Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json)
Hash identifier: 7mVTOult4hc0sw5BlQeCDK39H4KJ9Z/XCaDZ5Ch6vMg=
Subject key identifier: FA:9D:3B:19:66:40:02:A6:64:22:AC:60:EA:89:C3:C5:0D:C0:1E:E4
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 019E1ED9E6D5666C54FDA90BC80C3084548C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
Manifest number: 1598
Signing time: Wed 13 May 2026 01:00:57 +0000
Manifest this update: Wed 13 May 2026 01:00:57 +0000
Manifest next update: Thu 14 May 2026 01:00:57 +0000
Files and hashes: 1: 3jDJ5a-rblvvz-j2fpP0Sarh3To.roa (hash: +EqyrRTCgEyUFu+EGwkPk5fx5YkNUQzVTN15shVfS7c=)
2: 75s-ByXhLvXCyZa2XbqfAvH6Epk.roa (hash: IX8EC7yBzBqlbwdtd9sbWgqtYLmPYcgtwLxVHX+Gxtw=)
3: 94Xc8WVN98zCBtPvc9dg8oVoYQg.roa (hash: 3RGnY94eAtBBBrUDPAoUekU4damH31o4VU0dSqmKGXg=)
4: 9zGgYV27pcXzRZPYvXsGi_q7u_0.roa (hash: 37bbslR8yNtebmwByAGo/T5zj6zbONI0JTKi+uZYWrc=)
5: A3WTKCACeEMnsJPRt1EtZ_IOE_o.roa (hash: fTMDJzlNdc8urBX1kRcFBR3Pb++06Ji2RDkWJYrM/nE=)
6: GwgBmAn3zMvBSWwkZNC0s2b7Otc.roa (hash: aaLxieN/n3yBrcTTRt8f3C9YEFE8nrKX/yFFAYKui70=)
7: VuEhHAq2HoPe8RVU69XPTei-cE8.roa (hash: Bq3m8GApqW3tKQWVbNfLNzBDZRLHrGvbYKJZWCdv6TI=)
8: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: E3RChpkT+72UhoXJHqUoXKSdHuyo85I5FySgOvrGc40=)
9: tKFH2HoWkbg9bb1yJ7KiMyAru7Q.roa (hash: Hl1JR0aJQiWIXrA53WzTjCP5mFFzxpdo6sRUi29w3iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:e6:d5:66:6c:54:fd:a9:0b:c8:0c:30:84:54:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: May 13 01:00:57 2026 GMT
Not After : May 14 01:00:57 2026 GMT
Subject: CN=fa9d3b19664002a66422ac60ea89c3c50dc01ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:21:bd:82:6d:b3:c0:c3:99:c3:af:f2:23:e9:
eb:13:9d:c9:c1:67:3b:7d:73:f3:41:d7:f9:82:59:
0c:6d:e6:ef:51:33:63:9a:69:1c:c3:45:00:1e:a2:
50:be:56:95:ca:ba:fb:1b:d7:c1:56:e5:33:56:6d:
70:08:62:ce:59:86:1f:01:7c:68:ce:40:ae:80:4f:
e4:45:09:ae:7f:d1:6a:14:12:b4:7b:f5:4d:94:0f:
d0:46:88:7b:43:8e:9b:01:9e:48:8f:93:5b:f1:6f:
e6:5e:40:48:60:d6:77:ab:62:46:e3:f7:dd:82:1a:
8f:24:e1:16:7e:4d:8b:f9:99:64:c8:88:38:f3:40:
22:19:52:cf:20:22:f1:c4:d9:85:cc:a2:91:f9:17:
8a:9f:1e:ed:28:f0:a0:e4:42:81:5f:c4:d1:b8:74:
95:32:a3:70:68:21:87:34:b6:7d:fe:82:ea:4a:33:
c6:79:1d:49:1a:61:23:c9:d3:5b:75:95:77:14:b6:
14:2c:3b:ca:a1:98:2e:7f:5f:66:1b:46:3d:4e:1b:
41:84:41:ac:be:07:c1:ed:f4:42:64:62:70:cc:bd:
47:f3:93:cb:64:19:84:03:60:3c:ec:d0:c8:39:f2:
71:01:43:af:01:e7:0c:8d:d9:66:4f:91:47:cf:2e:
3e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9D:3B:19:66:40:02:A6:64:22:AC:60:EA:89:C3:C5:0D:C0:1E:E4
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:1b:c8:b9:44:c0:65:ef:b8:34:8b:6b:c2:04:ae:12:38:b5:
ef:c6:a0:18:9f:b3:f2:a2:0e:78:3b:23:05:15:93:1c:f5:e3:
1f:c1:c6:70:db:6a:33:25:8c:3a:05:a7:dd:c2:43:94:dc:15:
e1:c5:1f:d8:44:9f:db:c6:35:b6:ea:73:1c:39:62:8c:65:70:
61:a2:2e:c4:92:0c:ca:4a:bc:97:5b:61:42:0a:81:69:5d:ea:
9a:82:e8:a7:a4:59:af:ff:c4:b1:5f:04:5a:e3:a8:db:4a:9b:
e8:28:8a:9c:80:ad:37:9f:cd:e0:fd:70:1a:7a:be:37:ae:16:
fd:6a:59:be:49:e5:15:99:1b:a6:26:e1:5d:1c:8e:93:fd:d0:
a8:25:de:a1:31:53:95:fa:cc:6b:12:7f:11:1d:14:fe:5c:9d:
9c:39:f3:1d:ec:1e:83:bc:fa:c3:06:a0:ee:c0:a8:57:cb:b0:
0b:9d:4f:f8:b7:09:80:63:2f:91:19:86:de:6f:73:8a:bc:51:
c7:ad:bf:f5:55:2a:a8:51:53:47:39:95:f4:d8:f3:37:a1:69:
39:30:2a:11:fd:6e:8f:ba:f2:bd:81:d4:38:a0:90:94:aa:cf:
82:08:29:68:4d:35:22:58:66:8f:3b:ef:d6:35:07:18:92:68:
1e:7a:66:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:15:38 2026 by rpki-client