Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: cbLCUHEAQujrCNTklFpmK06r3ICqVkVwWmGMklsBJdY=
Subject key identifier: 64:E4:6A:BC:38:E8:04:AE:09:C9:5A:EA:F6:43:8C:97:2F:4F:3D:A7
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 01A0D9F18AC5C5CCA05B40E4B1E975C4A156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 1A73
Signing time: Fri 25 Sep 2026 19:01:20 +0000
Manifest this update: Fri 25 Sep 2026 19:01:20 +0000
Manifest next update: Sat 26 Sep 2026 19:01:20 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: +M3P9kGfZOUsWh1iFohAX/RSXut3t/ccEuAwr/XPPNA=)
2: P940wrtoSOiGfXWnPAL7D4ik23s.roa (hash: yBpdClWkxX2SD1Bh3PEyQOlFnyswp6gSM6sQE7NZAI8=)
3: iBC7FwhAoY4sCdG11O7Dv2YEsfI.roa (hash: +CQ9cSlWk2hoJW+Pv1/StWyf8H8JiZBkAeQB6L1HCX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:8a:c5:c5:cc:a0:5b:40:e4:b1:e9:75:c4:a1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Sep 25 19:01:20 2026 GMT
Not After : Sep 26 19:01:20 2026 GMT
Subject: CN=64e46abc38e804ae09c95aeaf6438c972f4f3da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:35:18:c1:5f:9c:b4:b2:50:b9:fe:06:88:
25:ca:a0:34:ee:65:6a:13:4b:d4:82:2f:e8:3b:29:
05:ae:af:ca:0a:3c:aa:19:68:0e:dc:8b:1b:35:ee:
2f:05:fa:af:cf:8a:d7:f6:1a:09:e4:03:d0:99:9b:
54:84:61:f7:c6:50:7e:f8:28:48:45:a9:53:bc:f1:
fb:5e:cf:c9:28:ff:c0:7c:34:80:ff:19:73:4b:3f:
91:50:ee:4e:4d:66:1c:84:4c:c4:1a:bb:1c:ab:b7:
68:00:8c:bd:2f:85:1c:5e:81:7f:17:69:98:40:6c:
73:09:79:99:4d:50:a6:0a:f1:84:6d:10:02:fc:02:
48:b2:6e:ce:f7:fc:88:f3:ca:55:fe:85:4a:ce:2b:
a0:4c:f0:26:3c:e4:65:eb:76:a7:d4:18:0a:6e:20:
e8:da:06:e0:05:aa:ba:a5:1d:34:2a:fe:dd:ed:7a:
89:f7:d7:21:7b:56:ec:24:7a:27:a6:3c:87:cf:5a:
b2:b0:e5:d5:8d:af:29:88:e2:eb:89:5f:96:a4:59:
8f:41:f5:52:94:48:a0:0a:1c:09:13:20:1c:ab:8c:
01:47:74:09:08:71:f2:4e:fa:3a:a4:03:6a:ef:d6:
94:09:48:53:92:38:2d:b2:ff:c4:9f:7b:76:d2:5c:
f7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E4:6A:BC:38:E8:04:AE:09:C9:5A:EA:F6:43:8C:97:2F:4F:3D:A7
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e0:58:f3:62:0f:a2:c0:c6:8e:d0:d5:10:ac:fa:1d:dc:63:
06:5c:87:6a:38:48:70:be:49:8b:53:46:23:9e:2d:a5:61:03:
a8:ac:46:24:08:88:02:54:33:9a:27:5e:5d:03:9e:5b:e8:ea:
11:48:49:c5:d1:38:4f:ed:8d:69:f1:67:5d:4b:41:69:5d:c6:
c4:87:04:0b:53:ee:bc:d0:83:1e:15:c4:f6:78:ed:78:23:cc:
39:c4:e4:c8:3c:c1:e1:99:bf:d5:f9:fc:b5:99:dc:36:c6:1e:
65:22:e9:f9:4c:92:94:f2:fc:6a:53:ab:e5:9b:54:60:f8:9e:
42:46:b7:f3:c5:55:ee:e6:94:11:8a:83:72:96:4d:82:cd:ff:
8d:44:f9:ea:8d:dc:a3:01:37:b4:c7:ed:c2:9f:41:73:e8:b5:
e7:8f:83:b6:eb:3e:28:e6:a4:78:6e:d6:dd:26:64:40:03:7f:
ee:ec:75:8e:6d:ec:45:c1:2e:27:86:bf:81:7a:2d:91:9d:85:
ae:fc:08:42:e5:93:ae:d0:99:35:54:27:45:c8:fc:cc:38:13:
04:76:d6:e4:43:52:4c:31:5e:0f:ee:f2:98:dd:c2:86:87:b6:
18:09:8e:67:00:fd:ff:f6:02:15:a3:96:f4:cf:40:f1:c3:36:
46:1a:97:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:59:31 2026 by rpki-client