Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: nb6wdwsQke27GeoftPk8xxTHm7amaQZqDlc/3tnHBc8=
Subject key identifier: 0C:26:54:13:9F:85:35:8D:47:7A:3E:8A:8E:9F:2C:0B:F6:6B:98:03
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 019CADFEA6A165B241AD90DD81DD3C9C6758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 10:01:12 +0000
Manifest this update: Mon 02 Mar 2026 10:01:12 +0000
Manifest next update: Tue 03 Mar 2026 10:01:12 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: rCyPlgkRQjGYIYhtUCQ9M5zI1HA6F8XhSw80t87AnDw=)
2: P940wrtoSOiGfXWnPAL7D4ik23s.roa (hash: yBpdClWkxX2SD1Bh3PEyQOlFnyswp6gSM6sQE7NZAI8=)
3: iBC7FwhAoY4sCdG11O7Dv2YEsfI.roa (hash: +CQ9cSlWk2hoJW+Pv1/StWyf8H8JiZBkAeQB6L1HCX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:a6:a1:65:b2:41:ad:90:dd:81:dd:3c:9c:67:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Mar 2 10:01:12 2026 GMT
Not After : Mar 3 10:01:12 2026 GMT
Subject: CN=0c2654139f85358d477a3e8a8e9f2c0bf66b9803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:d4:2a:c3:95:e6:a9:cd:eb:74:fa:9a:87:
2a:7a:b8:e1:ad:1e:d2:1a:e0:d9:6f:ff:a4:3e:cb:
b0:6b:2d:ae:79:96:72:ad:6e:63:91:d1:db:f5:a3:
b4:54:4b:ae:55:ff:5d:3f:92:40:b9:cb:55:28:b7:
c6:2b:12:81:74:2c:42:16:97:11:a7:ea:f8:4c:0b:
ba:c3:0a:a1:94:37:f8:35:33:c6:b2:81:bb:c8:fe:
23:25:6c:b6:f5:95:51:ea:f2:dd:06:ca:80:c6:bf:
4e:7c:61:45:75:05:25:48:d4:21:c8:7c:b3:6a:0c:
05:4c:9d:77:01:1d:4a:d8:dd:95:41:12:18:c1:cb:
30:5c:a3:7e:1a:93:04:99:7f:b6:08:97:84:93:73:
a2:e0:8d:41:f5:7d:79:3d:80:a0:3a:04:0c:2d:b0:
d6:0d:fd:7c:38:ff:45:fe:21:6b:3c:e2:8a:37:15:
7a:14:aa:b2:bb:5e:e2:76:d3:73:0a:ff:71:cc:35:
76:94:6c:e5:5a:d9:eb:49:f3:19:93:ed:76:7a:bc:
9d:0b:e8:4b:b8:51:32:cb:df:7b:4b:6f:32:41:53:
3a:3a:8d:92:20:e6:eb:f2:93:14:66:83:9e:75:6c:
c2:55:87:40:b4:c8:f7:46:be:24:e4:00:5f:78:28:
1b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:26:54:13:9F:85:35:8D:47:7A:3E:8A:8E:9F:2C:0B:F6:6B:98:03
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:14:45:c0:ef:5f:17:d6:fa:6f:a2:d2:38:19:2c:c3:9e:3a:
c4:ff:d8:44:30:f1:94:53:c5:2b:b8:52:32:72:bf:9a:57:6b:
22:06:10:c1:3d:27:eb:9d:df:a2:81:b1:26:2e:d9:d6:4e:61:
b7:e0:cc:13:82:3d:12:57:57:a1:53:23:bf:9c:59:de:00:af:
9e:1a:86:4a:c7:a7:4c:4c:43:60:a5:2c:4f:b0:fa:c5:60:a4:
a2:17:55:c8:ff:18:aa:15:5d:eb:2a:76:55:26:9b:a8:bd:42:
44:69:41:fa:7a:08:15:d3:bd:d4:a3:91:af:4b:71:df:ee:25:
3e:11:b5:4b:29:b5:e2:9f:17:d7:a0:90:9b:a9:7a:c3:59:c9:
24:e2:98:7e:4d:17:7c:d6:6c:12:2d:45:0d:32:54:79:03:37:
df:3c:be:47:7d:72:a2:e3:12:22:44:e2:61:45:09:30:9e:8e:
06:e8:ad:f1:03:e8:90:8b:f8:fa:f0:7c:6d:07:df:27:c0:f5:
55:ba:df:b2:23:36:08:79:ed:6d:5e:f1:63:e2:69:48:4c:a9:
e3:c2:0e:1e:94:9f:a8:41:21:78:76:55:ad:e7:52:7e:20:67:
ef:6e:9a:e3:26:25:f4:3f:58:e4:d7:33:0e:e1:57:a4:fc:61:
69:44:07:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:07:47 2026 by rpki-client