Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json)
Hash identifier: tNFzcCJmHcviP3Q1o4RVt2zMUtfwMZOn8UIM6easgOQ=
Subject key identifier: 27:46:15:81:14:86:15:8C:1C:64:72:37:D7:18:A8:96:7E:7B:B2:70
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 019F4C1E41E3819E24E9292B9B82B607F750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
Manifest number: 1634
Signing time: Fri 10 Jul 2026 13:01:19 +0000
Manifest this update: Fri 10 Jul 2026 13:01:19 +0000
Manifest next update: Sat 11 Jul 2026 13:01:19 +0000
Files and hashes: 1: 3jDJ5a-rblvvz-j2fpP0Sarh3To.roa (hash: +EqyrRTCgEyUFu+EGwkPk5fx5YkNUQzVTN15shVfS7c=)
2: 75s-ByXhLvXCyZa2XbqfAvH6Epk.roa (hash: IX8EC7yBzBqlbwdtd9sbWgqtYLmPYcgtwLxVHX+Gxtw=)
3: 94Xc8WVN98zCBtPvc9dg8oVoYQg.roa (hash: 3RGnY94eAtBBBrUDPAoUekU4damH31o4VU0dSqmKGXg=)
4: 9zGgYV27pcXzRZPYvXsGi_q7u_0.roa (hash: 37bbslR8yNtebmwByAGo/T5zj6zbONI0JTKi+uZYWrc=)
5: A3WTKCACeEMnsJPRt1EtZ_IOE_o.roa (hash: fTMDJzlNdc8urBX1kRcFBR3Pb++06Ji2RDkWJYrM/nE=)
6: GwgBmAn3zMvBSWwkZNC0s2b7Otc.roa (hash: aaLxieN/n3yBrcTTRt8f3C9YEFE8nrKX/yFFAYKui70=)
7: VuEhHAq2HoPe8RVU69XPTei-cE8.roa (hash: Bq3m8GApqW3tKQWVbNfLNzBDZRLHrGvbYKJZWCdv6TI=)
8: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: 4p2DBtO4pl93NURnwExAn2+Yn1fdS3M+KoQG3UTQrG8=)
9: tKFH2HoWkbg9bb1yJ7KiMyAru7Q.roa (hash: Hl1JR0aJQiWIXrA53WzTjCP5mFFzxpdo6sRUi29w3iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:1e:41:e3:81:9e:24:e9:29:2b:9b:82:b6:07:f7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Jul 10 13:01:19 2026 GMT
Not After : Jul 11 13:01:19 2026 GMT
Subject: CN=274615811486158c1c647237d718a8967e7bb270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:95:9b:1b:c7:b6:f9:52:90:7e:bc:f5:25:dc:
a7:4a:bd:aa:f2:54:86:fe:6d:9d:0b:e0:76:a7:74:
1b:09:dd:f8:31:9a:51:11:da:7a:cb:93:d6:33:cd:
dc:d1:60:fb:7b:f9:4d:c4:e5:e8:3a:08:18:25:78:
ff:48:ba:b5:80:5e:73:bd:3c:7c:27:b8:9d:b0:40:
5c:ad:b2:60:2e:7a:b2:8c:d9:79:de:39:9e:c0:90:
5c:fa:3c:5a:70:7f:b6:91:09:9f:a3:f3:d3:f3:f7:
68:79:a0:b6:b4:98:63:db:af:b3:e6:23:d1:7c:59:
99:c1:f2:32:fb:35:f2:0a:44:ac:73:0d:2c:7d:52:
db:76:9a:55:10:4c:a1:65:90:45:53:5c:f8:e5:bb:
52:41:82:ca:8e:d1:fd:1a:e4:b9:b9:2c:aa:78:8d:
ed:75:b3:d8:bd:1e:bd:bd:d5:ea:8c:42:29:7e:e5:
4a:77:60:3c:bb:56:c1:da:25:6b:40:03:19:7e:46:
2a:67:f8:27:57:de:12:62:d7:29:d7:6e:c7:9b:c0:
23:00:48:fb:68:e3:74:3a:f3:a1:0c:34:b4:cf:64:
73:e6:4f:b4:95:53:1e:26:1d:76:9e:54:44:0b:f2:
40:94:fd:64:35:dc:55:9d:ff:fa:41:d5:01:c1:a9:
cf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:46:15:81:14:86:15:8C:1C:64:72:37:D7:18:A8:96:7E:7B:B2:70
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0c:e8:54:32:a9:96:1f:f4:d3:58:4d:2b:f2:15:37:a5:45:
a4:15:19:99:3a:a0:13:31:fe:94:5d:31:23:01:70:6f:a3:42:
e9:0a:62:bf:c4:9e:11:f1:19:56:ab:5f:7a:b5:fd:ed:be:8a:
9c:70:a9:c6:78:b9:36:52:e4:b9:d0:80:1c:27:49:16:ee:d3:
b0:91:45:a0:43:68:33:86:2e:46:8e:b0:1f:e5:4a:1c:df:73:
3a:9c:4c:ea:63:b1:22:4f:33:37:21:21:31:0a:7e:9a:d3:11:
ef:b2:76:30:67:05:69:2f:e3:9e:8c:50:72:2f:ee:ec:1c:b1:
b3:28:8b:97:25:76:53:cc:74:19:46:ef:16:ae:e4:52:b2:bb:
61:09:e7:7e:35:97:40:c0:a9:9e:a3:fc:9b:79:63:38:fc:f5:
fc:c8:e2:6a:78:f5:87:97:4c:40:27:a8:85:b1:3c:f3:13:53:
9c:2a:52:2a:c8:78:ac:07:f2:7e:c6:0a:53:21:bf:0d:20:25:
a0:1d:24:dc:a8:4a:a5:05:1b:a8:64:a7:4e:96:b9:11:29:9f:
88:34:54:23:f5:4a:d1:48:0a:41:ec:4d:56:f9:9e:b4:62:4f:
0a:d8:9e:db:eb:95:fc:ad:a7:ae:f8:9d:bd:06:3b:45:61:be:
27:ed:6a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:05:45 2026 by rpki-client