Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
File: hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft (raw, json)
Hash identifier: ipFhhNpbSIEGUvfHPz0xFt9vwlHJd6czqPkZI96r5L4=
Subject key identifier: CA:67:02:4D:85:B5:55:4C:71:8C:A3:D0:8E:A5:6E:98:7E:4A:A5:F1
Authority key identifier: 87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F
Certificate issuer: /CN=8738bf1cc1381678038ef5da67642398e3d9819f
Certificate serial: 01A0CE919692D006AEF3A6956F389142AD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
Manifest number: 05B7
Signing time: Wed 23 Sep 2026 14:00:42 +0000
Manifest this update: Wed 23 Sep 2026 14:00:42 +0000
Manifest next update: Thu 24 Sep 2026 14:00:42 +0000
Files and hashes: 1: AK5fjVDhmizgP5N4WwC82qqLCK0.asa (hash: BCGMl7e+HBKREdnhljbA+XbrVyYRzj2jOCrrG862mhg=)
2: hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl (hash: FeLoTrp+jc0vosKPRxggHG+4MefPuPY4jCfzl2fmi1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:96:92:d0:06:ae:f3:a6:95:6f:38:91:42:ad:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8738bf1cc1381678038ef5da67642398e3d9819f
Validity
Not Before: Sep 23 14:00:42 2026 GMT
Not After : Sep 24 14:00:42 2026 GMT
Subject: CN=ca67024d85b5554c718ca3d08ea56e987e4aa5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:25:8f:ee:d1:1f:f9:66:71:88:3d:96:22:b1:
6b:0d:b8:87:48:cb:76:47:51:22:e7:c9:e8:d5:26:
e2:7e:d5:15:4b:46:e8:17:6e:d7:b2:94:bc:c9:77:
91:48:f7:73:8c:0e:35:71:49:87:1e:7b:bd:6a:b9:
76:e6:5a:17:94:28:7b:6a:db:12:8a:f7:60:54:9d:
2c:5b:24:ab:f3:00:a9:70:80:4f:e6:ba:7f:df:7e:
5a:1c:31:92:d1:cd:33:ed:fd:08:e4:6d:bb:7b:2b:
58:bb:a1:69:5e:df:54:37:03:11:3e:50:ba:d4:a6:
67:0b:4c:0c:49:9c:bc:8f:24:f9:dd:07:6b:c6:3e:
13:68:ec:2d:b3:2c:81:11:26:fc:5e:23:02:0b:7a:
f9:50:72:c3:da:fe:a6:86:21:50:95:17:42:54:2a:
14:bc:53:b4:1d:58:8d:02:13:7b:5f:ef:12:82:19:
bd:9a:cf:b1:93:40:fd:5e:a6:45:d0:bb:b2:2b:32:
c5:f0:7e:40:8c:af:32:1d:a1:aa:3c:a6:ac:c0:81:
6e:91:6d:67:44:89:80:36:f0:53:5d:fc:70:6a:06:
94:7f:13:6b:96:a4:a9:67:6d:eb:5e:f8:3f:ef:31:
9f:8a:4c:e6:92:67:25:4d:0e:50:fb:47:5a:f4:de:
43:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:67:02:4D:85:B5:55:4C:71:8C:A3:D0:8E:A5:6E:98:7E:4A:A5:F1
X509v3 Authority Key Identifier:
keyid:87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:55:7f:5d:50:72:e0:bb:de:1e:64:25:58:8e:d1:c2:58:45:
8c:44:ea:d4:1a:25:5b:30:a6:43:e6:a0:3a:77:2f:b6:c3:2f:
6c:63:4b:67:00:01:fd:bc:cd:8a:c4:ed:67:af:81:6b:2b:ea:
9f:56:88:51:16:23:00:57:27:89:66:db:ad:fa:4b:54:ba:6d:
47:19:33:ff:f3:34:93:ae:14:22:33:5d:06:fe:aa:b6:d4:b4:
85:3d:61:75:d5:ef:fa:98:71:2c:b8:cc:df:5e:28:e8:9b:a1:
37:2d:13:f0:c2:c1:fb:61:f5:8d:a9:59:78:b6:83:9c:de:80:
f5:14:75:3c:e0:74:7a:7e:92:6f:59:30:17:cf:8a:fe:06:ac:
f3:0f:b7:62:a3:b6:13:0d:f9:46:97:68:9a:af:3e:2c:67:44:
22:23:21:ac:ab:a1:1d:4e:49:46:49:02:9a:35:cf:91:99:1f:
9d:ca:00:28:c7:bd:ff:4e:1e:ac:57:48:b3:ef:5b:d6:d3:5e:
33:5e:b7:81:ad:8c:85:a4:3e:58:88:a8:6e:2a:8f:0b:a9:36:
63:c6:a2:a3:c5:5b:69:fa:14:6c:2a:b7:bb:c9:cf:ba:ea:10:
ad:03:ab:e2:75:d7:3c:82:f8:f3:8e:87:71:80:0b:8c:98:73:
2b:11:67:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOkZaS0Aau86aVbziRQq11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MzhiZjFjYzEzODE2NzgwMzhlZjVkYTY3NjQyMzk4ZTNk
OTgxOWYwHhcNMjYwOTIzMTQwMDQyWhcNMjYwOTI0MTQwMDQyWjAzMTEwLwYDVQQD
EyhjYTY3MDI0ZDg1YjU1NTRjNzE4Y2EzZDA4ZWE1NmU5ODdlNGFhNWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniWP7tEf+WZxiD2WIrFrDbiHSMt2
R1Ei58no1SbiftUVS0boF27XspS8yXeRSPdzjA41cUmHHnu9arl25loXlCh7atsS
ivdgVJ0sWySr8wCpcIBP5rp/335aHDGS0c0z7f0I5G27eytYu6FpXt9UNwMRPlC6
1KZnC0wMSZy8jyT53Qdrxj4TaOwtsyyBESb8XiMCC3r5UHLD2v6mhiFQlRdCVCoU
vFO0HViNAhN7X+8Sghm9ms+xk0D9XqZF0LuyKzLF8H5AjK8yHaGqPKaswIFukW1n
RImANvBTXfxwagaUfxNrlqSpZ23rXvg/7zGfikzmkmclTQ5Q+0da9N5D2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpnAk2FtVVMcYyj0I6lbph+SqXxMB8GA1UdIwQY
MBaAFIc4vxzBOBZ4A4712mdkI5jj2YGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHppX0hNRTRGbmdEanZYYVoyUWptT1BaZ1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xYjI4ZWItYjVhYy00NmZjLTg5NmIt
NTFmNzNjZDEyNWJmLzEvaHppX0hNRTRGbmdEanZYYVoyUWptT1BaZ1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xYjI4ZWItYjVhYy00NmZjLTg5NmItNTFmNzNjZDEyNWJm
LzEvaHppX0hNRTRGbmdEanZYYVoyUWptT1BaZ1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1V/XVBy
4LveHmQlWI7RwlhFjETq1BolWzCmQ+agOncvtsMvbGNLZwAB/bzNisTtZ6+Bayvq
n1aIURYjAFcniWbbrfpLVLptRxkz//M0k64UIjNdBv6qttS0hT1hddXv+phxLLjM
314o6JuhNy0T8MLB+2H1jalZeLaDnN6A9RR1POB0en6Sb1kwF8+K/gas8w+3YqO2
Ew35Rpdomq8+LGdEIiMhrKuhHU5JRkkCmjXPkZkfncoAKMe9/04erFdIs+9b1tNe
M163ga2MhaQ+WIiobiqPC6k2Y8aio8VbafoUbCq3u8nPuuoQrQOr4nXXPIL4846H
cYALjJhzKxFnFQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:41:52 2026 by rpki-client