Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json)
Hash identifier: 1m9pyMjrGMoeKKNDjE46k25a8rOYjBK0fsK3zx6OFUM=
Subject key identifier: ED:2C:26:82:F3:60:7A:68:95:46:3E:FB:7C:21:2E:4A:55:71:0D:CC
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 01A03F7250949246035DE6111FD8C2F6094B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
Manifest number: 16B2
Signing time: Wed 26 Aug 2026 19:00:51 +0000
Manifest this update: Wed 26 Aug 2026 19:00:51 +0000
Manifest next update: Thu 27 Aug 2026 19:00:51 +0000
Files and hashes: 1: 3jDJ5a-rblvvz-j2fpP0Sarh3To.roa (hash: +EqyrRTCgEyUFu+EGwkPk5fx5YkNUQzVTN15shVfS7c=)
2: 75s-ByXhLvXCyZa2XbqfAvH6Epk.roa (hash: IX8EC7yBzBqlbwdtd9sbWgqtYLmPYcgtwLxVHX+Gxtw=)
3: 94Xc8WVN98zCBtPvc9dg8oVoYQg.roa (hash: 3RGnY94eAtBBBrUDPAoUekU4damH31o4VU0dSqmKGXg=)
4: 9zGgYV27pcXzRZPYvXsGi_q7u_0.roa (hash: 37bbslR8yNtebmwByAGo/T5zj6zbONI0JTKi+uZYWrc=)
5: A3WTKCACeEMnsJPRt1EtZ_IOE_o.roa (hash: fTMDJzlNdc8urBX1kRcFBR3Pb++06Ji2RDkWJYrM/nE=)
6: GwgBmAn3zMvBSWwkZNC0s2b7Otc.roa (hash: aaLxieN/n3yBrcTTRt8f3C9YEFE8nrKX/yFFAYKui70=)
7: VuEhHAq2HoPe8RVU69XPTei-cE8.roa (hash: Bq3m8GApqW3tKQWVbNfLNzBDZRLHrGvbYKJZWCdv6TI=)
8: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: nwUgbiiXE4q+nZ/kdjO/xmrw0Sv2L/sCf6gzWzih9as=)
9: tKFH2HoWkbg9bb1yJ7KiMyAru7Q.roa (hash: Hl1JR0aJQiWIXrA53WzTjCP5mFFzxpdo6sRUi29w3iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:72:50:94:92:46:03:5d:e6:11:1f:d8:c2:f6:09:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Aug 26 19:00:51 2026 GMT
Not After : Aug 27 19:00:51 2026 GMT
Subject: CN=ed2c2682f3607a6895463efb7c212e4a55710dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7f:93:79:7d:29:2b:a2:de:c5:e5:7a:5f:c6:
c6:59:1a:3a:a9:77:87:79:f1:0c:88:db:4a:d8:2a:
29:c2:c0:56:2d:1c:70:a8:69:66:8c:b0:90:57:a8:
e1:4c:50:86:5b:6a:a0:50:ce:05:04:9d:1a:32:4f:
a4:03:2d:5c:99:7e:a8:f8:f2:9e:01:0b:c5:d1:1b:
23:c3:ea:66:51:f9:0d:3a:38:90:00:86:a2:08:52:
29:62:43:95:3f:3e:e5:59:a4:2d:4c:c7:77:fa:5f:
49:4d:21:b0:c6:a8:83:c6:49:6d:08:fc:94:0b:3d:
a4:a6:04:44:f0:cb:f4:4d:38:22:c6:42:15:ca:1a:
29:8e:de:e0:62:49:1c:b4:25:05:8f:dd:0b:ea:4a:
19:7f:7b:a3:ee:46:76:cf:46:7e:cf:62:8e:83:fe:
54:a3:ca:cc:11:19:67:9a:a6:46:98:b1:8e:44:49:
b4:a7:9e:9b:1e:a5:58:aa:0d:b3:8e:bb:ce:d4:76:
e9:ed:d5:76:08:95:a0:23:f4:85:56:46:8c:02:69:
e9:e3:88:44:f8:56:14:19:d3:45:a9:cc:09:a7:f7:
e9:fc:bd:fe:e0:d6:50:88:d5:9b:c0:e3:2a:06:59:
c7:ed:93:81:7b:bd:66:fc:e4:4c:da:12:bb:fe:8d:
3e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2C:26:82:F3:60:7A:68:95:46:3E:FB:7C:21:2E:4A:55:71:0D:CC
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:8a:8f:d2:da:ea:b6:52:91:34:cc:fb:8f:69:f7:be:90:0d:
af:8d:c0:97:46:75:0d:cb:f2:2e:f5:2a:fc:6f:0e:e1:66:e0:
ed:5f:7d:3a:c4:3f:9f:a0:cb:b8:e7:ed:aa:1a:a3:b8:e5:7f:
3d:39:89:bf:81:b9:aa:33:b8:69:bb:40:fa:93:91:e3:f7:2b:
c1:e9:a3:b8:dd:6c:0e:c1:0d:58:76:b7:b5:51:55:02:53:14:
d8:2b:98:72:e7:5e:0f:59:e0:e3:6a:87:7a:11:a5:a6:39:f9:
7a:cf:04:92:68:d8:fb:87:c1:4f:28:47:53:99:78:e3:9b:29:
39:8a:cc:c0:6f:8b:05:65:62:3e:9d:11:fd:d1:c2:ef:14:49:
49:54:18:34:18:e0:59:3a:e1:07:07:84:44:1a:cf:80:00:82:
35:11:eb:1b:4a:77:d8:c7:5d:44:bd:b8:c3:a2:b2:d8:48:f1:
ad:d0:54:61:3a:f5:52:6e:77:e8:b9:a5:20:74:f6:ac:c2:d6:
30:82:38:3e:77:10:3c:a5:00:3d:b4:41:4a:95:af:37:7c:24:
cf:cc:c9:1b:4f:b5:3f:d2:19:0f:dc:7d:66:32:ba:3a:05:25:
0e:48:a4:62:54:ed:68:64:67:5e:92:44:27:b4:7b:fe:92:d6:
4d:ec:70:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:37:12 2026 by rpki-client