Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json)
Hash identifier: b68yPfGJCk49nWoUcJu50s06eDKQ2RslV8cJpjBjjhI=
Subject key identifier: 1C:F5:E4:90:85:59:EA:92:13:52:BF:C5:E9:F7:A3:8A:6F:0B:3D:6C
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 019E322A30CEC45F31C1F673F476878BE3ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
Manifest number: 15A2
Signing time: Sat 16 May 2026 19:01:26 +0000
Manifest this update: Sat 16 May 2026 19:01:26 +0000
Manifest next update: Sun 17 May 2026 19:01:26 +0000
Files and hashes: 1: 3jDJ5a-rblvvz-j2fpP0Sarh3To.roa (hash: +EqyrRTCgEyUFu+EGwkPk5fx5YkNUQzVTN15shVfS7c=)
2: 75s-ByXhLvXCyZa2XbqfAvH6Epk.roa (hash: IX8EC7yBzBqlbwdtd9sbWgqtYLmPYcgtwLxVHX+Gxtw=)
3: 94Xc8WVN98zCBtPvc9dg8oVoYQg.roa (hash: 3RGnY94eAtBBBrUDPAoUekU4damH31o4VU0dSqmKGXg=)
4: 9zGgYV27pcXzRZPYvXsGi_q7u_0.roa (hash: 37bbslR8yNtebmwByAGo/T5zj6zbONI0JTKi+uZYWrc=)
5: A3WTKCACeEMnsJPRt1EtZ_IOE_o.roa (hash: fTMDJzlNdc8urBX1kRcFBR3Pb++06Ji2RDkWJYrM/nE=)
6: GwgBmAn3zMvBSWwkZNC0s2b7Otc.roa (hash: aaLxieN/n3yBrcTTRt8f3C9YEFE8nrKX/yFFAYKui70=)
7: VuEhHAq2HoPe8RVU69XPTei-cE8.roa (hash: Bq3m8GApqW3tKQWVbNfLNzBDZRLHrGvbYKJZWCdv6TI=)
8: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: vaNNYkjQCe5IT4fTI8BeO7/uhZWUsycD/gXrtBKPE48=)
9: tKFH2HoWkbg9bb1yJ7KiMyAru7Q.roa (hash: Hl1JR0aJQiWIXrA53WzTjCP5mFFzxpdo6sRUi29w3iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:2a:30:ce:c4:5f:31:c1:f6:73:f4:76:87:8b:e3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: May 16 19:01:26 2026 GMT
Not After : May 17 19:01:26 2026 GMT
Subject: CN=1cf5e4908559ea921352bfc5e9f7a38a6f0b3d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:df:d1:50:25:bd:f3:3e:05:ab:79:ec:c2:17:
1d:4f:03:b8:ad:52:a6:99:a4:f2:68:22:00:c4:e2:
a8:68:13:4c:aa:87:e4:62:ba:b5:41:d8:34:fc:c6:
a4:f2:ce:e4:5d:21:f3:39:c9:4d:ba:94:49:4a:bc:
fe:b2:54:84:76:75:94:18:90:68:02:3d:36:46:63:
82:4b:44:da:73:df:23:dc:41:20:d5:74:2a:98:a4:
0c:59:3d:5e:a6:92:5a:fe:28:43:59:21:d0:67:6b:
06:ec:0c:88:dc:0d:5a:7b:2b:2e:0f:75:2c:75:d8:
7d:c6:e0:1b:1b:66:47:df:a5:46:8a:de:14:02:e7:
2c:28:a0:ed:ac:09:47:af:74:97:89:f2:cb:d7:4c:
da:ab:14:35:cf:99:d6:a0:c6:3b:27:2e:91:bc:d8:
bc:34:1e:b8:82:25:80:4e:96:40:ea:62:e0:32:dc:
8e:15:a1:13:dc:8e:8a:17:b7:ab:f3:1a:18:ae:29:
d3:9b:9a:4a:fe:ae:7d:75:e1:e4:2a:22:1b:75:4f:
da:44:e4:ed:dc:5b:93:7d:30:5a:6c:5d:26:80:1a:
9a:ce:38:2a:c7:fc:67:0b:d2:89:4f:9b:df:ab:b5:
bf:77:91:d7:eb:58:05:6f:c3:24:7b:76:2f:1d:83:
bd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F5:E4:90:85:59:EA:92:13:52:BF:C5:E9:F7:A3:8A:6F:0B:3D:6C
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:88:14:65:d7:aa:c2:19:e3:e7:04:26:2f:31:84:4b:76:10:
9b:3e:45:df:1d:0c:8f:0d:29:71:e7:f6:aa:4a:2b:27:f5:15:
ec:f0:0d:c3:ec:87:90:31:cd:cc:2b:4a:26:03:d3:c9:a2:a0:
b0:5d:e4:bd:91:d7:6e:91:ca:6f:32:9e:2f:10:c3:df:c3:da:
1b:82:b9:45:45:b2:65:a7:86:51:91:a4:8e:4e:b4:b6:b4:fd:
9c:0c:54:dc:73:b3:92:fd:a4:cc:65:bc:e0:95:c3:b6:62:d1:
65:bd:82:68:27:8c:b1:08:03:b0:97:45:82:e2:53:0b:50:11:
af:4f:f3:20:65:26:29:f5:f7:28:72:d0:01:01:8d:97:ae:d6:
3a:a1:36:be:80:4f:98:30:1d:fb:18:35:f3:01:28:7c:29:64:
33:45:ec:cd:2e:e6:87:7b:c6:d2:67:46:fd:37:5f:a2:8c:a7:
0f:e4:89:60:8c:64:0a:66:91:6c:a2:22:3b:c1:a0:1a:12:61:
21:8f:8e:57:66:54:ea:b4:83:27:4f:06:4c:60:39:b9:88:8d:
99:a6:7d:1b:d3:25:78:52:72:00:0b:13:51:63:79:c3:7c:bd:
ec:51:a2:0e:36:0c:4e:c8:4c:a5:87:31:40:65:d9:88:9d:33:
7b:5a:fe:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:30:36 2026 by rpki-client