Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
File: HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json)
Hash identifier: vVnIbgqfBN9PZZGZFKKeGKGKSttXyt2iKGd50RMrY/o=
Subject key identifier: 0F:FE:8C:38:DE:C8:01:23:64:48:5B:36:22:11:41:01:20:AC:73:3D
Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Certificate issuer: /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Certificate serial: 019E1D59730539D117B926DF55384B0C2028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
Manifest number: 1025
Signing time: Tue 12 May 2026 18:01:01 +0000
Manifest this update: Tue 12 May 2026 18:01:01 +0000
Manifest next update: Wed 13 May 2026 18:01:01 +0000
Files and hashes: 1: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: VGbCACy7nQE6t0bx7GoWMGON2AknP+qZvMNL64bf5bI=)
2: N_Jul0j3jUL-F4iuEeP9lcen_ME.roa (hash: 68J7iK3pOuG8xYDdpx1Rr0BIzlJOCl0ODoQcNwpDaYs=)
3: WNTolADIm9VNsoqCozxJi_Sdj1g.roa (hash: dbLLv/tU+oB7TYkA/M9m2Fdt/qMi9LlERRpEMvrtzNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:73:05:39:d1:17:b9:26:df:55:38:4b:0c:20:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Validity
Not Before: May 12 18:01:01 2026 GMT
Not After : May 13 18:01:01 2026 GMT
Subject: CN=0ffe8c38dec8012364485b362211410120ac733d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:73:42:07:40:ac:c1:a7:e6:8f:7c:85:c9:cc:
e3:f1:06:05:bf:e1:0a:c7:b7:7a:11:a6:a3:72:dc:
40:93:5c:14:a9:a1:6d:41:90:50:0d:d7:50:f2:e7:
33:d8:84:43:82:3d:86:8c:e8:a2:33:96:82:0e:c5:
1a:ca:7a:69:20:aa:ec:2e:1d:96:81:cc:0d:3a:41:
7c:f6:fe:a0:ea:4d:f5:9e:12:d3:c2:f7:64:9d:34:
1a:26:2a:0e:7b:93:71:a7:2e:d2:49:bd:04:71:24:
74:85:a0:a9:f5:cc:bb:1d:33:f8:0c:f5:62:4a:93:
df:45:3d:a7:ea:c5:14:b1:95:64:72:1a:b6:5e:1e:
8e:7c:52:be:86:7b:41:4e:dc:8b:83:0f:64:fa:86:
f4:c4:02:1a:87:65:77:32:a8:a7:d9:f0:fa:8a:2b:
2d:c3:52:12:03:be:7d:f3:17:c6:e2:be:de:a5:a4:
7d:1d:62:00:6b:14:3d:d4:83:55:18:05:76:ee:8a:
b1:c9:fb:8b:6b:e8:2d:18:10:9b:72:a7:91:30:1d:
d3:d4:b7:9e:ec:e3:2e:83:bb:52:77:ef:28:7b:9f:
b6:88:4e:d9:b9:3f:28:85:12:4a:48:12:7a:a8:a9:
33:32:17:00:9f:88:ba:f5:37:2b:6e:cd:ab:43:a8:
23:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FE:8C:38:DE:C8:01:23:64:48:5B:36:22:11:41:01:20:AC:73:3D
X509v3 Authority Key Identifier:
keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:69:d4:c2:31:78:22:55:c4:8f:0c:e8:df:8e:a4:6e:78:fa:
ff:f5:bd:ad:7d:97:4b:24:40:47:b4:13:8b:bc:7e:1d:06:46:
c8:0d:53:4f:78:18:c0:1a:53:4b:91:84:92:86:ad:31:d2:36:
d7:d6:93:38:e1:c1:c3:f2:e1:c0:9e:d9:4c:a5:8b:0c:d3:24:
40:2f:25:56:ca:b1:53:06:04:c0:bd:10:45:f8:75:8f:d5:51:
a9:37:98:60:93:3d:71:81:8c:33:1c:d3:7e:0f:df:83:c0:56:
9e:3e:94:0e:65:f7:a8:15:2e:a5:c0:b7:7d:c8:0a:80:29:d2:
26:87:bc:11:fe:20:09:8a:d3:14:96:a5:fd:24:81:c9:23:d5:
cb:42:d7:5c:30:6d:82:b2:bb:a9:56:a0:d8:ec:3f:82:7c:e8:
37:e3:6d:11:e5:e0:b1:d9:e5:0b:64:55:4a:45:80:bb:c2:02:
e1:bd:d4:79:8e:65:a1:52:7a:41:83:f3:06:25:2c:80:05:ad:
b2:1b:b6:26:fd:71:22:ea:5d:6f:8d:d2:04:3d:d6:89:b6:b8:
12:e0:46:f8:3a:28:8f:9f:3a:2d:25:93:32:aa:4a:6f:cb:16:
10:2e:67:4e:d5:9a:d3:e7:ae:ef:ba:9d:fc:dd:f7:32:b0:0c:
9e:30:32:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWXMFOdEXuSbfVThLDCAoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYTgxNzEzODUzYzliMThkNDEwZDRmZjMwOTlhYjY2OGU2
OWIzZjUwHhcNMjYwNTEyMTgwMTAxWhcNMjYwNTEzMTgwMTAxWjAzMTEwLwYDVQQD
EygwZmZlOGMzOGRlYzgwMTIzNjQ0ODViMzYyMjExNDEwMTIwYWM3MzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnNCB0Cswafmj3yFyczj8QYFv+EK
x7d6EaajctxAk1wUqaFtQZBQDddQ8ucz2IRDgj2GjOiiM5aCDsUaynppIKrsLh2W
gcwNOkF89v6g6k31nhLTwvdknTQaJioOe5Nxpy7SSb0EcSR0haCp9cy7HTP4DPVi
SpPfRT2n6sUUsZVkchq2Xh6OfFK+hntBTtyLgw9k+ob0xAIah2V3Mqin2fD6iist
w1ISA7598xfG4r7epaR9HWIAaxQ91INVGAV27oqxyfuLa+gtGBCbcqeRMB3T1Lee
7OMug7tSd+8oe5+2iE7ZuT8ohRJKSBJ6qKkzMhcAn4i69Tcrbs2rQ6gjRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/+jDjeyAEjZEhbNiIRQQEgrHM9MB8GA1UdIwQY
MBaAFB2oFxOFPJsY1BDU/zCZq2aOabP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kMjlmZTctOGMyMi00YWFhLWI4ZDYt
NjYwZjM5ZjY0MzE2LzEvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9kMjlmZTctOGMyMi00YWFhLWI4ZDYtNjYwZjM5ZjY0MzE2
LzEvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv2nUwjF4
IlXEjwzo346kbnj6//W9rX2XSyRAR7QTi7x+HQZGyA1TT3gYwBpTS5GEkoatMdI2
19aTOOHBw/LhwJ7ZTKWLDNMkQC8lVsqxUwYEwL0QRfh1j9VRqTeYYJM9cYGMMxzT
fg/fg8BWnj6UDmX3qBUupcC3fcgKgCnSJoe8Ef4gCYrTFJal/SSBySPVy0LXXDBt
grK7qVag2Ow/gnzoN+NtEeXgsdnlC2RVSkWAu8IC4b3UeY5loVJ6QYPzBiUsgAWt
shu2Jv1xIupdb43SBD3Wiba4EuBG+Dooj586LSWTMqpKb8sWEC5nTtWa0+eu77qd
/N33MrAMnjAyJg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:35:36 2026 by rpki-client