Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: yHOyA6hxfwv6aoR9pM1yDvH1N3hoMctpKNM99dbT/Mk=
Subject key identifier: C3:BC:53:02:C3:53:92:F7:74:60:13:26:5C:63:27:70:70:B1:A7:AC
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 019FACACB46957522C8483BE35A73DBB4349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 07:00:27 +0000
Manifest this update: Wed 29 Jul 2026 07:00:27 +0000
Manifest next update: Thu 30 Jul 2026 07:00:27 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: K5NYz6Pew/JX/VPKHjB297jy57/mzCGTzCBjB7yMsWc=)
2: P940wrtoSOiGfXWnPAL7D4ik23s.roa (hash: yBpdClWkxX2SD1Bh3PEyQOlFnyswp6gSM6sQE7NZAI8=)
3: iBC7FwhAoY4sCdG11O7Dv2YEsfI.roa (hash: +CQ9cSlWk2hoJW+Pv1/StWyf8H8JiZBkAeQB6L1HCX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:b4:69:57:52:2c:84:83:be:35:a7:3d:bb:43:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Jul 29 07:00:27 2026 GMT
Not After : Jul 30 07:00:27 2026 GMT
Subject: CN=c3bc5302c35392f7746013265c63277070b1a7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e1:5e:10:a7:eb:78:df:b1:b9:ac:2c:a7:44:
7d:5f:0f:33:f9:8b:29:d1:73:c3:cd:ce:fc:f6:c2:
bf:fd:98:08:90:19:60:17:69:f7:db:b4:6e:c6:76:
f6:34:ee:0a:35:87:0f:64:cf:ed:cd:bd:29:de:92:
24:de:45:70:3d:83:61:b8:24:1e:00:b1:48:93:32:
c7:64:8c:f8:3d:b4:f8:ba:48:a3:15:56:5d:bb:57:
c8:d5:be:79:6d:57:26:85:03:8c:d6:70:a9:11:d2:
a1:cd:5f:b8:60:b5:25:6c:1b:da:d3:60:e8:0b:8d:
50:6c:19:0c:f1:41:ab:44:38:b5:c4:db:ef:dd:06:
f6:39:e9:cf:62:fb:c8:64:64:7d:2a:7f:46:d2:db:
23:c7:cb:2a:98:4e:2e:a5:32:6b:dd:9b:a0:94:3d:
18:ba:2a:2a:08:4a:d4:22:76:dd:bd:f9:e6:db:14:
c6:08:eb:7c:bc:98:b6:7d:b7:cd:6d:6f:08:37:41:
cf:9f:f4:51:fc:53:94:7f:6d:78:69:05:ae:19:7c:
cb:8c:e3:6d:be:9b:27:b6:5d:05:6e:cf:25:2d:4f:
ba:42:6c:61:2d:fe:ac:eb:39:ac:cd:05:63:73:55:
d8:9b:14:f7:46:bf:7c:0b:6f:ea:06:0a:78:53:40:
13:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BC:53:02:C3:53:92:F7:74:60:13:26:5C:63:27:70:70:B1:A7:AC
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:52:e7:b3:52:74:9b:f5:ea:6b:1a:04:14:85:eb:13:35:ad:
13:2a:55:c2:eb:32:63:9e:a1:5c:0d:39:bb:b7:d9:13:75:ae:
42:21:55:d1:dd:8a:2e:af:2f:3b:1b:3f:aa:4b:03:89:aa:b2:
92:d6:a3:d2:39:f1:47:e7:b8:29:8e:22:66:5a:af:18:7b:93:
6a:60:48:68:c1:b3:89:f9:1c:d6:49:7a:30:b0:a5:24:51:3a:
93:f4:da:e1:f6:bf:d1:76:96:12:b6:08:f7:d1:11:e5:fc:f5:
1c:0d:95:36:c0:39:c7:35:2f:bc:a2:29:d8:bd:04:51:32:be:
66:01:81:14:a9:d7:97:7d:9f:c3:b2:f1:96:e0:41:d0:a0:a9:
69:d6:dd:bd:15:b1:38:0e:e5:76:a0:45:2e:8f:4e:30:fc:67:
c0:6e:a1:1a:83:04:6b:f2:e6:c8:f4:93:a0:3d:0e:45:96:05:
bc:28:f0:63:96:20:53:ae:e6:33:55:46:65:16:df:11:fc:75:
17:2c:70:5f:6a:c0:0c:d3:bb:26:2d:a9:3e:75:3d:42:92:f2:
48:8b:5e:53:8b:9b:a5:1d:60:60:ec:0f:e9:0d:73:14:10:fb:
bd:28:a1:17:c0:da:6a:57:f2:96:b9:db:53:56:74:b6:2c:00:
e7:73:d1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:26:51 2026 by rpki-client