Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
File: HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json)
Hash identifier: aNEWF7pR6ZWSW2L9KJX40MV2dZzOAwwNWpwJW0MpAQI=
Subject key identifier: A8:43:52:A9:ED:1B:02:EA:A9:2F:2F:FD:0E:82:F2:CA:35:AE:06:68
Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Certificate issuer: /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Certificate serial: 019DCE2B673C752138F72C98B2F90A0E9621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
Manifest number: 0FFC
Signing time: Mon 27 Apr 2026 09:00:44 +0000
Manifest this update: Mon 27 Apr 2026 09:00:44 +0000
Manifest next update: Tue 28 Apr 2026 09:00:44 +0000
Files and hashes: 1: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: 7Pl0NXpkFa77QVRz8OaaBON9g3leKWoUjjeZO+FXWXQ=)
2: N_Jul0j3jUL-F4iuEeP9lcen_ME.roa (hash: 68J7iK3pOuG8xYDdpx1Rr0BIzlJOCl0ODoQcNwpDaYs=)
3: WNTolADIm9VNsoqCozxJi_Sdj1g.roa (hash: dbLLv/tU+oB7TYkA/M9m2Fdt/qMi9LlERRpEMvrtzNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:67:3c:75:21:38:f7:2c:98:b2:f9:0a:0e:96:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Validity
Not Before: Apr 27 09:00:44 2026 GMT
Not After : Apr 28 09:00:44 2026 GMT
Subject: CN=a84352a9ed1b02eaa92f2ffd0e82f2ca35ae0668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1c:97:1b:4b:a2:91:04:2f:81:04:12:47:9f:
02:9e:ca:9a:7a:0e:c7:36:3d:ea:cc:e7:51:40:66:
8f:02:24:77:04:be:15:3b:76:ee:af:a2:07:82:87:
e1:e8:78:ae:0c:3d:e0:d8:85:51:12:8e:b9:65:50:
5c:06:02:13:9f:8b:5a:3b:25:f8:06:b0:f2:ec:3e:
70:5f:2e:67:c5:42:ae:21:cd:6e:19:75:54:c6:fb:
6a:c1:cf:dc:24:af:37:31:93:c1:f7:1d:c2:84:ea:
f4:0e:56:1c:bc:86:56:ea:f2:ef:5c:57:c8:da:0d:
d4:54:6e:c7:00:ab:96:ea:3a:b1:97:95:1c:e2:6d:
ee:f1:e5:36:eb:75:1b:e8:9e:86:a1:a6:50:a3:d8:
df:88:2b:b4:36:ed:5c:de:3a:d7:99:ea:95:80:3b:
68:5a:ae:85:c9:d6:77:aa:51:9b:da:33:46:2b:ef:
d4:31:84:e7:a0:2c:20:3f:46:89:ad:72:b7:73:f7:
fe:bf:ed:f8:c2:74:94:4f:3a:46:eb:e2:89:3d:e0:
93:bf:6e:54:d4:35:31:b8:f4:a2:d3:94:44:d3:b4:
5b:39:d0:d4:b9:e8:2f:3c:ea:e2:f4:22:aa:00:b3:
dd:af:ed:88:2f:52:a1:e1:99:75:9b:3b:c7:1f:06:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:43:52:A9:ED:1B:02:EA:A9:2F:2F:FD:0E:82:F2:CA:35:AE:06:68
X509v3 Authority Key Identifier:
keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:80:38:97:53:c3:10:5d:ba:a5:4d:1b:59:4a:b2:14:9d:7f:
c3:98:f4:c7:48:7e:1f:3f:9e:16:79:0f:b9:77:8f:d8:8b:8d:
9a:42:05:8b:1d:65:56:d6:07:11:66:37:c9:cc:30:f9:a2:a7:
4d:8a:40:80:66:43:fb:7e:d2:42:80:de:6a:70:20:b5:4c:c5:
64:21:74:11:83:e5:83:b8:6a:f0:62:1f:27:0e:25:a0:a3:91:
e7:e7:0c:76:41:9c:9c:7d:b3:a2:de:74:3f:f6:10:f1:01:00:
b3:e2:36:a2:7e:f7:b6:71:28:df:ec:4e:a0:e9:e8:ef:88:32:
17:6b:65:a2:d4:6a:50:2e:a9:5a:bc:a7:5d:9c:a6:b4:5b:34:
3c:ae:4e:32:9d:44:b2:da:c4:a2:cb:63:9f:59:c4:31:ba:68:
de:70:89:62:ff:b4:bf:17:9f:6f:49:bd:0b:d6:4a:9e:1b:48:
ab:f1:f6:09:b7:ee:31:51:b7:4e:2f:63:74:5c:89:31:34:df:
4c:e4:a9:72:9a:43:49:4d:7a:13:e1:8f:3f:11:6b:25:b8:a8:
a6:95:8c:04:d8:d5:c4:c4:bd:a3:26:18:c2:4a:c4:af:d9:e4:
47:4a:97:70:e4:26:58:ec:88:8a:9e:f3:06:a0:58:c7:84:3f:
de:66:7e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:05:47 2026 by rpki-client