Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
File: HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json)
Hash identifier: tQNXDSheW0RnjDtH8/yudb//klcGRD9OkqxTr7CgcAU=
Subject key identifier: 12:A9:0D:45:01:45:C4:CE:10:36:67:AB:20:5D:DD:6A:FE:4E:AA:CC
Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Certificate issuer: /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Certificate serial: 019F921193A4A0F9A086FB0FCAD338C5224C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
Manifest number: 10E6
Signing time: Fri 24 Jul 2026 03:00:53 +0000
Manifest this update: Fri 24 Jul 2026 03:00:53 +0000
Manifest next update: Sat 25 Jul 2026 03:00:53 +0000
Files and hashes: 1: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: Iuw/hPEfU2xAhplj+RSwHPSe6lKGpPDjDeHNfPVTSn0=)
2: N_Jul0j3jUL-F4iuEeP9lcen_ME.roa (hash: 68J7iK3pOuG8xYDdpx1Rr0BIzlJOCl0ODoQcNwpDaYs=)
3: WNTolADIm9VNsoqCozxJi_Sdj1g.roa (hash: dbLLv/tU+oB7TYkA/M9m2Fdt/qMi9LlERRpEMvrtzNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:93:a4:a0:f9:a0:86:fb:0f:ca:d3:38:c5:22:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Validity
Not Before: Jul 24 03:00:53 2026 GMT
Not After : Jul 25 03:00:53 2026 GMT
Subject: CN=12a90d450145c4ce103667ab205ddd6afe4eaacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:c5:ce:58:1f:fe:ec:c3:1e:0c:30:fe:7f:
5c:e7:c1:e4:97:6f:53:f7:ab:c8:e9:33:11:20:a6:
34:6e:9f:b3:b0:6b:92:cb:5a:53:19:85:40:e7:9f:
dc:a6:50:ca:15:6d:3b:c9:ae:5a:ba:52:7e:75:b3:
7f:99:03:36:2b:fd:22:8c:42:11:1c:d0:28:0a:2e:
de:2e:8c:c0:57:e8:f8:74:ea:2d:80:1e:11:7d:ed:
df:34:42:de:12:ec:30:7e:8b:22:ac:bd:85:4f:e0:
a2:c0:79:05:05:01:ca:af:d6:33:48:db:08:28:7d:
1b:26:ec:42:eb:1c:ed:74:57:5f:bc:bd:aa:c8:0a:
8a:97:88:8b:3e:c1:e8:fc:80:9b:70:7f:32:ed:39:
4e:9f:22:5f:5e:4f:9e:82:df:89:78:3f:8c:51:1b:
e9:93:54:3b:b0:8c:aa:27:f2:12:57:c0:6d:0b:e5:
00:78:9d:d2:6c:d1:09:56:a1:ef:5c:02:52:6e:a7:
c6:90:69:7a:a4:c7:e1:e2:68:6c:f3:70:26:27:af:
4b:04:94:b5:b8:e6:c6:fe:e9:1b:35:c0:c5:e8:6e:
c9:c7:eb:3a:2b:4a:b6:5f:c8:6c:df:16:28:11:35:
bf:34:f7:64:c6:1a:a2:d1:50:80:9c:1f:9b:b6:a5:
81:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A9:0D:45:01:45:C4:CE:10:36:67:AB:20:5D:DD:6A:FE:4E:AA:CC
X509v3 Authority Key Identifier:
keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:79:5e:cf:06:53:e8:53:5f:01:d5:73:a2:ee:ea:35:62:29:
21:b3:9e:38:38:af:0d:c4:2d:9d:08:6f:dc:6c:66:64:b5:e9:
4f:3a:74:c1:f4:5b:2c:ca:4a:62:e4:5b:0b:19:42:1d:9b:7c:
8f:59:24:33:94:40:57:ca:49:9c:00:ee:6c:fd:4a:3e:44:cb:
d1:cc:a2:c5:fd:56:fd:ac:67:15:6b:e5:b8:dd:2e:a1:e0:9f:
7d:48:80:b9:d5:e9:c8:69:10:09:4c:24:02:b3:11:0d:4e:39:
dd:94:45:dd:79:1f:49:88:1a:c9:34:7a:cb:0b:7c:cb:55:f1:
78:51:68:dc:8c:f7:61:94:9e:8e:0f:bd:ed:b4:0a:c0:a0:e4:
ca:a9:c0:65:ab:2b:e1:36:2e:17:0d:a6:fe:a0:db:fb:53:72:
37:78:e6:e9:f0:06:6c:62:ab:2c:48:d1:e0:55:83:69:ef:0b:
84:27:db:fd:15:64:c0:f9:c9:d1:6a:aa:6b:d9:1f:92:f2:a3:
36:91:c1:d8:71:72:53:53:84:d0:ee:dd:df:4f:20:0b:2b:20:
0d:e2:e6:d5:09:19:a7:fc:8d:0d:ab:cd:8f:09:23:a1:ba:51:
93:2d:27:b1:3f:ca:ad:f6:5a:b6:2f:0f:b9:bc:ed:3a:fc:68:
46:40:2b:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEZOkoPmghvsPytM4xSJMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYTgxNzEzODUzYzliMThkNDEwZDRmZjMwOTlhYjY2OGU2
OWIzZjUwHhcNMjYwNzI0MDMwMDUzWhcNMjYwNzI1MDMwMDUzWjAzMTEwLwYDVQQD
EygxMmE5MGQ0NTAxNDVjNGNlMTAzNjY3YWIyMDVkZGQ2YWZlNGVhYWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYHFzlgf/uzDHgww/n9c58Hkl29T
96vI6TMRIKY0bp+zsGuSy1pTGYVA55/cplDKFW07ya5aulJ+dbN/mQM2K/0ijEIR
HNAoCi7eLozAV+j4dOotgB4Rfe3fNELeEuwwfosirL2FT+CiwHkFBQHKr9YzSNsI
KH0bJuxC6xztdFdfvL2qyAqKl4iLPsHo/ICbcH8y7TlOnyJfXk+egt+JeD+MURvp
k1Q7sIyqJ/ISV8BtC+UAeJ3SbNEJVqHvXAJSbqfGkGl6pMfh4mhs83AmJ69LBJS1
uObG/ukbNcDF6G7Jx+s6K0q2X8hs3xYoETW/NPdkxhqi0VCAnB+btqWBsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKpDUUBRcTOEDZnqyBd3Wr+TqrMMB8GA1UdIwQY
MBaAFB2oFxOFPJsY1BDU/zCZq2aOabP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kMjlmZTctOGMyMi00YWFhLWI4ZDYt
NjYwZjM5ZjY0MzE2LzEvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9kMjlmZTctOGMyMi00YWFhLWI4ZDYtNjYwZjM5ZjY0MzE2
LzEvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXlezwZT
6FNfAdVzou7qNWIpIbOeODivDcQtnQhv3GxmZLXpTzp0wfRbLMpKYuRbCxlCHZt8
j1kkM5RAV8pJnADubP1KPkTL0cyixf1W/axnFWvluN0uoeCffUiAudXpyGkQCUwk
ArMRDU453ZRF3XkfSYgayTR6ywt8y1XxeFFo3Iz3YZSejg+97bQKwKDkyqnAZasr
4TYuFw2m/qDb+1NyN3jm6fAGbGKrLEjR4FWDae8LhCfb/RVkwPnJ0Wqqa9kfkvKj
NpHB2HFyU1OE0O7d308gCysgDeLm1QkZp/yNDavNjwkjobpRky0nsT/KrfZati8P
ubztOvxoRkAr3Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:03:06 2026 by rpki-client