Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: wf4bdVp7aLfyMnxne9/KWMFmer+dn6Ej/N0ijVWLnq8=
Subject key identifier: B5:04:47:2C:4A:05:74:EF:10:13:53:54:B2:C0:A2:34:E4:92:2D:6A
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 019E1EDA52B10D01568CB2DAD8688F391FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 01:01:24 +0000
Manifest this update: Wed 13 May 2026 01:01:24 +0000
Manifest next update: Thu 14 May 2026 01:01:24 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: 1ggG+uLZU+CKIqwu//1hQkM9fv752wwPgk42+r5c1fY=)
2: P940wrtoSOiGfXWnPAL7D4ik23s.roa (hash: yBpdClWkxX2SD1Bh3PEyQOlFnyswp6gSM6sQE7NZAI8=)
3: iBC7FwhAoY4sCdG11O7Dv2YEsfI.roa (hash: +CQ9cSlWk2hoJW+Pv1/StWyf8H8JiZBkAeQB6L1HCX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:52:b1:0d:01:56:8c:b2:da:d8:68:8f:39:1f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: May 13 01:01:24 2026 GMT
Not After : May 14 01:01:24 2026 GMT
Subject: CN=b504472c4a0574ef10135354b2c0a234e4922d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:d6:7b:41:fd:45:31:4e:25:cf:e6:1c:70:
fe:27:91:65:be:b2:f8:c7:f7:38:28:5c:d4:13:27:
15:df:93:52:d7:00:a6:f2:b2:5f:e2:8d:4e:8f:f3:
67:61:fd:1f:6d:a7:7e:d6:2f:70:93:a4:4a:6d:5b:
6c:ce:f2:8a:e4:5a:f5:f6:49:f0:38:5a:b9:70:1b:
62:af:bf:a0:50:96:c7:8e:10:a9:0d:8f:e9:5b:b6:
e3:41:ae:2e:fb:04:eb:eb:dd:fb:e4:8b:43:4f:08:
fc:33:84:af:c1:e9:fd:06:17:e3:21:7f:5f:bb:68:
02:2e:eb:77:4f:5a:6a:79:d2:e8:fa:45:ca:9d:ed:
99:42:9a:f4:ae:2f:db:f8:b3:4f:e5:c4:19:f6:a3:
3d:2b:c7:84:65:99:50:66:95:dd:1e:c5:09:be:8f:
3c:7e:9a:09:3c:7c:fb:e3:56:ad:b4:55:21:9e:18:
4f:52:1d:d5:4a:01:1d:68:ae:ff:35:46:81:20:38:
40:c0:e8:8f:f2:b5:f1:48:45:16:a6:15:d3:c6:40:
c9:76:4d:01:0b:4f:89:46:bd:8c:31:19:02:d4:29:
54:33:56:f7:61:f9:6a:3f:21:7b:6d:85:05:5a:8d:
67:25:cb:f0:b6:5f:99:dd:6c:58:ad:e5:cc:9d:41:
82:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:04:47:2C:4A:05:74:EF:10:13:53:54:B2:C0:A2:34:E4:92:2D:6A
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d8:e5:ca:1a:f3:3e:61:30:1f:70:ef:70:17:f3:50:01:1c:
84:e4:37:23:7c:6d:b5:7a:af:14:1c:ed:ad:5b:d1:ea:67:a0:
4e:ce:a0:1e:45:d7:56:ca:9c:b1:9d:80:a0:f9:3d:f2:13:25:
e4:09:2c:a0:3a:2c:09:f1:78:4b:85:65:9c:b5:a3:c8:32:21:
85:cd:e9:52:7a:c5:a5:8f:e7:59:ce:99:75:fd:c6:72:12:bf:
2e:c9:74:03:e2:50:ea:41:b7:c5:33:3d:b5:c1:a4:96:25:ea:
63:60:ed:99:24:3c:2c:b9:69:5c:90:78:55:b5:a4:cb:71:43:
8e:de:2b:b9:06:f7:1b:7a:bb:73:0f:0e:2c:50:70:a3:b7:bc:
f7:8d:f8:e4:70:dd:e1:c5:47:26:ff:ac:6b:ef:81:81:91:a5:
af:d2:86:f5:c1:1d:c4:71:66:14:83:eb:ff:b6:35:a1:23:6c:
11:91:a0:28:27:12:eb:f3:b4:be:b8:ed:a2:9b:eb:e2:b4:ae:
c2:b4:eb:5d:98:7a:4d:2c:fe:be:d5:f3:50:82:e4:c3:d0:60:
4b:f1:e6:55:c9:2b:0c:d7:a3:b4:ab:1f:7d:0e:2f:79:74:79:
3b:c4:3b:fd:45:fb:27:90:f6:c0:ec:7a:ac:02:b6:77:f5:7e:
b7:98:a6:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2lKxDQFWjLLa2GiPOR//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjODY0ODEzYzA4NjJlNmI0NzU2ZjhkZmRhODk1N2M2YWVh
YzY2NTQwHhcNMjYwNTEzMDEwMTI0WhcNMjYwNTE0MDEwMTI0WjAzMTEwLwYDVQQD
EyhiNTA0NDcyYzRhMDU3NGVmMTAxMzUzNTRiMmMwYTIzNGU0OTIyZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBzWe0H9RTFOJc/mHHD+J5FlvrL4
x/c4KFzUEycV35NS1wCm8rJf4o1Oj/NnYf0fbad+1i9wk6RKbVtszvKK5Fr19knw
OFq5cBtir7+gUJbHjhCpDY/pW7bjQa4u+wTr69375ItDTwj8M4Svwen9BhfjIX9f
u2gCLut3T1pqedLo+kXKne2ZQpr0ri/b+LNP5cQZ9qM9K8eEZZlQZpXdHsUJvo88
fpoJPHz741attFUhnhhPUh3VSgEdaK7/NUaBIDhAwOiP8rXxSEUWphXTxkDJdk0B
C0+JRr2MMRkC1ClUM1b3YflqPyF7bYUFWo1nJcvwtl+Z3WxYreXMnUGCYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUERyxKBXTvEBNTVLLAojTkki1qMB8GA1UdIwQY
MBaAFByGSBPAhi5rR1b439qJV8aurGZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xMDM5M2QtYTAzMC00YWY1LTg5OTUt
OGYyZDY2ODRjODE0LzEvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xMDM5M2QtYTAzMC00YWY1LTg5OTUtOGYyZDY2ODRjODE0
LzEvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktjlyhrz
PmEwH3DvcBfzUAEchOQ3I3xttXqvFBztrVvR6megTs6gHkXXVsqcsZ2AoPk98hMl
5AksoDosCfF4S4VlnLWjyDIhhc3pUnrFpY/nWc6Zdf3GchK/Lsl0A+JQ6kG3xTM9
tcGkliXqY2DtmSQ8LLlpXJB4VbWky3FDjt4ruQb3G3q7cw8OLFBwo7e894345HDd
4cVHJv+sa++BgZGlr9KG9cEdxHFmFIPr/7Y1oSNsEZGgKCcS6/O0vrjtopvr4rSu
wrTrXZh6TSz+vtXzUILkw9BgS/HmVckrDNejtKsffQ4veXR5O8Q7/UX7J5D2wOx6
rAK2d/V+t5im8g==
-----END CERTIFICATE-----
Generated at Wed May 13 09:11:05 2026 by rpki-client