Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json)
Hash identifier: y1A6e37VFhSs5QmrWPxVbMtHZXQ3rpmhPLcUnt8xFFk=
Subject key identifier: 0C:98:E7:BB:F0:4C:85:A1:26:43:FA:38:E3:63:82:12:05:34:02:61
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 01A132C71D8822A05369E87ADDA82A474008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
Manifest number: 1730
Signing time: Tue 13 Oct 2026 01:01:12 +0000
Manifest this update: Tue 13 Oct 2026 01:01:12 +0000
Manifest next update: Wed 14 Oct 2026 01:01:12 +0000
Files and hashes: 1: 3jDJ5a-rblvvz-j2fpP0Sarh3To.roa (hash: +EqyrRTCgEyUFu+EGwkPk5fx5YkNUQzVTN15shVfS7c=)
2: 75s-ByXhLvXCyZa2XbqfAvH6Epk.roa (hash: IX8EC7yBzBqlbwdtd9sbWgqtYLmPYcgtwLxVHX+Gxtw=)
3: 94Xc8WVN98zCBtPvc9dg8oVoYQg.roa (hash: 3RGnY94eAtBBBrUDPAoUekU4damH31o4VU0dSqmKGXg=)
4: 9zGgYV27pcXzRZPYvXsGi_q7u_0.roa (hash: 37bbslR8yNtebmwByAGo/T5zj6zbONI0JTKi+uZYWrc=)
5: A3WTKCACeEMnsJPRt1EtZ_IOE_o.roa (hash: fTMDJzlNdc8urBX1kRcFBR3Pb++06Ji2RDkWJYrM/nE=)
6: GwgBmAn3zMvBSWwkZNC0s2b7Otc.roa (hash: aaLxieN/n3yBrcTTRt8f3C9YEFE8nrKX/yFFAYKui70=)
7: VuEhHAq2HoPe8RVU69XPTei-cE8.roa (hash: Bq3m8GApqW3tKQWVbNfLNzBDZRLHrGvbYKJZWCdv6TI=)
8: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: Vy9pmD81+CRe/1W0XMrDMvszEXmOPt97LCAIV13DPpo=)
9: tKFH2HoWkbg9bb1yJ7KiMyAru7Q.roa (hash: Hl1JR0aJQiWIXrA53WzTjCP5mFFzxpdo6sRUi29w3iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:c7:1d:88:22:a0:53:69:e8:7a:dd:a8:2a:47:40:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Oct 13 01:01:12 2026 GMT
Not After : Oct 14 01:01:12 2026 GMT
Subject: CN=0c98e7bbf04c85a12643fa38e363821205340261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:a2:6d:93:87:e5:29:c0:9a:43:6a:e5:bd:
63:af:5f:21:39:25:5f:6b:5c:cc:ae:92:6e:36:5a:
1a:8f:47:2f:5e:23:9c:88:58:ea:2b:96:f8:fa:32:
e1:2a:16:97:e1:de:8b:a8:e3:96:0c:86:48:81:54:
26:cd:fb:30:d4:21:5d:60:d8:b3:7c:f4:d1:2d:70:
10:53:54:a6:7d:30:30:eb:40:d8:56:e5:73:42:1a:
11:24:c4:1c:f1:02:31:95:ec:5e:8b:2a:3f:3f:50:
da:a2:a6:0e:bf:f5:df:b5:09:ee:db:ba:0a:54:6d:
05:dd:f5:e0:b4:de:a7:40:62:c9:ad:67:cf:b3:c0:
4d:8a:af:82:a7:d9:56:c6:72:61:72:6c:33:c4:8a:
5a:40:64:c0:95:fc:01:23:d1:b9:9c:3b:7d:22:83:
fe:bf:b8:e5:de:71:bc:4f:fc:b3:cc:70:09:7e:cb:
ee:67:0b:41:ad:b0:15:9a:bd:01:52:1e:eb:84:e3:
4e:10:3b:03:fa:d9:2d:0d:4a:d1:56:b6:1f:bf:92:
06:b5:b8:db:eb:e1:cb:1e:f0:49:27:3d:0d:78:d4:
05:fb:88:cc:6f:ea:f0:83:02:49:47:8f:c5:35:2b:
a9:a6:5d:03:39:70:b1:31:b8:58:f0:13:f7:bc:50:
12:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:98:E7:BB:F0:4C:85:A1:26:43:FA:38:E3:63:82:12:05:34:02:61
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:31:d3:db:cf:28:3e:dd:29:89:cf:a1:6c:40:6f:ed:0e:a5:
0d:de:b0:68:2d:5c:56:5c:87:23:6e:25:46:b9:70:42:3f:81:
88:0e:dd:a7:9e:a8:8c:fc:0e:47:22:36:ab:ee:51:40:c3:f9:
2b:29:69:6b:35:52:46:fc:e3:b7:7e:dd:43:b6:66:70:63:30:
51:9c:07:c9:40:7a:79:22:4a:ee:c3:69:4f:e9:ac:3c:47:34:
ea:39:eb:ce:f6:6e:0c:b0:ff:c1:05:9d:da:f0:af:21:38:59:
e0:7c:b6:6f:67:35:1e:e8:c2:d2:cb:06:3f:31:dc:4c:95:8c:
7a:69:12:95:cc:04:e0:4c:05:ff:2a:11:22:1e:43:b2:86:d9:
eb:4e:6d:c7:93:04:b0:6d:dc:c6:72:a2:55:13:b1:33:5c:e4:
da:2a:53:6c:1a:7b:94:8c:bb:5a:92:e7:0d:aa:49:66:ea:49:
76:60:69:a2:80:d0:10:57:da:7e:35:7f:31:e3:c3:22:f8:7d:
52:c7:e9:e6:f2:da:57:d9:a1:c9:30:c5:82:da:9a:4b:1c:ed:
68:9c:82:a4:3a:3f:4f:3f:a6:1d:11:14:a4:f4:42:66:29:79:
b7:ce:b4:7e:22:c5:55:9d:eb:cf:ac:4f:77:f2:93:5e:c1:49:
c5:58:82:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEyxx2IIqBTaeh63agqR0AIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0
MzI2MTIwHhcNMjYxMDEzMDEwMTEyWhcNMjYxMDE0MDEwMTEyWjAzMTEwLwYDVQQD
EygwYzk4ZTdiYmYwNGM4NWExMjY0M2ZhMzhlMzYzODIxMjA1MzQwMjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG6ibZOH5SnAmkNq5b1jr18hOSVf
a1zMrpJuNloaj0cvXiOciFjqK5b4+jLhKhaX4d6LqOOWDIZIgVQmzfsw1CFdYNiz
fPTRLXAQU1SmfTAw60DYVuVzQhoRJMQc8QIxlexeiyo/P1DaoqYOv/XftQnu27oK
VG0F3fXgtN6nQGLJrWfPs8BNiq+Cp9lWxnJhcmwzxIpaQGTAlfwBI9G5nDt9IoP+
v7jl3nG8T/yzzHAJfsvuZwtBrbAVmr0BUh7rhONOEDsD+tktDUrRVrYfv5IGtbjb
6+HLHvBJJz0NeNQF+4jMb+rwgwJJR4/FNSuppl0DOXCxMbhY8BP3vFAS4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyY57vwTIWhJkP6OONjghIFNAJhMB8GA1UdIwQY
MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt
MmNkZTY1ZjMxMTJhLzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh
LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDHT288o
Pt0pic+hbEBv7Q6lDd6waC1cVlyHI24lRrlwQj+BiA7dp56ojPwORyI2q+5RQMP5
KylpazVSRvzjt37dQ7ZmcGMwUZwHyUB6eSJK7sNpT+msPEc06jnrzvZuDLD/wQWd
2vCvIThZ4Hy2b2c1HujC0ssGPzHcTJWMemkSlcwE4EwF/yoRIh5DsobZ605tx5ME
sG3cxnKiVROxM1zk2ipTbBp7lIy7WpLnDapJZupJdmBpooDQEFfafjV/MePDIvh9
Usfp5vLaV9mhyTDFgtqaSxztaJyCpDo/Tz+mHREUpPRCZil5t860fiLFVZ3rz6xP
d/KTXsFJxViCXw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 04:30:55 2026 by rpki-client