Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
File: HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json)
Hash identifier: 8UVe73mujp63jg8HSugFQVDYW9JRHtkSnMyXJcOI+Hs=
Subject key identifier: 89:1B:A6:0C:52:FB:C3:3E:BA:6D:F9:53:A8:0D:7F:FA:3C:36:A5:9D
Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Certificate issuer: /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Certificate serial: 019CE47EAA497FD0D3F1E7665EB8E5DC70D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
Manifest number: 0F83
Signing time: Fri 13 Mar 2026 00:00:32 +0000
Manifest this update: Fri 13 Mar 2026 00:00:32 +0000
Manifest next update: Sat 14 Mar 2026 00:00:32 +0000
Files and hashes: 1: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: Xm/w4GvYpDk0Q8/mKANEigOwXAEM9LYWJxSV1fgXDzA=)
2: N_Jul0j3jUL-F4iuEeP9lcen_ME.roa (hash: 68J7iK3pOuG8xYDdpx1Rr0BIzlJOCl0ODoQcNwpDaYs=)
3: WNTolADIm9VNsoqCozxJi_Sdj1g.roa (hash: dbLLv/tU+oB7TYkA/M9m2Fdt/qMi9LlERRpEMvrtzNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7e:aa:49:7f:d0:d3:f1:e7:66:5e:b8:e5:dc:70:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Validity
Not Before: Mar 13 00:00:32 2026 GMT
Not After : Mar 14 00:00:32 2026 GMT
Subject: CN=891ba60c52fbc33eba6df953a80d7ffa3c36a59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:ce:25:81:40:20:32:14:ef:2d:e6:d9:6c:
3d:ff:b4:e2:30:21:87:f1:73:e3:b3:c6:b0:38:97:
a8:0f:00:7a:25:54:7e:57:fa:3e:5a:07:cd:2a:90:
7f:ac:3c:1b:23:0b:c5:5f:2b:3b:23:cd:41:b0:47:
71:b6:f7:1c:df:0e:27:15:3e:e0:c9:12:50:de:01:
6d:2a:ac:3a:81:6d:ff:6c:52:12:22:32:5a:b2:87:
7f:5c:07:1b:77:80:0e:de:a0:db:29:31:9d:e1:e0:
f5:7b:af:f6:86:27:c6:6c:55:18:22:12:03:40:9f:
13:f6:99:89:7f:2d:61:29:d8:d1:ae:23:15:21:d6:
26:2c:8d:2e:2b:f2:1b:43:ba:32:52:c1:ff:18:6a:
e4:84:60:cb:8f:d7:b8:78:dd:21:9e:b4:8c:ce:3a:
1e:68:4e:9a:68:57:d3:66:48:bd:ff:03:a1:5e:ee:
f3:c5:55:2a:14:9d:d5:0d:72:f2:7c:06:81:f7:35:
8d:4e:09:b3:2d:21:2b:99:f9:bc:cf:da:c5:b9:f8:
c6:e6:5e:ea:c5:01:e8:0f:02:e1:54:01:e1:3f:94:
89:ff:e6:96:9c:71:24:28:ed:1a:c5:f2:41:95:ef:
be:4d:35:36:c1:5b:7a:9a:2f:12:52:8c:80:a6:4a:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1B:A6:0C:52:FB:C3:3E:BA:6D:F9:53:A8:0D:7F:FA:3C:36:A5:9D
X509v3 Authority Key Identifier:
keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f3:33:92:77:ae:c9:72:62:23:c0:6b:14:24:31:46:7d:66:
55:ac:cf:56:53:68:17:80:89:6d:fa:a8:98:41:9a:18:1f:c7:
3e:16:c9:6f:91:ed:6f:be:75:a9:84:c8:b7:e6:74:ac:dd:a6:
f0:c6:ba:16:54:de:43:b6:a0:d3:2d:73:d5:07:1a:82:4d:09:
a4:cf:3b:46:18:79:9d:58:12:1f:98:67:43:b4:e2:b6:11:2d:
35:c7:1e:ee:54:94:16:a6:50:57:03:4a:42:2b:ac:a7:04:97:
21:ac:6e:b4:c3:ba:7b:75:40:81:20:bb:c9:46:fb:76:a8:c4:
0f:c1:7d:9b:85:2a:a0:a9:19:f1:c4:f7:c8:f4:92:81:8d:cb:
e5:30:b3:62:fb:6c:12:7f:62:f3:af:8f:15:50:cc:e3:03:f4:
83:66:0e:55:89:50:01:40:3d:6e:0c:9b:c7:0f:fb:20:4b:0f:
bb:1e:f0:37:50:16:c0:c0:22:65:50:41:b4:68:b6:1f:d7:48:
27:2f:ce:1f:43:f3:de:e7:18:d4:62:9b:c6:f0:ae:9c:d2:d0:
10:c3:0a:07:18:26:23:95:1d:07:01:9e:c4:88:a6:1f:54:4d:
42:f0:15:91:56:40:68:3a:40:c2:3b:2c:ca:05:da:11:13:c0:
13:aa:6f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:51:10 2026 by rpki-client