Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: cxP3kunqkIQtiXtXZEzt3a1p/lUQDp95beD6ChtUDTk=
Subject key identifier: 5F:26:B7:8E:E1:54:4B:42:E6:2F:0D:91:39:79:10:4F:75:DB:79:FB
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 019F91A377869358FA2A26393DDEF2B652D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 01:00:36 +0000
Manifest this update: Fri 24 Jul 2026 01:00:36 +0000
Manifest next update: Sat 25 Jul 2026 01:00:36 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: NyG+EEsrQBN4GP0ZRxsK37q/ZfAADaiZPyx4TrsOx5w=)
2: P940wrtoSOiGfXWnPAL7D4ik23s.roa (hash: yBpdClWkxX2SD1Bh3PEyQOlFnyswp6gSM6sQE7NZAI8=)
3: iBC7FwhAoY4sCdG11O7Dv2YEsfI.roa (hash: +CQ9cSlWk2hoJW+Pv1/StWyf8H8JiZBkAeQB6L1HCX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:77:86:93:58:fa:2a:26:39:3d:de:f2:b6:52:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Jul 24 01:00:36 2026 GMT
Not After : Jul 25 01:00:36 2026 GMT
Subject: CN=5f26b78ee1544b42e62f0d913979104f75db79fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:2d:a4:3f:69:42:86:82:6d:ae:28:91:cb:
9e:4c:28:4d:30:21:05:6f:5a:e1:cb:8c:c0:6d:0a:
36:73:2a:3e:95:fa:d8:b1:6e:e5:95:eb:6b:9e:40:
f0:2a:92:a7:3d:e7:dc:43:54:1a:8c:d2:90:79:b9:
85:02:a1:0c:43:12:15:6d:d0:af:b8:9b:1c:fc:54:
69:12:b0:3b:27:ea:ce:12:6e:15:57:4f:67:8c:32:
65:c4:06:69:70:7b:f6:c0:0e:e2:f3:e2:38:cc:49:
12:e7:0b:97:26:d4:79:52:ca:ea:89:81:f9:7f:c3:
75:b4:9a:42:93:35:da:b8:68:1c:33:68:29:1f:eb:
cb:f5:02:c2:e7:94:05:e4:0e:1b:49:47:73:18:3c:
2b:a8:d3:74:81:0a:1c:b0:55:48:82:bc:7b:28:03:
54:ec:6b:33:a6:74:a5:f4:ba:7e:c9:58:d1:db:f0:
63:f1:9d:ac:36:74:ad:6e:93:0a:07:59:d7:cc:7c:
c8:4b:c1:d2:42:86:75:8a:19:0e:c6:89:cd:23:e3:
51:7f:f2:9c:25:9f:70:43:cd:36:e8:4b:c4:ed:09:
25:32:27:af:3b:51:33:fe:c5:3b:36:10:7e:2f:14:
6c:34:f8:87:4e:4d:13:58:2d:ca:bc:50:0d:05:43:
66:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:26:B7:8E:E1:54:4B:42:E6:2F:0D:91:39:79:10:4F:75:DB:79:FB
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6e:98:b5:29:ac:ce:4c:8f:a1:6c:94:04:ca:1a:9e:3b:84:
2d:47:df:03:e9:d1:ee:54:90:9a:87:59:5c:fc:db:de:7d:1e:
90:04:bb:3a:ce:bd:0b:2d:9d:98:b4:94:de:e9:2e:b3:1d:09:
f8:c7:1a:82:d1:cc:f1:15:89:1a:f8:6a:10:9a:7e:bd:29:ef:
7f:a0:33:e4:cb:0e:bd:00:ef:dd:40:f2:79:27:2b:87:d3:9a:
43:4b:80:20:31:44:86:38:12:c7:88:42:31:af:c9:6c:03:69:
0c:9e:16:4b:0e:f1:34:96:65:d2:ea:45:da:c1:4d:a0:1b:db:
d0:8e:36:20:8c:a3:33:95:8c:9a:0e:9d:07:5d:73:f5:0e:c5:
d2:0b:b6:4f:04:d8:b4:bd:45:76:d2:aa:ba:3f:75:25:20:3d:
b3:5e:c9:eb:5c:1c:a6:6e:c4:38:56:52:d1:3c:8c:c3:cf:4d:
83:14:78:ba:99:14:1d:68:20:ab:c0:89:19:3d:0e:a2:33:df:
5a:69:cb:6d:ac:f9:83:05:56:b6:6f:92:50:51:bd:fd:dc:ed:
95:f4:ac:f4:bc:6f:50:c9:e6:87:f0:bb:ad:92:f6:34:a7:95:
32:91:81:5d:a8:36:95:d5:30:56:ef:32:01:e4:45:cc:c5:8f:
73:97:a1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:42:08 2026 by rpki-client