Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json)
Hash identifier: iN3Hp2wSimIwqHTOB8seJNK3qB3flwzKv5G6rCM1S5w=
Subject key identifier: 17:D6:74:12:F3:10:AF:ED:55:D8:66:AD:51:C6:E8:22:56:6B:DD:DE
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 01A0C4B2D3597E8507D80DE0728900A735F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
Manifest number: 16F7
Signing time: Mon 21 Sep 2026 16:00:48 +0000
Manifest this update: Mon 21 Sep 2026 16:00:48 +0000
Manifest next update: Tue 22 Sep 2026 16:00:48 +0000
Files and hashes: 1: 3jDJ5a-rblvvz-j2fpP0Sarh3To.roa (hash: +EqyrRTCgEyUFu+EGwkPk5fx5YkNUQzVTN15shVfS7c=)
2: 75s-ByXhLvXCyZa2XbqfAvH6Epk.roa (hash: IX8EC7yBzBqlbwdtd9sbWgqtYLmPYcgtwLxVHX+Gxtw=)
3: 94Xc8WVN98zCBtPvc9dg8oVoYQg.roa (hash: 3RGnY94eAtBBBrUDPAoUekU4damH31o4VU0dSqmKGXg=)
4: 9zGgYV27pcXzRZPYvXsGi_q7u_0.roa (hash: 37bbslR8yNtebmwByAGo/T5zj6zbONI0JTKi+uZYWrc=)
5: A3WTKCACeEMnsJPRt1EtZ_IOE_o.roa (hash: fTMDJzlNdc8urBX1kRcFBR3Pb++06Ji2RDkWJYrM/nE=)
6: GwgBmAn3zMvBSWwkZNC0s2b7Otc.roa (hash: aaLxieN/n3yBrcTTRt8f3C9YEFE8nrKX/yFFAYKui70=)
7: VuEhHAq2HoPe8RVU69XPTei-cE8.roa (hash: Bq3m8GApqW3tKQWVbNfLNzBDZRLHrGvbYKJZWCdv6TI=)
8: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: 2Q5B0el9Jm3JcMt62+xmBEbW3L7U3E+IQpYsUVkHX6s=)
9: tKFH2HoWkbg9bb1yJ7KiMyAru7Q.roa (hash: Hl1JR0aJQiWIXrA53WzTjCP5mFFzxpdo6sRUi29w3iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:d3:59:7e:85:07:d8:0d:e0:72:89:00:a7:35:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Sep 21 16:00:48 2026 GMT
Not After : Sep 22 16:00:48 2026 GMT
Subject: CN=17d67412f310afed55d866ad51c6e822566bddde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:d3:c7:0b:80:95:0a:ee:aa:f3:9c:1c:77:
93:8b:19:c7:d7:17:d8:e7:cd:80:ba:47:9d:0d:d8:
ce:ad:fb:e9:50:35:1c:ef:f4:74:6e:c7:e4:a1:59:
48:6e:1e:9d:03:a8:a2:72:e3:0c:ee:08:7b:a7:f3:
21:c8:55:49:21:cc:c1:90:db:2a:ae:c7:70:15:fd:
27:ed:a0:18:f3:da:83:d4:fd:9b:97:b9:e3:2a:e2:
05:50:bf:12:9c:7c:ce:64:76:1f:53:3e:13:c2:a3:
19:6e:a6:c5:8f:4d:a9:c8:f3:80:21:e6:67:98:a9:
11:a7:00:4f:78:8b:98:05:4f:7e:d2:d1:f9:7b:67:
74:a3:51:32:31:06:96:cd:5f:5e:ab:ee:fb:86:37:
0f:74:08:44:80:30:79:12:19:88:83:7f:ab:9a:e3:
d8:5f:75:78:45:59:1d:6b:1d:de:91:2c:ac:f5:31:
2c:33:c6:5a:73:f4:1a:9b:55:83:70:95:05:42:d0:
7f:01:a9:2f:d1:66:e5:4e:a5:b4:70:55:b7:ff:e8:
44:4f:af:5b:72:07:99:38:f8:08:08:14:f6:10:74:
31:95:16:71:1b:7d:4f:78:f2:e3:4a:22:05:6c:63:
55:a5:f0:94:eb:be:5c:bb:ae:97:19:6a:71:cf:06:
d9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D6:74:12:F3:10:AF:ED:55:D8:66:AD:51:C6:E8:22:56:6B:DD:DE
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:15:40:52:88:f9:51:1a:d4:17:86:4f:9b:b1:25:38:90:1d:
a2:9d:96:40:e7:d4:53:a7:4b:48:2c:be:26:a7:a1:27:62:d1:
c7:cc:3f:d5:80:a7:78:08:f8:3b:62:48:39:63:42:98:18:54:
4d:0f:5f:89:db:f4:f9:5a:1f:5b:a0:43:33:09:1a:2a:de:ea:
ca:63:65:dd:2c:f3:d7:2c:01:3c:d2:e9:41:8c:4f:2c:12:e3:
f1:76:63:2e:74:fe:f6:16:62:95:07:d4:4c:f2:a7:00:19:14:
0f:9f:7e:7c:2a:cc:c7:e5:12:16:37:d2:70:23:63:44:ee:1a:
35:81:f3:0e:73:54:e1:d3:bd:1e:f3:15:7f:e4:bf:10:e8:16:
80:f1:cb:9f:1f:53:45:e1:ba:99:3e:f1:ad:81:60:4a:bd:bb:
46:d1:5b:39:40:79:90:81:25:cc:df:c6:a9:a2:e6:95:05:91:
12:84:1a:b4:e9:5f:c0:44:9d:97:3d:e3:db:c2:d7:55:9c:02:
53:15:c8:c6:22:fc:b7:99:ad:6b:a9:59:ab:ea:05:3e:fe:d0:
7c:e6:99:a6:f5:30:3c:84:85:d0:b3:36:9d:e8:18:94:e0:3c:
39:e5:da:f1:77:56:26:50:58:b6:dd:bc:10:db:1f:51:23:23:
54:6a:14:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:27:00 2026 by rpki-client