Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json)
Hash identifier: SArpznUk0XDQkGb1Sqkon7cZpJpoKTELTuLLaGRENC4=
Subject key identifier: 6E:F7:3D:16:95:D2:EB:AA:0D:8E:DB:38:11:97:F4:14:6C:AC:D3:58
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 019EC111BC985A4D6B149D13E2AA1EDB5C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
Manifest number: 15EC
Signing time: Sat 13 Jun 2026 13:00:25 +0000
Manifest this update: Sat 13 Jun 2026 13:00:25 +0000
Manifest next update: Sun 14 Jun 2026 13:00:25 +0000
Files and hashes: 1: 3jDJ5a-rblvvz-j2fpP0Sarh3To.roa (hash: +EqyrRTCgEyUFu+EGwkPk5fx5YkNUQzVTN15shVfS7c=)
2: 75s-ByXhLvXCyZa2XbqfAvH6Epk.roa (hash: IX8EC7yBzBqlbwdtd9sbWgqtYLmPYcgtwLxVHX+Gxtw=)
3: 94Xc8WVN98zCBtPvc9dg8oVoYQg.roa (hash: 3RGnY94eAtBBBrUDPAoUekU4damH31o4VU0dSqmKGXg=)
4: 9zGgYV27pcXzRZPYvXsGi_q7u_0.roa (hash: 37bbslR8yNtebmwByAGo/T5zj6zbONI0JTKi+uZYWrc=)
5: A3WTKCACeEMnsJPRt1EtZ_IOE_o.roa (hash: fTMDJzlNdc8urBX1kRcFBR3Pb++06Ji2RDkWJYrM/nE=)
6: GwgBmAn3zMvBSWwkZNC0s2b7Otc.roa (hash: aaLxieN/n3yBrcTTRt8f3C9YEFE8nrKX/yFFAYKui70=)
7: VuEhHAq2HoPe8RVU69XPTei-cE8.roa (hash: Bq3m8GApqW3tKQWVbNfLNzBDZRLHrGvbYKJZWCdv6TI=)
8: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: 8o1MWHVjyvdcdBfKZCRPN3t3UwlUMJLKX2JjjWm1Dqc=)
9: tKFH2HoWkbg9bb1yJ7KiMyAru7Q.roa (hash: Hl1JR0aJQiWIXrA53WzTjCP5mFFzxpdo6sRUi29w3iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:bc:98:5a:4d:6b:14:9d:13:e2:aa:1e:db:5c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Jun 13 13:00:25 2026 GMT
Not After : Jun 14 13:00:25 2026 GMT
Subject: CN=6ef73d1695d2ebaa0d8edb381197f4146cacd358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:61:ab:65:40:71:62:56:bb:d4:1e:91:a9:
9a:40:b0:f7:fe:5b:62:5d:79:dc:e0:29:2e:7a:db:
01:94:28:ea:29:10:75:8e:c2:a6:97:0c:0a:fa:b8:
3c:1a:5d:d0:9f:53:67:49:b0:1a:27:32:92:e8:61:
2a:73:4b:82:d2:31:a5:14:25:b0:11:4f:01:fc:e2:
9c:5b:27:8c:fc:a8:84:79:f5:cb:4b:ef:11:aa:76:
33:ea:f8:a7:5a:d6:ec:c8:20:b6:e6:bd:44:cd:2f:
3f:be:52:38:36:db:7a:27:0a:c4:71:4c:16:23:f6:
ef:00:a2:8b:03:cc:f1:7f:37:70:ec:ef:3d:d1:d0:
30:11:4b:9b:63:dc:79:4e:5a:3a:a3:13:2b:6c:b8:
a3:7d:63:13:35:ad:22:28:a8:f7:e3:e8:f2:b5:ac:
84:8a:1b:6a:79:f2:c3:af:ac:74:6f:3a:26:27:f1:
f6:78:df:c8:4e:d6:72:7a:17:b6:25:32:71:19:af:
5b:2e:ed:08:08:de:ba:fc:88:cc:55:d2:b1:0e:c2:
c3:03:a0:67:be:3c:8b:78:0c:c2:c0:77:5d:e8:58:
8e:0c:de:af:bc:1d:0b:62:be:16:e2:da:bc:03:0f:
a0:d1:31:28:cb:5b:3e:95:00:7e:8a:2e:a4:68:fd:
9e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F7:3D:16:95:D2:EB:AA:0D:8E:DB:38:11:97:F4:14:6C:AC:D3:58
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c0:68:15:22:f7:88:59:a7:16:4a:ce:9e:13:75:51:07:53:
58:73:10:97:10:aa:50:20:d5:f8:ce:c3:26:5e:53:56:65:90:
ce:04:15:2a:78:a9:d4:18:53:af:53:ab:22:6b:bd:c9:d1:0b:
06:07:32:c4:d9:3c:dc:7d:9d:e0:00:66:46:a4:53:ae:0a:3b:
ff:63:f5:0f:b8:fc:41:44:f3:4a:78:96:c8:7f:50:a2:19:8a:
2c:b2:4e:01:79:da:72:d4:e1:85:59:b1:7a:17:33:fb:55:95:
c1:84:6a:bf:01:14:30:ac:ae:ba:d3:24:a7:28:86:08:a7:f8:
58:f6:a0:2d:3e:de:72:af:ed:18:a5:b9:5b:f1:5d:6c:1f:a5:
70:22:48:e7:12:26:7f:6a:72:20:80:8f:1c:b9:2a:2c:eb:a4:
35:aa:8c:a3:d5:a1:c3:c1:c0:02:a5:a8:e2:17:ef:e2:64:0b:
80:91:f1:28:77:b5:be:5b:84:e3:12:d6:9f:da:ec:df:84:9e:
f3:ba:16:d7:4d:78:b5:d9:4b:6a:20:3e:e7:a2:0a:a6:b7:9e:
ca:c2:f1:8a:72:fa:d6:40:69:d5:a6:a8:30:42:55:75:7b:26:
c2:1e:41:29:bb:d4:d8:0f:28:61:21:5e:0b:95:26:f9:9e:b1:
f1:e0:30:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:37:35 2026 by rpki-client