Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
File: HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json)
Hash identifier: gSF85teDLT+8A+thLxe5olgW8LzaUn/7ZvgQ5JMo8rU=
Subject key identifier: 71:74:DE:5A:67:81:F1:64:AD:08:4B:F9:C5:00:84:16:F3:A9:80:2A
Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Certificate issuer: /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Certificate serial: 01A0D872188FE3BF7CA9A485E9AFFB4FC067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
Manifest number: 118F
Signing time: Fri 25 Sep 2026 12:02:31 +0000
Manifest this update: Fri 25 Sep 2026 12:02:31 +0000
Manifest next update: Sat 26 Sep 2026 12:02:31 +0000
Files and hashes: 1: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: SAZbBxTy1Eq8Rs/oDS1C3IpN/MxlHAe9CS0ZrcK2sDI=)
2: N_Jul0j3jUL-F4iuEeP9lcen_ME.roa (hash: 68J7iK3pOuG8xYDdpx1Rr0BIzlJOCl0ODoQcNwpDaYs=)
3: WNTolADIm9VNsoqCozxJi_Sdj1g.roa (hash: dbLLv/tU+oB7TYkA/M9m2Fdt/qMi9LlERRpEMvrtzNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:18:8f:e3:bf:7c:a9:a4:85:e9:af:fb:4f:c0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Validity
Not Before: Sep 25 12:02:31 2026 GMT
Not After : Sep 26 12:02:31 2026 GMT
Subject: CN=7174de5a6781f164ad084bf9c5008416f3a9802a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:35:68:59:12:f1:cd:46:c0:8f:40:c3:02:
16:97:2e:0b:06:b8:f7:79:84:cc:98:e8:6b:18:44:
8c:3e:57:0e:10:e0:c5:e4:0f:b7:87:16:ea:99:1c:
e2:b8:3e:3d:3c:5e:42:75:a2:6e:48:58:37:b2:89:
94:31:b6:be:b8:2d:e7:05:a6:da:1b:25:1e:16:2c:
6d:d7:07:3b:bc:7b:c8:28:8f:e6:9c:6e:af:e1:4c:
e5:1b:67:3f:ab:10:5d:e2:bc:21:3e:d2:b7:fb:b3:
22:c9:6f:c3:4f:68:70:41:71:00:bc:d0:4e:b7:09:
bc:39:f0:54:95:df:c2:65:67:28:61:b5:b6:04:96:
e7:5a:1b:76:ed:96:60:f7:46:ac:48:24:68:3b:b4:
d8:61:54:d5:58:8f:dd:0d:3b:6c:8b:3c:bd:be:11:
a0:4d:9a:71:44:ee:a7:b7:48:fd:85:d2:63:09:54:
e1:11:5c:59:1a:8b:5d:1d:7b:e9:c3:88:e5:d0:73:
22:28:96:96:c6:1d:75:c3:04:5c:88:a1:c7:80:7b:
fe:65:71:eb:4c:81:a6:33:a1:91:c6:ba:83:c7:16:
5e:d1:a7:1f:3c:71:9a:8d:c5:0d:93:39:83:92:5f:
40:b8:ac:6d:a9:94:e4:e8:1c:01:45:ad:88:6a:47:
5f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:74:DE:5A:67:81:F1:64:AD:08:4B:F9:C5:00:84:16:F3:A9:80:2A
X509v3 Authority Key Identifier:
keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:0b:ab:4f:38:24:3b:ac:99:66:69:6b:3f:8c:a6:b0:98:15:
fb:a4:be:fe:4a:ef:6f:3f:c3:cc:b4:ff:3b:57:6a:7d:2b:9b:
df:8f:3d:4f:59:3a:8e:89:9f:d1:f3:22:be:fa:66:3f:c3:94:
f5:ba:08:c1:84:02:c7:42:6f:9b:d8:04:56:d0:65:60:6c:c8:
2a:da:9f:4b:38:fd:8d:b8:5b:ee:d6:a9:9c:2a:d8:01:fc:13:
a6:d3:7e:d5:70:dd:b9:a2:53:2c:8b:3b:d5:1b:84:fa:db:fe:
af:1f:ed:86:94:cc:8d:33:c2:d6:c6:f0:35:10:57:d3:09:38:
f4:0b:93:d2:44:64:18:fc:61:6d:34:2b:da:e3:66:55:11:10:
10:ce:17:b7:2d:96:5c:70:59:12:fa:23:b5:a0:67:1b:09:7c:
50:dc:f6:5c:46:5d:35:8a:19:78:d5:67:7c:bf:ef:3c:fa:50:
6b:26:a8:b3:26:cc:0a:6c:9c:ab:d6:07:be:56:94:d0:10:a7:
8e:52:82:23:18:44:48:c0:87:10:95:0f:21:71:86:b1:b1:8b:
00:d5:98:aa:77:eb:36:0e:24:3a:a9:e7:75:21:e7:fe:d7:3a:
35:4c:17:f0:90:8b:72:3f:c1:68:b4:b5:a6:cd:a7:5e:95:6d:
d0:ba:07:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYchiP4798qaSF6a/7T8BnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYTgxNzEzODUzYzliMThkNDEwZDRmZjMwOTlhYjY2OGU2
OWIzZjUwHhcNMjYwOTI1MTIwMjMxWhcNMjYwOTI2MTIwMjMxWjAzMTEwLwYDVQQD
Eyg3MTc0ZGU1YTY3ODFmMTY0YWQwODRiZjljNTAwODQxNmYzYTk4MDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqo1aFkS8c1GwI9AwwIWly4LBrj3
eYTMmOhrGESMPlcOEODF5A+3hxbqmRziuD49PF5CdaJuSFg3somUMba+uC3nBaba
GyUeFixt1wc7vHvIKI/mnG6v4UzlG2c/qxBd4rwhPtK3+7MiyW/DT2hwQXEAvNBO
twm8OfBUld/CZWcoYbW2BJbnWht27ZZg90asSCRoO7TYYVTVWI/dDTtsizy9vhGg
TZpxRO6nt0j9hdJjCVThEVxZGotdHXvpw4jl0HMiKJaWxh11wwRciKHHgHv+ZXHr
TIGmM6GRxrqDxxZe0acfPHGajcUNkzmDkl9AuKxtqZTk6BwBRa2IakdfJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHF03lpngfFkrQhL+cUAhBbzqYAqMB8GA1UdIwQY
MBaAFB2oFxOFPJsY1BDU/zCZq2aOabP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kMjlmZTctOGMyMi00YWFhLWI4ZDYt
NjYwZjM5ZjY0MzE2LzEvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9kMjlmZTctOGMyMi00YWFhLWI4ZDYtNjYwZjM5ZjY0MzE2
LzEvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvAurTzgk
O6yZZmlrP4ymsJgV+6S+/krvbz/DzLT/O1dqfSub3489T1k6jomf0fMivvpmP8OU
9boIwYQCx0Jvm9gEVtBlYGzIKtqfSzj9jbhb7tapnCrYAfwTptN+1XDduaJTLIs7
1RuE+tv+rx/thpTMjTPC1sbwNRBX0wk49AuT0kRkGPxhbTQr2uNmVREQEM4Xty2W
XHBZEvojtaBnGwl8UNz2XEZdNYoZeNVnfL/vPPpQayaosybMCmycq9YHvlaU0BCn
jlKCIxhESMCHEJUPIXGGsbGLANWYqnfrNg4kOqnndSHn/tc6NUwX8JCLcj/BaLS1
ps2nXpVt0LoHzA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:57:46 2026 by rpki-client