88:64:19:c1:46:3d:24:
7e:52:70:7f:26:83:1e:b6:db:0a:43:d7:94:08:98:87:50:11:
29:86:ed:e9:39:80:0a:e5:ec:eb:3b:f8:28:2b:70:9e:65:6f:
68:c8:89:bb:b9:53:fd:22:ca:aa:6e:9c:58:03:5d:a5:2b:bb:
a1:e8:94:2a:3c:e7:23:7b:81:6b:cd:45:51:40:32:36:04:68:
a6:0b:25:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:11:47 2026 by rpki-client